Edit tour

Windows Analysis Report
http://bankwir.com/

Overview

General Information

Sample URL:	http://bankwir.com/
Analysis ID:	1523036
Tags:	urlscan
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1708 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3592 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=2184,i,7239552655901931415,17710681725114952505,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6932 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://bankwir.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /service/common.php HTTP/1.1Host: sedo.comConnection: keep-aliveContent-Length: 45sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://sedo.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sedo.com/us/park-domains/?tracked=&partnerid=&language=usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US

Source: chromecache_226.2.dr, chromecache_245.2.dr	String found in binary or memory: http://ns.attribution.com/ads/1.0/
Source: chromecache_140.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqkJY-jySVFEzuVAbKhhopkpTm1ii
Source: chromecache_147.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlLPj13THtKBF-aJdB7fpkn0FmZP
Source: chromecache_140.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlOut1prwKJps2O8ydGQjoOUbYYd
Source: chromecache_124.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlxJ0Dh13zDUIXc_C8SfMMTbpTtl
Source: chromecache_147.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqm5WVQdUf7qJ-9s-EWNG9O-OZuKw
Source: chromecache_241.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmjPLXAimMMOH1Tlz6VaWtBVKsqQ
Source: chromecache_124.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqn7py5dd3f6VNtX2AgAAkSiZ3kVO
Source: chromecache_241.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnmIzyDTcsQv1Im8xTL_S9biwgke
Source: chromecache_137.2.dr	String found in binary or memory: https://afs.googleusercontent.com/svg/right_arrow.svg
Source: chromecache_201.2.dr, chromecache_211.2.dr	String found in binary or memory: https://app.usercentrics.eu/browser-ui/latest/loader.js
Source: chromecache_201.2.dr, chromecache_211.2.dr	String found in binary or memory: https://app.varify.io/varify.js
Source: chromecache_138.2.dr, chromecache_166.2.dr	String found in binary or memory: https://beian.miit.gov.cn/
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/dist/js/deprecated/typescript/static/app.min.js
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/images/icons/apple-touch-icon.png?v=dLJ3bx2xjj
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/images/icons/favicon-16x16.png?v=dLJ3bx2xjj
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/images/icons/favicon-32x32.png?v=dLJ3bx2xjj
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/images/icons/favicon.ico?v=dLJ3bx2xjj
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/images/icons/safari-pinned-tab.svg?v=dLJ3bx2xjj
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/images/icons/site.webmanifest?v=dLJ3bx2xjj
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/c7r/assets/static/libs/external/jquery-ui.min.js
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/components/TfcP3WYRyZ9A/cookie-banner.min.js
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/components/p9HJ4M2Uz7U4/full.header.min.js
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/components/zkLxDsbw1hz2/full.footer.min.js
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/dist/css/typo3/main.css?1724922195
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/dist/js/typo3/app.min.js?1724922195
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Domain-Parking-Profis.jpg
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Domain-Parking.jpg
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Parking_50-50_1420x1082_EN.jpg
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Parking_einrichten.jpg
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin/user_upload/Sell_Domains/Domain_Auction/FAQ.jpg
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin/user_upload/park-domains_bild.png
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin_git/resources/public/JavaScripts/jquery-3.7.1.min.js?1724921946
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/fileadmin_git/resources/public/JavaScripts/splide.min.js?1724921946
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/typo3temp/assets/js/4c6258062633129d69aecce4f0023d9c.js?1718178726
Source: chromecache_160.2.dr	String found in binary or memory: https://cdn.sedo.com/typo3temp/assets/js/cfd16b174d7f7b046e20adbc2e0a1094.js?1689601391
Source: chromecache_201.2.dr, chromecache_211.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_160.2.dr	String found in binary or memory: https://faq-us.sedo.com/app/answers/detail/a_id/1168/kw/what%20is%20domain%20parking/search/1
Source: chromecache_160.2.dr	String found in binary or memory: https://faq-us.sedo.com/app/answers/detail/a_id/2827/kw/park/search/1
Source: chromecache_160.2.dr	String found in binary or memory: https://faq-us.sedo.com/app/answers/detail/a_id/689/kw/park/search/1
Source: chromecache_234.2.dr, chromecache_220.2.dr, chromecache_168.2.dr, chromecache_230.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_148.2.dr	String found in binary or memory: https://frontend-services.ionos.com/t/tag/SEDO/customerarea.js
Source: chromecache_171.2.dr, chromecache_136.2.dr	String found in binary or memory: https://jqueryui.com
Source: chromecache_234.2.dr, chromecache_220.2.dr, chromecache_168.2.dr, chromecache_230.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_234.2.dr, chromecache_220.2.dr, chromecache_168.2.dr, chromecache_230.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_140.2.dr, chromecache_241.2.dr	String found in binary or memory: https://search.yahoo.com/search/results
Source: chromecache_160.2.dr	String found in binary or memory: https://sedo.com/member/domainsignup/index.php?language=us
Source: chromecache_201.2.dr, chromecache_211.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_201.2.dr, chromecache_211.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_234.2.dr, chromecache_220.2.dr, chromecache_168.2.dr, chromecache_230.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_166.2.dr	String found in binary or memory: https://twitter.com/sedo
Source: chromecache_166.2.dr	String found in binary or memory: https://twitter.com/sedoDE
Source: chromecache_160.2.dr	String found in binary or memory: https://typo3.org/
Source: chromecache_160.2.dr	String found in binary or memory: https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
Source: chromecache_147.2.dr, chromecache_124.2.dr	String found in binary or memory: https://www.cbna.com/
Source: chromecache_234.2.dr, chromecache_220.2.dr, chromecache_168.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_124.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwi8oaHH3uuIAxU9UZEFHUpGFGcYABAAGgJscg
Source: chromecache_124.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwi8oaHH3uuIAxU9UZEFHUpGFGcYABABGgJscg
Source: chromecache_124.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwi8oaHH3uuIAxU9UZEFHUpGFGcYABACGgJscg
Source: chromecache_147.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwij9rm53uuIAxX2nYMHHa-9KDMYABAAGgJlZg
Source: chromecache_147.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwij9rm53uuIAxX2nYMHHa-9KDMYABABGgJlZg
Source: chromecache_147.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwij9rm53uuIAxX2nYMHHa-9KDMYABACGgJlZg
Source: chromecache_140.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwijoMfD3uuIAxW1nYMHHbVsBzsYABAAGgJlZg
Source: chromecache_140.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwijoMfD3uuIAxW1nYMHHbVsBzsYABABGgJlZg
Source: chromecache_140.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwijoMfD3uuIAxW1nYMHHbVsBzsYABACGgJlZg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjD5J693uuIAxVrkYMHHd81IMkYABAAGgJlZg
Source: chromecache_241.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjvhdy33uuIAxVrkYMHHd81IMkYABAAGgJlZg
Source: chromecache_241.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjvhdy33uuIAxVrkYMHHd81IMkYABABGgJlZg
Source: chromecache_241.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwjvhdy33uuIAxVrkYMHHd81IMkYABACGgJlZg
Source: chromecache_234.2.dr, chromecache_220.2.dr, chromecache_168.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_201.2.dr, chromecache_211.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_138.2.dr, chromecache_166.2.dr	String found in binary or memory: https://www.paypal.com/cn/selfhelp/home
Source: chromecache_138.2.dr, chromecache_166.2.dr	String found in binary or memory: https://www.paypal.com/de/selfhelp/home
Source: chromecache_166.2.dr	String found in binary or memory: https://www.paypal.com/es/selfhelp/home
Source: chromecache_138.2.dr, chromecache_166.2.dr	String found in binary or memory: https://www.paypal.com/pt/selfhelp/home
Source: chromecache_138.2.dr, chromecache_166.2.dr	String found in binary or memory: https://www.paypal.com/us/selfhelp/home
Source: chromecache_241.2.dr	String found in binary or memory: https://www.signnow.com/
Source: chromecache_140.2.dr	String found in binary or memory: https://www.ufbdirect.com/freedomchecking/bundle
Source: chromecache_138.2.dr, chromecache_166.2.dr	String found in binary or memory: https://www.united-internet.de/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.united-internet.de/en.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49728 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@24/208@72/22

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=2184,i,7239552655901931415,17710681725114952505,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://bankwir.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=2184,i,7239552655901931415,17710681725114952505,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://connect.facebook.net/en_US/fbevents.js	0%	URL Reputation	safe
http://ns.attribution.com/ads/1.0/	0%	URL Reputation	safe
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0	0%	URL Reputation	safe
https://jqueryui.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
api.usercentrics.eu	35.241.3.184	true	false	unknown
www.sedo.com	104.16.140.114	true	false	unknown
bankwir.com	162.255.119.21	true	false	unknown
app.usercentrics.eu	35.190.14.188	true	false	unknown
sedo.cachefly.net	205.234.175.175	true	false	unknown
sedo.com	104.16.141.114	true	false	unknown
syndicatedsearch.goog	142.250.185.110	true	false	unknown
cdn.sedo.com	104.16.140.114	true	false	unknown
parkingpage.namecheap.com	91.195.240.19	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
uct.service.usercentrics.eu	34.95.108.180	true	false	unknown
vip1.g5.cachefly.net	205.234.175.175	true	false	unknown
consent-api.service.consent.usercentrics.eu	35.201.111.240	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
widget.trustpilot.com	52.222.236.60	true	false	unknown
googlehosted.l.googleusercontent.com	172.217.18.1	true	false	unknown
afs.googleusercontent.com	unknown	unknown	false	unknown
img.sedoparking.com	unknown	unknown	false	unknown
www.bankwir.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.sedo.com/c7r/assets/static/libs/external/jquery-ui.min.js	false		unknown
https://consent-api.service.consent.usercentrics.eu/consent/uw/3	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/VirtualServiceItem-d95151cb.js	false		unknown
https://cdn.sedo.com/fileadmin/images/legacy/images/icons/icn-check-beige.svg	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=v9j5kxslamme&aqid=6yj7ZoLRH-rdjuwPstOM8QY&psid=3259787283&pbt=bs&adbx=385.203125&adby=413.015625&adbh=571&adbw=493&adbah=212%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=20%7C0%7C1376%7C2057%7C783&lle=0&ifv=1&hpt=0	false		unknown
https://sedo.com/us/park-domains/?tracked=&partnerid=&language=us	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/FirstLayerCustomization-de8ec6f3-0ed66d66.js	false		unknown
https://cdn.sedo.com/components/TfcP3WYRyZ9A/cookie-banner.min.js	false		unknown
https://cdn.sedo.com/components/zkLxDsbw1hz2/e3c69f63348c1ec6e547.png	false		unknown
https://cdn.sedo.com/components/zkLxDsbw1hz2/b75b73e313804cf110ea.svg	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/index.module.js	false		unknown
http://sedo.com/redirect.php?id=22	false		unknown
https://afs.googleusercontent.com/svg/right_arrow.svg	false		unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=ajf1s0f0ifll&aqid=FSn7ZoOGLOuijuwP3-uAyQw&psid=3259787283&pbt=bs&adbx=442.0625&adby=373.359375&adbh=1026&adbw=379&adbah=334%2C334%2C358&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=18%7C0%7C-4781439%7C5%7C4784418&lle=0&ifv=1&hpt=1	false		unknown
https://www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/index-4d0d6d10.js	false		unknown
https://cdn.sedo.com/c7r/assets/static/images/icons/favicon.ico?v=dLJ3bx2xjj	false		unknown
http://img.sedoparking.com/templates/bg/arrows-curved.png	false		unknown
https://www.google.com/images/afs/snowman.png	false		unknown
https://cdn.sedo.com/typo3temp/assets/js/4c6258062633129d69aecce4f0023d9c.js?1718178726	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=9s2srwsu99nc&aqid=Cin7Zu_YCOuijuwP3-uAyQw&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1203&adbw=379&adbah=401%2C401%2C401&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=23%7C0%7C-4782737%7C12%7C4785046&lle=0&ifv=1&hpt=1	false		unknown
https://cdn.sedo.com/fileadmin_git/resources/public/JavaScripts/splide.min.js?1724921946	false		unknown
https://sedo.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js?	false		unknown
https://sedo.com/service/common.php?v=0.1&m=translate&f=getTexts&language=us&app=com.sedo.translation.global	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/ButtonsCustomization-5698ac85-5d43b15f.js	false		unknown
https://sedo.com/services/parking.php3	false		unknown
http://www.bankwir.com/search/tsc.php?ses=ogcQkbQpzTES3IebH-jL7XHjZBaJcAFoaSa-avJH62SFZ15x2TZWk5GCiUOcmmFAix2mUIhlcIacIOBT4ovgKwAARzX-W2gTMrxEGA62NTxSdgOb30zCDj2huDe6QDewz05_n2ib87RzA7Hsxwue3b9rz7vpxsDSy3FnfxvKgaPoEPsS9-LHgsEn40EKANf-1ToBovE_SHVODsfDg4wbme94iYHhL3DRwEZLpVgxIXa0AJd0YVF6ofq-nPg3OmTUQ9wHwzYgefz5yDvfHIiyADevu-zfd3DlJ_-rlaeDJ24haWRQ7ORilmszsxqyBu4IZt6zsPA7cZAdO1JXAYHQQONrYWiYTo3vGT8lqK-0a5gkbJPdGPuDLXlIXfg&cv=2	false		unknown
https://api.usercentrics.eu/translations/translations-en.json	false		unknown
https://syndicatedsearch.goog/afs/ads/i/iframe.html	false		unknown
https://cdn.sedo.com/components/p9HJ4M2Uz7U4/d26139c0fd3b917ce03b.woff2	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=g2y9xf98rbdi&aqid=Iin7ZqOHO7W7juwPtdmd2AM&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1232&adbw=379&adbah=401%2C401%2C430&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=15%7C0%7C-4783771%7C8%7C4784389&lle=0&ifv=1&hpt=1	false		unknown
https://cdn.sedo.com/components/zkLxDsbw1hz2/d5634a838071888dbd2a.png	false		unknown
https://app.usercentrics.eu/browser-ui/latest/loader.js	false		unknown
https://app.usercentrics.eu/session/1px.png?settingsId=5QJe3R54G	false		unknown
https://cdn.sedo.com/components/zkLxDsbw1hz2/48d68b70659b28905e87.jpg	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/DefaultData-fa10cf7f-3d7db9aa.js	false		unknown
http://img.sedoparking.com/templates/logos/sedo_logo.png	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/SecondLayerUI-2d936468-4fd84b50.js	false		unknown
https://app.usercentrics.eu/browser-sdk/4.38.4/cross-domain-bridge.html	false		unknown
http://www.bankwir.com/search/tsc.php?ses=ogcOvUmN52CO_eKsS5JZzE0wynRpt6QbiS6sAHuO_6msznjeTMydQ93ointIivefiiMkkBN_NZP1WxDDsxt58gmUI3k7v-SyUMSMr2tGGCjigQ7KWxayEJJgFOj_5eggQILa25IYaBcIfHpeOUsJz8ZWbj9Isa1HKZefUYxR9gqczds4rqBm0yCZ7J1Jf6c7wbfB7U7yeSJmHNLobTZ93Kck3FGEtHrIs6Hs0zIgy_lpTBM6wGPDV0TmKYKguw-dhwwuXdAXisOicYz3810tShNiPEEjuJnuYzeKyjojdjxmg6E49xGGmDuUa9wzlLggqxKPZ6vddXV_a_t5qGbkpK3crZZGymFtcClYf7VUApPj_TtA9upvttLb_lb&cv=2	false		unknown
https://cdn.sedo.com/typo3temp/assets/js/cfd16b174d7f7b046e20adbc2e0a1094.js?1689601391	false		unknown
https://api.usercentrics.eu/settings/5QJe3R54G/latest/en.json	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=zguyri9jkluj&aqid=Kin7ZrzkLL2ixdwPyozRuAY&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1410&adbw=379&adbah=550%2C430%2C430&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=23%7C0%7C2141%7C1367%7C4554&lle=0&ifv=1&hpt=1	false		unknown
https://cdn.sedo.com/fileadmin_git/resources/public/JavaScripts/jquery-3.7.1.min.js?1724921946	false		unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0	false	URL Reputation: safe	unknown
http://www.bankwir.com/	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=fndbf5aaed6e&aqid=Iin7ZqOHO7W7juwPtdmd2AM&psid=3259787283&pbt=bs&adbx=442.0625&adby=373.359375&adbh=1232&adbw=379&adbah=401%2C401%2C430&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=15%7C0%7C-4783771%7C8%7C4784389&lle=0&ifv=1&hpt=1	false		unknown
https://sedo.com/cdn-cgi/challenge-platform/h/g/jsd/r/8cb7b7b79a0b42be	false		unknown
https://img.sedoparking.com/templates/images/hero_nc.svg	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=lp9u7lxh6zn6&aqid=FSn7ZoOGLOuijuwP3-uAyQw&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1026&adbw=379&adbah=334%2C334%2C358&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=18%7C0%7C-4781439%7C5%7C4784418&lle=0&ifv=1&hpt=1	false		unknown
https://cdn.sedo.com/fileadmin/images/legacy/images/icons/icn-check-blue.svg	false		unknown
https://cdn.sedo.com/dist/js/typo3/app.min.js?1724922195	false		unknown
https://sedo.com/redirect.php?id=22	false		unknown
https://cdn.sedo.com/components/p9HJ4M2Uz7U4/b75b73e313804cf110ea.svg	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/SaveButton-c74cbe89.js	false		unknown
https://app.usercentrics.eu/browser-ui/3.55.0/index-3ff76a26.js	false		unknown
https://sedo.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	false		unknown
https://cdn.sedo.com/fileadmin/user_upload/Sell_Domains/Domain_Auction/FAQ.jpg	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=lrsy5ttgkmyk&aqid=6yj7ZoLRH-rdjuwPstOM8QY&psid=3259787283&pbt=bv&adbx=385.203125&adby=413.015625&adbh=571&adbw=493&adbah=212%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=20%7C0%7C1376%7C2057%7C783&lle=0&ifv=1&hpt=0	false		unknown
https://cdn.sedo.com/components/p9HJ4M2Uz7U4/full.header.min.js	false		unknown
http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0&nm=3	false		unknown
http://www.bankwir.com/search/tsc.php?ses=ogcCEgzSeontOgAbrSzHQVODwWyiFd4Smw4NzjHCVuKwwf_Zh7smDYw8XcvF9mEwvIWDdMpWAhDhSCRGbwXXCwb7M94EIr_Y6XNgLEPfbup_J4Ss8zT-lIgI2E1lTQvRqm4D_wHpAD6GCKXnzRLM6h-4XAF_YoB7VMC7Qom8P5eH2cRNIWJys3VzkYjG_PkO-YTn-zuMeAJzDzmh8Vaj_oduMSL0HNXnpScEHSqfUof9WL9FX52GfWZ8EyYqGYtNCgOAY2PVNL6BWyP9SwiMmIxd6bpOZHKALHYm_rGRZTdJzo75bx6Mqs8nv5nNP8HbkZIyHWpLGDGeIaWw9WrCtgsNKgvJgi-8OMtQHqw9GFYlMdCq-lCrC4fiq9n&cv=2	false		unknown
https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Domain-Parking.jpg	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=hocrzb5il20c&aqid=DSn7ZuO7L_a7juwPr_uimQM&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1381&adbw=379&adbah=550%2C401%2C430&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=18%7C0%7C-4783746%7C4%7C4784387&lle=0&ifv=1&hpt=1	false		unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=tig31t74dzzu&aqid=6yj7ZoLRH-rdjuwPstOM8QY&pbt=bs&adbx=481.5&adby=986.015625&adbh=16&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=12%7C0%7C1384%7C2057%7C784&lle=0&ifv=0&hpt=0	false		unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	false		unknown
https://sedo.com/service/common.php	false		unknown
https://cdn.sedo.com/components/p9HJ4M2Uz7U4/a7d29342348138d42728.woff2	false		unknown
https://cdn.sedo.com/components/zkLxDsbw1hz2/9f07a3eca6d4792ac529.svg	false		unknown
http://www.bankwir.com/search/tsc.php?ses=ogcV14EreA4EoIZw_-LU2Q3lXkYfE3OnozKITGjNkP94gIIEhFnsW-etuHLK2aqXRE9BVN0UEIe6ycipmPUznSrFgIWiv0JTOxF7CZWlA3KyYQtP-X7oQadg0fHVdSLPOQ-L6b-5J5fASepmmXUHYW-VWf247ymnouT7pDq17b27lz92olfr-O_xbsN-QbuCTyk5jB5E4mDGn_aQpGtR9TofLtNfafVe60H-ztO89PoEV6V-sm8zifpBmp9arqfQGQLcjNjfZtsLt-8lACY-nt2WnoYdtwbIPGhVoClzq3Qm5GHKyKQe0d3NKpOkX3WXJ00KMNhX8UuvlGfZKXkRwh8SbowBPW4IEXz4EnJMGRhIohsEeXyZcfpRqIv&cv=2	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://typo3.org/	chromecache_160.2.dr	false		unknown
https://www.paypal.com/us/selfhelp/home	chromecache_138.2.dr, chromecache_166.2.dr	false		unknown
https://syndicatedsearch.goog	chromecache_234.2.dr, chromecache_220.2.dr, chromecache_168.2.dr, chromecache_230.2.dr	false		unknown
https://www.ufbdirect.com/freedomchecking/bundle	chromecache_140.2.dr	false		unknown
https://cdn.sedo.com/c7r/assets/static/images/icons/safari-pinned-tab.svg?v=dLJ3bx2xjj	chromecache_160.2.dr	false		unknown
https://faq-us.sedo.com/app/answers/detail/a_id/689/kw/park/search/1	chromecache_160.2.dr	false		unknown
https://app.varify.io/varify.js	chromecache_201.2.dr, chromecache_211.2.dr	false		unknown
https://beian.miit.gov.cn/	chromecache_138.2.dr, chromecache_166.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqlxJ0Dh13zDUIXc_C8SfMMTbpTtl	chromecache_124.2.dr	false		unknown
https://www.signnow.com/	chromecache_241.2.dr	false		unknown
https://connect.facebook.net/en_US/fbevents.js	chromecache_201.2.dr, chromecache_211.2.dr	false	URL Reputation: safe	unknown
https://www.united-internet.de/	chromecache_138.2.dr, chromecache_166.2.dr	false		unknown
http://ns.attribution.com/ads/1.0/	chromecache_226.2.dr, chromecache_245.2.dr	false	URL Reputation: safe	unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmjPLXAimMMOH1Tlz6VaWtBVKsqQ	chromecache_241.2.dr	false		unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_234.2.dr, chromecache_220.2.dr, chromecache_168.2.dr, chromecache_230.2.dr	false		unknown
https://www.cbna.com/	chromecache_147.2.dr, chromecache_124.2.dr	false		unknown
https://www.paypal.com/es/selfhelp/home	chromecache_166.2.dr	false		unknown
https://cdn.sedo.com/c7r/assets/static/images/icons/favicon-32x32.png?v=dLJ3bx2xjj	chromecache_160.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqnmIzyDTcsQv1Im8xTL_S9biwgke	chromecache_241.2.dr	false		unknown
https://www.paypal.com/de/selfhelp/home	chromecache_138.2.dr, chromecache_166.2.dr	false		unknown
https://cdn.sedo.com/c7r/assets/static/images/icons/favicon-16x16.png?v=dLJ3bx2xjj	chromecache_160.2.dr	false		unknown
https://twitter.com/sedoDE	chromecache_166.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqm5WVQdUf7qJ-9s-EWNG9O-OZuKw	chromecache_147.2.dr	false		unknown
https://sedo.com/member/domainsignup/index.php?language=us	chromecache_160.2.dr	false		unknown
https://www.paypal.com/pt/selfhelp/home	chromecache_138.2.dr, chromecache_166.2.dr	false		unknown
https://www.united-internet.de/en.html	chromecache_166.2.dr	false		unknown
https://cdn.sedo.com/c7r/assets/static/images/icons/apple-touch-icon.png?v=dLJ3bx2xjj	chromecache_160.2.dr	false		unknown
https://jqueryui.com	chromecache_171.2.dr, chromecache_136.2.dr	false	URL Reputation: safe	unknown
https://frontend-services.ionos.com/t/tag/SEDO/customerarea.js	chromecache_148.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
205.234.175.175	sedo.cachefly.net	United States	30081	CACHENETWORKSUS	false
104.16.140.114	www.sedo.com	United States	13335	CLOUDFLARENETUS	false
52.222.236.60	widget.trustpilot.com	United States	16509	AMAZON-02US	false
104.16.141.114	sedo.com	United States	13335	CLOUDFLARENETUS	false
35.241.3.184	api.usercentrics.eu	United States	15169	GOOGLEUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
142.250.186.161	unknown	United States	15169	GOOGLEUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
34.95.108.180	uct.service.usercentrics.eu	United States	15169	GOOGLEUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.110	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
91.195.240.19	parkingpage.namecheap.com	Germany	47846	SEDO-ASDE	false
172.217.18.1	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
35.190.14.188	app.usercentrics.eu	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
162.255.119.21	bankwir.com	United States	22612	NAMECHEAP-NETUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false
35.201.111.240	consent-api.service.consent.usercentrics.eu	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523036
Start date and time:	2024-10-01 00:39:42 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://bankwir.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@24/208@72/22
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.sedo.com/services/parking.php3 Browse: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&nb=0 Browse: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0 Browse: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Easy+Credit+Online&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ&pcsa=false&nb=0 Browse: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&nb=0&nm=2 Browse: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0&nm=3

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 142.250.186.46, 64.233.167.84, 34.104.35.123, 142.250.185.194, 172.217.18.2, 142.250.185.202, 216.58.212.170, 142.250.181.234, 172.217.18.10, 172.217.16.138, 142.250.184.234, 172.217.16.202, 142.250.184.202, 142.250.74.202, 142.250.185.170, 216.58.206.42, 142.250.185.234, 142.250.186.170, 142.250.185.138, 216.58.206.74, 142.250.186.42, 172.217.23.106, 142.250.186.106, 142.250.186.138, 142.250.185.74, 142.250.186.74, 142.250.185.106, 13.85.23.86, 88.221.110.106, 88.221.110.91, 13.95.31.18, 20.3.187.198, 142.250.184.193, 172.217.18.97, 142.250.186.163, 216.58.212.142
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, partner.googleadservices.com, clientservices.googleapis.com, ctldl.windowsupdate.com, time.windows.com, a767.dspw65.akamai.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, tpc.googlesyndication.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://bankwir.com/

Input	Output
URL: http://www.bankwir.com/ Model: jbxai	""
	""
URL: http://www.bankwir.com/ Model: jbxai	{ "brand":["namecheap"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Learn more", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://sedo.com/us/park-domains/?tracked=&partnerid=&language=us Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Set up domain parking now", "text_input_field_labels":[], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7ri Model: jbxai	{ "brand":["namecheap"], "contains_trigger_text":true, "trigger_text":"FIND GET A BANK ACCOUNT- GET A BANK ACCOUNT", "prominent_button_name":"Visit Website", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://sedo.com/us/park-domains/?tracked=&partnerid=&language=us Model: jbxai	{ "brand":["Sedo"], "contains_trigger_text":true, "trigger_text":"Earn money, and sell your domains more quickly.", "prominent_button_name":"Set up domain parking now", "text_input_field_labels":["Earn money by advertising: aligned with the domain name and in the language of the visitors to your page", "Attract visitors with advertising instead turning them away with an under construction notification: parked domains can be accessed online and sell twice as fast as offline domains", "Easy to setup and completely free", "Get to know your domain's value: gain valuable visitor statistics as a basis for price negotiations with prospective buyers"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI Model: jbxai	{ "brand":["namecheap"], "contains_trigger_text":true, "trigger_text":"Visit Website", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Easy+Credit+Online&afdToken=ChMI8IWNqd7riAMVK4 Model: jbxai	{ "brand":["namecheap"], "contains_trigger_text":true, "trigger_text":"This domain has recently been registered with Namecheap.", "prominent_button_name":"Visit Website", "text_input_field_labels":["OHCU Free Checking - Free Checking - Checking with Perks"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Easy+Credit+Online&afdToken=ChMI8IWNqd7riAMVK4 Model: jbxai	{ "brand":["namecheap"], "contains_trigger_text":true, "trigger_text":"If you want cashback. a high rate, and other", "prominent_button_name":"Visit Website", "text_input_field_labels":["USE Federal Credit Union", "ohcu.org"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

URL: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Easy+Credit+Online&afdToken=ChMI8IWNqd7riAMVK4 Model: jbxai	{ "brand":["namecheap"], "contains_trigger_text":true, "trigger_text":"This domain has recently been registered with Namecheap.", "prominent_button_name":"Visit Website", "text_input_field_labels":["USE Federal Credit Union", "ohcu.org"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7ri Model: jbxai	{ "brand":["namecheap"], "contains_trigger_text":true, "trigger_text":"FIND GET NEW BANK ACCOUNT - GET NEW BANK ACCOUNT", "prominent_button_name":"Visit Website", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI Model: jbxai	{ "brand":["namecheap"], "contains_trigger_text":true, "trigger_text":"Visit Website", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI Model: jbxai	{ "brand":["namecheap"], "contains_trigger_text":true, "trigger_text":"Visit Website", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpyiylrfjd", last modified: Tue Sep 17 11:16:29 2024, max compression, original size modulo 2^32 473
Category:	dropped
Size (bytes):	236
Entropy (8bit):	7.101694903074545
Encrypted:	false
SSDEEP:	6:XISDMHA6RQv98lnIQh0z8AuiUAJS6rYcyyln:XIq6Hlnjh0Q36pYD2n
MD5:	810EE2A65A302B5F880E3A00E840D6CE
SHA1:	0216DAA7AE065F8634DF06741E9CC791CAA9C1C0
SHA-256:	570D71A067BF20C244E164897D82D6C8E77D712A5B400A00BE41EFBBD6128487
SHA-512:	898D331822B32A20BD8286B2494EBD1119A8881D82B4C468594838459783C794D8F01D8D00B69B068C5D407C229EC5E899E621E72527127095FF01AE75CAC695
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmpyiylrfjd...Mj.0...=.....f.#...r.U....3A.....^.D-t.....{\|.`..p...8<.#7.......C.^..M}......2...'..(Q....V..o;.j..V[..EL.a..)r"x..q.%...1%.e.oWF(........E.C.=z..B._b..w..+..=...FV5..=x.=..+nH.d.h.+..=...P.n.f...hi.]....

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	27346
Entropy (8bit):	4.931460709222008
Encrypted:	false
SSDEEP:	384:BbLwi6HkwBb9O9lxKwhtUjP4qhqa3TnAGnZ6g4ASe6Rs4mRkz3R54W2:BbUVHkwBb9O9ls/74qhX3TbUUnLoR5W
MD5:	DDC1A1F070CF0B6118CDE45749359A22
SHA1:	4C854109540F768F794D8675A98CCFCD1499CBB6
SHA-256:	325088F998FAC12A93057677B52799897639E9E003D50837BEA26A5790D2A58C
SHA-512:	81BB263C1C23E67A9EA164A283664E351AD2663FAD77D82B4964F5163A4AEA333A67CA9A2BDDD354776E0CFF1824895F8D8DF99635DD2BD2BE6F1C64516FE943
Malicious:	false
Reputation:	low
Preview:	{"settingsId":"5QJe3R54G","version":"31.17.158","isLatest":true,"buttonDisplayLocation":"bl","moreInfoButtonUrl":"","actionClickOnViewConsentInSearchApp":"","layout":1,"privacyModal":1,"urlConsentInfo":"","stylesCss":"","buttonPrivacyOpenIcon":"","buttonPrivacyCloseIcon":"","buttonPrivacyOpenIconUrl":"https://img.usercentrics.eu/misc/icon-fingerprint.svg","bannerMobileDescription":"","consentSharingIFrameUrl":"","bannerMobileDescriptionIsActive":false,"controllerIdCookie":"","chipDisplayLocation":"rm","privacyButtonIsVisible":false,"chipIsVisible":false,"disableScriptIfBot":false,"consentSharingIFrameIsCustomUrl":false,"consentSharingIFrameIsActive":true,"iabConsentIsActive":false,"resetConsentsOnShowingInitialView":false,"btnMoreInfoIsVisible":true,"isVisibleInIframe":true,"btnDenyIsVisible":true,"showLanguageDropdown":true,"enablePoweredBy":false,"storeUserCounter":false,"useConsentCookie":true,"tagLoggerIsActive":true,"storeConsents":true,"optInCountdownVisible":false,"optInCountdow

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpz39m4eqo", last modified: Tue Sep 17 11:16:31 2024, max compression, original size modulo 2^32 2937
Category:	downloaded
Size (bytes):	1077
Entropy (8bit):	7.802144664467643
Encrypted:	false
SSDEEP:	24:X2LG5DiW9Za6EIL0AXpEdSQdpiI7RuXAMJoadrF65wsdvAh+L:X2LG5DiSa9IFXp8nPiItuXA8c6t+L
MD5:	C2E932D4D1B024014630F22BD817AA3B
SHA1:	FC46FC43601100941B49908D7DE4D508FFB8EC42
SHA-256:	0BE9A77CCF72E583D8F7F421203F14F01085405FC73CFFA3E27E6BB6E1FED93E
SHA-512:	A9E5C3223E586D9E917585F50B03F5080461472BFC67C304E484B4B1FC35026CA1B9E683F9082D0734A64FEFCBFB48187DE66CF6DEFF924DC832CEB05F07E260
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/FirstLayerCustomization-de8ec6f3-0ed66d66.js
Preview:	.....e.f..tmpz39m4eqo..V.n.6.}.Wh] ....E.n.@.\|.b..."...7Z..%R ).../I...8[YAh...\.9&....p.H.....2 +3R /fd@.f.@3 .f.w..y/.....A..2.._.Y..a..,R.......fATJ.s.J.p..T.$.)...Y...v.i...,..Jq6t..v..o......w`...Q<...2....K.bd..wU.{._3H.8..H.B..s.S...r&. C.........x...{?'..........+. ..X..r....X..f0..S...R...-.$..(uE.45..c<.....8c.$8v.gg..&...P...w.T].dd..wAW$..C.......J......[.IHN.j..Q.a.m.X.v....^..QF../.=URa.U/...E...N...)Go6.....=......a...d..oL.".u^.W.W..a<..a.BE#..c..w.....Pj....&=.$}.V~.....GN/..W...Yf..fN.e*x..1.......?2Fm.+..j..........C...../...m......7Y'.>.C...".e6.x.7....\|.v`N..Z.&2.....O..<.L=.tp....Z...C.%5]9`........~o0.J-...i..........oz.!..a.....e.....N...>...\|q......J.C..n.vS....#\|q..a=..Z.0u....%$G..-.[.1s{...#l...P..a..1.......F.I.asr.......[.....v..2~&.......s...7C.V....(\..l.!.....j....~n^x.f.[@.P.p..S.w.;,o.....@..q.q.y{#//....\|.....#...B....6..4.>.qU........IC}..1.....<-..\|...e]6{....a....>N.i..i.:x.9l...

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	610
Entropy (8bit):	5.4559097885945365
Encrypted:	false
SSDEEP:	12:TMHdPhRi/nzVV/KYf3nS31PHEX7aPjW2e/bKI0C2UbKt9:2dzAjLf3S5kX72ObKbhU2
MD5:	950A5568A5DC7D9B5C1C8E33C9686077
SHA1:	4AC8BE7FA70589332CA25BC6CEA1263CA54306E0
SHA-256:	0D8EEC0DF98211FA752EBE83512BFD9027B3423FEFB1F116D062B58233B88C50
SHA-512:	380236D6F03ACFF1215F6159479F428BEB1F8904A6CD5F5FB6D19098A2BFC08EA0E9770B158B732A7BF669CA592DC56A2F35F681FCE173386A40F1A98C9CDD8C
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/images/legacy/images/icons/icn-check-beige.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 79.5 79.5" style="enable-background:new 0 0 79.5 79.5;" xml:space="preserve">.<style type="text/css">...st0{fill:#C7AC9A;}.</style>.<g>..<path class="st0" d="M39.8,0C17.8,0,0,17.8,0,39.8s17.8,39.8,39.8,39.8s39.8-17.8,39.8-39.8C79.5,17.8,61.7,0,39.8,0z M34.1,58.5...L15.4,39.8l7.5-7.5l11.2,11.2L56.6,21l7.5,7.5L34.1,58.5z"/>.</g>.</svg>.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp5ay73b4h", last modified: Tue Sep 17 11:17:07 2024, max compression, original size modulo 2^32 33954
Category:	downloaded
Size (bytes):	8553
Entropy (8bit):	7.972892727864916
Encrypted:	false
SSDEEP:	192:SBnfOnCZlLsSg0SM61d0L0jcwdBvmPMM9/caIoc:Sp8SS7BThgwdBeZ/re
MD5:	DA6FD8696488229B01EE683C868A69D4
SHA1:	D04F9AADAC0EA4981B4B0C5825A28A21D41461C0
SHA-256:	2BBE9507295BA99051EE3ACEF34C0B36D5CADC6946614EEF45445F8D6DF33F3A
SHA-512:	C8D1447E683AD4D4935D8B80844591F6657FDCC178CAAEAAE66A286E7D260E13DC879CEC3DE61F073C84FB99ECE9E2F1DEAE193B2817FCCE38BF5ABFD75908BE
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/latest/loader.js
Preview:	....3e.f..tmp5ay73b4h..=iW.H...W..>Jj...S .\.W5.\.......,.m5..VJP4x..F.!.\|a05;og..SyDFDFdD...4..?...^O).h..^....F...=.b$..Fc.J...1.c..q..R....<..<j~rtw4n.n7 =..o...:g......V...a..l7..;.I.$.E...#.K\|<:m...T..w..5.;g_[?;z7...On...w$>K..37NO..O.. .!..E.m..$>..$.....a....>.~....z.Q......Tu..._.O G.H.E.z.~.25.v.O?5....Q.`...3...'_..@j..........p..[.F+... 1.A......f.y....P.p.[..O.O........{..;.o^\..N........ L..7$...R......M.V..8........c.M...V;.]D'....`I...4y....b.%.P:....h..........$^_../g.\..\..Z..'..\|. ...M..Q.h~.\|.J.vZ.o.r..0 ...-..#=1.'....{...H.{R.5U.CG...$wc.........:e.........(..I&.<.....#%.kP.....d..2\..Q.a...........=..C..`.D]7.......y9o...........37.%A.s...,..L .N.PP2P.......Kr.JC...gq4&qrW.. 0..CMn.$.Y#%.....8....(N.}?.....r.1q.'9V....~.H..)...8.?}...{.....ZjM.$,...eY..pl.G.lT.(..F....$.`l%....".....M..9,.=....$...u.Hb..s.......2!`I..3....A.035...AJl.........7...mT8.I.\|.6..ds. N......D6.....G.P(....(`y...1/&nB.0...A....

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	48097
Entropy (8bit):	4.541259077514592
Encrypted:	false
SSDEEP:	768:cfppX5/9YbZIqEGYbGqnq77SdMOsZff7pUbGA+dHeSZKFwj:CKYw3A9+
MD5:	5A2C392E7ACDF6E9DE6E00129500503C
SHA1:	C8D0F80381E4CE180B5EB3C4C98539907292A7BB
SHA-256:	878DA09A057EC8F1775CDC522E5F7EC44966DF547A87A9C29826BA114833C24B
SHA-512:	52223B04EB9121F05442DBC48519A95FDABB81C414772EE43DC837B58F797B97314796EF6D77EA6B7A1F3FEE5937EC039E617FCDF8B146822792ACCD2534E141
Malicious:	false
Reputation:	low
URL:	https://img.sedoparking.com/templates/images/hero_nc.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">. Creator: CorelDRAW 2018 (64-Bit) -->.<svg xmlns="http://www.w3.org/2000/svg" xml:space="preserve" width="1440px" height="140px" version="1.1" style="shape-rendering:geometricPrecision; text-rendering:geometricPrecision; image-rendering:optimizeQuality; fill-rule:evenodd; clip-rule:evenodd".viewBox="0 0 1451.085 141.382". xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <font id="FontID0" horiz-adv-x="666" font-variant="normal" style="fill-rule:nonzero" font-weight="400">..<font-face ...font-family="Arial">...<font-face-src>....<font-face-name name="Arial"/>...</font-face-src>..</font-face>. <missing-glyph><path d="M0 0z"/></missing-glyph>. <glyph unicode=" " horiz-adv-x="277" d=""/>. <glyph unicode="." horiz-adv-x="277" d="M90.9909 0l0 99.9962 99.9962 0 0 -99.9962 -99.9962 0z"/>. <glyph unicode="?" horiz-adv-x="556" d="M231.002 175.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 413 x 594, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13502
Entropy (8bit):	7.912202553387551
Encrypted:	false
SSDEEP:	384:/mKXXNN5Jr7k18sA6pXsox1amFbraxPpkJ:euNN3r7SJZRGmgxPC
MD5:	107694EE1E94990D97B7E58651FFD6A0
SHA1:	7DD9AE7BADF78BE01EA0623DF1E90171348716FF
SHA-256:	7AA2A3E9A9575A27F5593C3B0357423128C468A46ED20D284CE5A21555EE67BC
SHA-512:	5D695545E1516D28CA05933C88AEC08CA324A61804BD662102A1EEB7A515BA543343AD24FDA53ABA329AE803F622664B29D5A3461BCCBD264EC8950E8CA51002
Malicious:	false
Reputation:	low
URL:	http://img.sedoparking.com/templates/bg/arrows-curved.png
Preview:	.PNG........IHDR.......R........^....pHYs.................sRGB.........gAMA......a...4SIDATx....\.y........F.U.b.U....A...#V.......J..?....w..UD&.A...P&.....Q...#..qA.d\.E[...Y.....'...;....{.......+_....<.y.9.k.o.-J..%.C)I3..7o..e..........0....f.<.6/J...&.}.S..n.%...1........'........'X..+...4Z..;JTf.JV........)S-e.'Z.dO...y.'....a{mM.C...r...1.V.....L.K..@...:...H..N^.}..ex....N...\/k..l..P....\...j..:vr........_.3..n...!..n.?t....8.pNX...5.Dwd....8...`iB..Q=...L.:...`.b...L+Ne.....7tF.....V..x..S.e{.....:.....H..........]...!..`6.........ooqN......i......x.N.h......z1...%....T?.V.lD..+Bg9zZ..NB...D..-.U[%...~../..D.J......?..F.)5................J....k.I...W....5..ns.....^..%!o.}..g/.~.....<@......8.J'....T?.\E......X..........\|.vS.`....hY."....`.h..}?...J'^..y...7[....@.tP..5.ZQ....5...F.`,......&.&.6.....`VT:.T3.......A.`jy.....7.....z.0.*.T.p.7.G tP).........S...tP76..8@.`a........C.`.L;W).....~......t...Y."A...<.f!_... T

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpkg97jlww", last modified: Tue Sep 17 11:16:38 2024, max compression, original size modulo 2^32 1740
Category:	dropped
Size (bytes):	809
Entropy (8bit):	7.720303795641301
Encrypted:	false
SSDEEP:	24:XIWEXTA2oLo4HrPzCh07TfSkxp5crljJeYxn:XREXTAlLjHjOaakxbch
MD5:	22A4A3ABC5E97B864B21EDF7B8142D96
SHA1:	0E0522764E5AC8586F53E0A56F9696A65ED1E0D4
SHA-256:	E9ADA726EB1B3A8998A4F9FB6A6724ED1A1AB9CAB98E020D0AB4DD4C2F1B4295
SHA-512:	607E974C18A42E3362CB0E0E835AE146ACC5F2E83E8456585FBF12BE292F2650946801BCC11DCB60A5970809383844013E619593A580FC3A2F086049B114EF0B
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmpkg97jlww..Umo.H..._..C.Hs\R.r',NB.74~.!.NUe.a.7Y/..~...o..&q...g..yv<3..&.........4RXi...F....~..^k.p.......W......p....j,.G..:.....O&b.7.i\pj....(.2.,mJ.1....5..F.$.qN...H.?.....}.XC2.4G..a....8......}.....\|./....L......F...(....G.,xn...]..(.T......}...Jw.U..x...@\.Jj....X....J.....k..z@......w........z.-.2q.R..0c(rk.L:.'p.il.@.......QF..F...b.......5....,`.].......P..c&...n.$4..i...&.J..b>..-.G...mYD..or.....kx..9.mKi+~&..K../9m..[7S9..=1.\|E.!(."j.C.w.$3....z..75`D._..a.pc?.U...{p..x...Q.<.:.?......V...O.0.W.&lO......c...1..cR..,......$..~?....e..z.\|.z.i`..W.uW.X....(#..#M.8VF."...0(..\|.rXBuQ...@.\|..B..=P.......S7....j...\|^;GF.U..... \|[..-1O.z.zxM^.c..-...c/....9i=..T.mUmO.....e#....j....L^...ZG./T.g...T+.wU..O.j.C{..Vx#U...j5...Sw....&!f....

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (376), with no line terminators
Category:	downloaded
Size (bytes):	376
Entropy (8bit):	5.52909072850561
Encrypted:	false
SSDEEP:	6:xWzP7QcrdqUZtUZKGhEpZUmV28xfPV9z67M+dm9OYUZtUZKGLWrdTX28xfPV9z67:xWIcJXtOVCSmPL9z67HvltOVLWTL9z67
MD5:	59D2993B30410412E0417BA10C1999CB
SHA1:	6FBC094D815F71C8681A7089557FD4FD611777D5
SHA-256:	83D997B49FF24F8D5CF0E5DD4524FACBFC13FFE505D917EE9781A82824EE0217
SHA-512:	23177DCC1FF1317BBAA00F74E820896CCB4A24A1E37908D6D73B9A5CD5D3D8C1A261180D1613CCE9D0CC7C0EE4B77C3B5BA8B4689345E63A53FB0FC4D2909861
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=www.bankwir.com&client=dp-sedo80_3ph&product=SAS&callback=__sasCookie&cookie_types=v1%2Cv2
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q","_expires_":1761432043,"_path_":"/","_domain_":"bankwir.com","_version_":1},{"_value_":"UID=00000eff0c585e0c:T=1727736043:RT=1727736043:S=ALNI_MayMZGPnYZsvw3YUJFXvxyItyV_5g","_expires_":1761432043,"_path_":"/","_domain_":"bankwir.com","_version_":2}]});

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpCfWGAE", last modified: Fri May 8 09:06:08 2020, max compression, original size modulo 2^32 489
Category:	downloaded
Size (bytes):	522
Entropy (8bit):	7.343516125324942
Encrypted:	false
SSDEEP:	12:XJjUv/7Cu7oXqejoa3pS/3vgOGUBbxMFHCKlHIEg3JzWiFlpij:XthXqe3ZS/3IFSbxMFHnXuzRjij
MD5:	3702ADA73B8951017B8451CBD6A96523
SHA1:	FBA130B6F83751655F96DF7F947B9591DA67C50B
SHA-256:	A714DEF57C786512C5F2BA2CC4DFA9EFE919CD5F2004D05378D5BE2377F627EF
SHA-512:	574EE82DDDD8DBCD580883CC3D5F792A9DDABAB2C9651BF262276A0FB05FDE6F6E6C12EAC71381C2613891758459A5EFA0CFA3679049C5A738F6149074162A28
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/session/1px.png?settingsId=5QJe3R54G
Preview:	.....!.^..tmpCfWGAE.......PNG........IHDR....................iCCPsRGB IEC61966-2.1..(.u..+DQ..?f..G....IX!F..2...4F...y.fF..{o.d.l.(..k._.VY+E.deaMl......s>.{.9.{...)%mT.C:c.....}....(.....gg..8>..M.]...G}L5.....).n.O.O......J2..>.......u...._6..P.\..../..b%.....t.S9.t..%.jf~Nb.X;.!...2.....`D...........g.J."^#..*..........y....j..}N..?.<Y.[..nA.`Y...U<..#\d.....~..P.:..i....Zt..7..A....-..............9...\|....A..oZ....g...`h....pHYs...#...#.x.?v....IDAT..c````........N.....IEND.B`....f....

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (29967)
Category:	downloaded
Size (bytes):	30495
Entropy (8bit):	5.57002044673565
Encrypted:	false
SSDEEP:	384:2ni0Zfaxi4UNsQ4M0CzWKWIGNyVWkXPX2PXqXMXBrkX1BOl:2i6ai4UNJNKrrhl
MD5:	63426DCA6D8A00FED35A445EEEAE35BE
SHA1:	1B170966D344EDCE4F3B274B3354083C71927444
SHA-256:	D8C31FC55F281E490F79CACED0D927CFBF763F0C7D05D4259AC99AB670868FA7
SHA-512:	7FCC5CF9BDA142F6F5293BE5FBD40394355BBAD34BC859519CABD0C408D76BB1F1903E5EF009E841EDECDD3B4AB89CA296F04D39DECB99391D9ABE1FB5AF7BE0
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3Df9bcb952ac981036%3AT%3D1727736043%3ART%3D1727736043%3AS%3DALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYxMDUmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Cit%20Online%20Savings%20Account%20Rates&afdt=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=4981727740888451&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727740888452&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1227&frm=0&uio=-&cont=ab-default&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%253D%26query%3DCit%2BOnline%2BSavings%2BAccount%2BRates%26afdToken%3DChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ%26pcsa%3Dfalse%26nb%3D0%26nm%3D3
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpCfWGAE", last modified: Fri May 8 09:06:08 2020, max compression, original size modulo 2^32 489
Category:	dropped
Size (bytes):	522
Entropy (8bit):	7.343516125324942
Encrypted:	false
SSDEEP:	12:XJjUv/7Cu7oXqejoa3pS/3vgOGUBbxMFHCKlHIEg3JzWiFlpij:XthXqe3ZS/3IFSbxMFHnXuzRjij
MD5:	3702ADA73B8951017B8451CBD6A96523
SHA1:	FBA130B6F83751655F96DF7F947B9591DA67C50B
SHA-256:	A714DEF57C786512C5F2BA2CC4DFA9EFE919CD5F2004D05378D5BE2377F627EF
SHA-512:	574EE82DDDD8DBCD580883CC3D5F792A9DDABAB2C9651BF262276A0FB05FDE6F6E6C12EAC71381C2613891758459A5EFA0CFA3679049C5A738F6149074162A28
Malicious:	false
Reputation:	low
Preview:	.....!.^..tmpCfWGAE.......PNG........IHDR....................iCCPsRGB IEC61966-2.1..(.u..+DQ..?f..G....IX!F..2...4F...y.fF..{o.d.l.(..k._.VY+E.deaMl......s>.{.9.{...)%mT.C:c.....}....(.....gg..8>..M.]...G}L5.....).n.O.O......J2..>.......u...._6..P.\..../..b%.....t.S9.t..%.jf~Nb.X;.!...2.....`D...........g.J."^#..*..........y....j..}N..?.<Y.[..nA.`Y...U<..#\d.....~..P.:..i....Zt..7..A....-..............9...\|....A..oZ....g...`h....pHYs...#...#.x.?v....IDAT..c````........N.....IEND.B`....f....

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 10672, version 1.3276
Category:	downloaded
Size (bytes):	10672
Entropy (8bit):	7.975462455488595
Encrypted:	false
SSDEEP:	192:QOI6T7un2Duc7EMp+xyAWHVwBc3Yx22nr50hueaqdAqmO:1IEP7EMpwwsc3Yxfuhueaqyy
MD5:	00E18964FBA583769DCC97245B06CBC0
SHA1:	145B37095E53AD8CBA15C162B25BDE9830CC0890
SHA-256:	B4FD007408FCF22B7B71A61B3EBAC2379F9CE2F3A5D9EF694684F12024FBC9A9
SHA-512:	854390795DAED7B28A48FF6006B724A83E7862E7BFC613FEB47D2CEC939DFCA41C693C681FBFC6D6C9996CAFD2689356BFB811940E41E3C272556DDFE5F44BBB
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/p9HJ4M2Uz7U4/98a8d93f852421263258.woff2
Preview:	wOF2......).......a(..)Y.........................@.....`.`..f......o.6.$..D..d.. ..J..9..R.....`..^Q................I...U.@...P...s.....M..P..=. .:....(.N.a7?,......Z1.3.QIZ..5....OG;$I....c..+..k..F.....C).HUO;$.7....f..F.(.....A.QJ..2..dV....%Ws.ns.....]..:w......s..Z.X.Z........,...0..7...k..4y.<..0.7..?...B.....s...:.)_p_^gJv..).@.D..4....~{..H....1...._.....'p..'.\^>...?..@..h...\.?].....QK.!T.....U..R.4."Il...TE.X.b...$...V.k[Hf..g.!..3..!N..+_0\....gX..>e.......I.>=.FP....H7.)...!..4BJ..F.......5.Lc.....=?..$..;.....M..y$.'w3E%.....P.......K.`.....8...k.+so...}..u..%..H.. !.>z....`A,.q.....,.%w.0....!Y..R!B.Z.-B.Vm.n.D.FR:..Ii.}.{c. .../(.....z..}..8..G..g. ..=i.Q..6..k.{....V=}><. ".S..3.\...;........+q...'..... .\6..M.V%^.....X..i.4......F.h7.E6 ......@@D.."YN...x2C..J'9C..-p...O........_........_qK.uM..;..S-."......yv\|.. ...c..V8)....tb..$8L..>.%JC.cH;.+.......IClg.....6eQ........*\.mA.R.Q.F...5.`^..u..In....8~.E..m.@.b...R?....&H.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.455520614126619
Encrypted:	false
SSDEEP:	12:TMHdPhRi/nzVV/KYf3nS31PHqgaPjW2K5v/bMtW2I0C24kAXKt9:2dzAjLf3S5Kg2K53bUW2bh4kAS
MD5:	38DC034A6892121319F8A432898F3CA2
SHA1:	E417E2636A04712260F2D5E5A799069F8E9036EC
SHA-256:	EB1677D0DED69FFBBC182C79EBA2F2E33E6F13D719BF4EB4F18F1F7ED62DFD4F
SHA-512:	EAAE9941ACB8D758E092ADA53679EB3DD8B0E9853FD3B26871400609A69C22CB4FBC588DB9D49D8648F75411B248A3E58B73213AEBCD35DBF49BC83C3BC02CC4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 79.5 79.5" style="enable-background:new 0 0 79.5 79.5;" xml:space="preserve">.<style type="text/css">...st0{fill:#0061AA;}.</style>.<g>..<path class="st0" d="M39.8,0C17.8,0,0,17.8,0,39.8c0,22,17.8,39.8,39.8,39.8c22,0,39.8-17.8,39.8-39.8C79.5,17.8,61.7,0,39.8,0z... M34.1,58.5L15.4,39.8l7.5-7.5l11.2,11.2L56.6,21l7.5,7.5L34.1,58.5z"/>.</g>.</svg>.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	147609
Entropy (8bit):	5.274206815954838
Encrypted:	false
SSDEEP:	1536:jH2R6XMuBhICoQHC3CdT7Z7vJ7I0N0w0I0T0bGmAxaZAUrZbECsOsWsws+sXsHs6:sihIod9
MD5:	81D418065F1DF7CDCF4AFC5D8E3C1F4F
SHA1:	3F913F5587A34CD1DFA82F73B69F4F4D9EB09036
SHA-256:	7EE12C64C0521C5A4230ED239D71A8AACA307ED793ADD5AEA71721016E9B6092
SHA-512:	6566297D4A63CE0CF5A7FE13364D768FF780EBCFA5544063412E457F80FC4B2652D5C858C4D5571B71EA64A36CFDE708CC877FA855FB2639CBEC2FC07DDBBE08
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/dist/css/typo3/main.css?1724922195
Preview:	@font-face{font-family:Droid Sans;font-style:normal;font-weight:400;src:local("Droid Sans"),local("DroidSans"),url(/dist/files/s-BiyweUPV0v-yRb-cjciAzyDMXhdD8sAj6OAJTFsBI.woff2) format("woff2");unicode-range:u+00??,u+0131,u+0152-0153,u+02c6,u+02da,u+02dc,u+2000-206f,u+2074,u+20ac,u+2212,u+2215,u+e0ff,u+effd,u+f000}@font-face{font-family:Droid Sans;font-style:normal;font-weight:700;src:local("Droid Sans Bold"),local("DroidSans-Bold"),url(/dist/files/EFpQQyG9GqCrobXxL-KRMWaVI6zN22yiurzcBKxPjFE.woff2) format("woff2");unicode-range:u+00??,u+0131,u+0152-0153,u+02c6,u+02da,u+02dc,u+2000-206f,u+2074,u+20ac,u+2212,u+2215,u+e0ff,u+effd,u+f000}@font-face{font-family:Marck Script;font-style:normal;font-weight:400;src:local("Marck Script"),local("MarckScript-Regular"),url(/dist/files/O_D1NAZVOFOobLbVtW3bchdwxCXfZpKo5kWAx_74bHs.woff2) format("woff2");unicode-range:u+0400-045f,u+0490-0491,u+04b0-04b1,u+2116}@font-face{font-family:Marck Script;font-style:normal;font-weight:400;src:local("Marck Script

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1559)
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	5.35326340810563
Encrypted:	false
SSDEEP:	48:0JhHIzOnK8lwSb6YS4tyPWp2PXihm0wQR2FgbnYfblV:8i2DbL1tzAXr+0P
MD5:	E1B03404DFA7DA423D277659AC0AFD31
SHA1:	C3BC4C04DEA07F6FC9359B7BAD68DCDC2B775906
SHA-256:	42FE9EBD9A4234CCC46A6A370B6A84EBE6156D2C217F7C3C9F79875B258209E2
SHA-512:	2D68BE65AB5277C5CE55219F37E9F7A6DC156BA9B5B6EC438FA817E12506E46793208A48674412F8DB01714A756E7D340B17A3D28BFB77C542D1A8CEEE1DF3E1
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads/i/iframe.html
Preview:	<!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="x120gzsu8AW1XxZfAVw1gQ">if (window.name.match(/^{"name":"master-\d+"/)) {var script = document.createElement('script');script.src = "/adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\| href.indexOf('&pac=2') > 0) {script.src += '?pac=2';} else {script.src += '?pac=0';}}document.head.appendChild(script);window.IS_GOOGLE_AFS_IFRAME_ = true;}function populate(el) {var adBlock = document.getElementById('adBlock');adBlock.innerHTML += el;}function getMaster() {var m = null;var pIndex = window.name.indexOf('\|');if (pIndex > -1 && window.name.charAt(0) != '{') {try {m = window.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11256, version 1.3276
Category:	downloaded
Size (bytes):	11256
Entropy (8bit):	7.981317751240797
Encrypted:	false
SSDEEP:	192:yrJyZwJ8dvcaSNnior8RYSbckbfcv2m+wKhN9RnH7OgBEbB3GvcgM6qfwoXTMJIf:ysMkcLNxcE+ZwKhxH7OgebBWvcgbqhjn
MD5:	E80EEFB2E693F982ADE7D2F9C41C59EA
SHA1:	F240D480114E47ABE991D4A9C3EC1A3B95B1E0F0
SHA-256:	115EA8CCC77135E889658E3922A3CE4747DB8CD8A9FFC82286D4B48C771C4DA0
SHA-512:	0D7225D00BBC4183ED66EA8BDB0719AF32AA8CF2E7437A62070E85F14720B06F3F9692113D66D098846571C80EE813C695ABB62BBC0201E0E2FF9E9068F8DEBB
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/p9HJ4M2Uz7U4/d26139c0fd3b917ce03b.woff2
Preview:	wOF2......+.......bh..+..........................@..h..`.`..f....h.<.6.$..D..d.. ..\..9..S.....0x.3E.l.P.."........d.....%ZI...J..Rio...M`.R)..y.&>...V....\]>G.o.tVG..y.._.;.Z..:y.!I.....=...~...(.l.U...8U.p......zc..E.U.%.j...=J`...60.F8.A1...0.<+8.<..BE.J\|..4...N.............[o.dHp..K.E.....(j......)V!}H...Z'..d..'.N..C...?....A.......IU...N.6...#@7...u....A..l;@...g..7S....xr..8w.....A...y."A...2.:.U.r..@..St.T...."}....'.}$..>RX....>..4.Yv.J.........u.a...u.0.r.......q.0.(.VR...ZV.<..K.(../....?...C...#..j.?..........?3.5.'......Rk........el._s/"lJ..`3..i.0..+! (.S4J.l(..(3x..F.m.......H.......Q..... ..2..v(.....5'......%,:(l...h.m..n....@...!.x~B..#.KR..r...g.kB.[.7..V.:t[.5W/9"R ...hk..._...!.DRgT.R..Nr...9T..."[..H...-...9.)......;......w...0@....b..G.f.;.^...@.4w.:..1Z;.G{~.g.....)....F!.@....)g..5L..:...#.....5..A.J..Z_...... ....}...u...,d..K.......d.......\...jw....H....D.D..&Ad.....<.........H....b3....._f!l.d.".....j.-(.3$....bn._

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpl5u_ed55", last modified: Tue Sep 17 11:16:32 2024, max compression, original size modulo 2^32 567
Category:	downloaded
Size (bytes):	318
Entropy (8bit):	7.302858438317619
Encrypted:	false
SSDEEP:	6:XJDUm4z/kBLRxGb35H0uCCXjzVQQmiq9RRudG+HLkAuzJfdZdp6zuUHQY2QVL6C:XJ2kBLR45HDTz3mX9RUcaQJfbr6zHHQu
MD5:	E46EF9182081D5B5A9DBDC1F0B20036D
SHA1:	1C5BD2868DEF0452591D89323DDC0EE1C4D5825C
SHA-256:	FDEDCB287B14EA8E85C9A10E400BA60857A90EB2ED40112365CA9102B1FF36CE
SHA-512:	897051ADC9767334CFBF0D3120AB2959303C238FF2EE2A0487E7242BD6970C2EB77D607641DEEF628F143A069BC2AA6F12F3C445D66BB1C597DD27D794082B3E
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/SecondLayerUI-2d936468-4fd84b50.js
Preview:	.....e.f..tmpl5u_ed55.u.Ao.0......S+E....&.v.4i..v7..Li<.i.A...BE%.d+...S.S...{.&........V...V#.CN.Yz...8.[Y..,....u.x..\.....}X...?j..v...........;..y....o...)J..~...!.,g.y&:..h\|.....d6n...6....=F.'...&.<"^.f..W........,.<..'.1..,....z~E..,....U.*....+.E.J....g.CMF'.H..}..h=.,.,....h..&.m.S.K5..?.1.7...

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	443
Entropy (8bit):	7.328100037894394
Encrypted:	false
SSDEEP:	12:6v/7zevpDz93mc1vmrE3u9SNuoMsBf19Rn0qMn7xF/1:9Rz93mc1vmoBgsJ5TGH9
MD5:	16C1B19295991BF645BD13748F593963
SHA1:	06AF32F1576D0E8D772A85A6BFE2569C85CFA051
SHA-256:	1809DCC57366AF45A57619362F6FEFEC4C6A4C1677ED8204DC5BEF4CA1100A41
SHA-512:	D2F0B6D7385BDACAC22D31814D2B7301CC01A413F293E0876A3ECE1F31BB9D74BCAF0413886E8DD82987E38C0B6CCD65BC220B23A0E9B045ACA6717FB2D43B25
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/7758335261402808070?sqp=-oaymwEKCBAQECABUAFYAQ&rs=AOga4qnfLxPOBGOuc8W5e5jX39SvCCVV4Q
Preview:	.PNG........IHDR.............(-.S....PLTE......................K..2t.....\..o..........]..............XR...xv.........?...j.9.....B:...HE......dZ.........*...db.A<.SKj....tp.sl...........L.......YV.D:......h..............IDAT..MO...0.[@.T.[.T.)..o......[..<.L6........4P.m.h..i5...n.v........$S\|U..pD...). ...Y.,Y...`mei.x...6.......,.'.z..M.Oc~,........%.:.h...$.5....%.-J.FW.~..........T..`U.l.]..l.`.....+.X];......IEND.B`.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HrPyY:zyY
MD5:	6CEA4FAAAFA38FD40BB35DE6589E85F6
SHA1:	8105D649FBDC85604236E65C53E97BCF0CBF5A36
SHA-256:	FC11A6B80A3B077C6ABCF624E3331E30045DEA7896F6539A7CB263E74964F5C0
SHA-512:	7DB4FBAAE22AA961987C0750E13E1B7A3CDEE6C0502A7C5093D4FAAE84454EF6709F8690278FF2AF9ED984601FDD8FFC59E887A34AE723C5BCAAE54125F4FCD4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAk_ENelIzeMPRIFDVKKSaM=?alt=proto
Preview:	CgkKBw1SikmjGgA=

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	171
Entropy (8bit):	4.99164110946794
Encrypted:	false
SSDEEP:	3:t6WCrSrwvDmJS4RKb5sAR+bIAG7dScHaZfPRFUV6d+GsMQ5rxXEREhfgW:t6h/mc4slhobIAKRaFNzQ5rREyN5
MD5:	4D5C5B51837AC556B931A2D38B6566D2
SHA1:	AB94B7F0E1881E6C5475EE14EC37AAB254F64542
SHA-256:	FCF552DAEECA47E67A22CE6EDA8EE35C5F0DF67CDBFA5CD5AD8C33055C300A34
SHA-512:	BE0FDE7A0D261AA92AF89DF904A47A88973EA4B855D7119E3FDB84E42E81AD7CFA059754273E816386AAC3536A71DE2D0CA96072D206D0251DDB8DE33FAFE233
Malicious:	false
Reputation:	low
Preview:	<svg fill='#D7D7D7' xmlns="http://www.w3.org/2000/svg" height="48" width="48"><path d="m24 40.55-3.35-3.4 10.85-10.8H7.45v-4.7H31.5L20.65 10.8 24 7.45 40.55 24Z"/></svg>.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp_cgccsit", last modified: Tue Sep 17 11:16:33 2024, max compression, original size modulo 2^32 1270
Category:	downloaded
Size (bytes):	687
Entropy (8bit):	7.681964112643804
Encrypted:	false
SSDEEP:	12:XFnlsvP8Gagyl4M43aPTyLAsMHPzkgYF1SAKy0YxojBlfBKwn:XFn638xgy+M43a7y9MHPYfFMy06ABlfp
MD5:	E4C20E66800385031ECA3E76F11D9A33
SHA1:	5955E24E438BCDC0D9342C40393F7FE897BFF32F
SHA-256:	AEE18B7A861A520930DF1435A8C81368504DCC3135ED1BC16C4DAC94838448AA
SHA-512:	F9BD85D721972B3E0CDA7A5AAAA60A5FCD72F4E466AD2299C16CDFEBE10B0FFFBD20497495C8B6658537730B81B17F98AC446083B0E5D60FFE63D0D5ED296FA1
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/Taglogger-ece90602-40fbde48.js
Preview:	.....e.f..tmp_cgccsit.mT]o.0.}.p..l5..>...a..J..N.D3.$.p..}]...}.@.~HQ...\.{.iZ.q]1..f..N?v3..j`l./.qU.A=.>~..\|.m..Y!../....J....m..Us.n%...FOX.z..W-$.....G.V.w.%..=..U$3..\.......Y.{......z........6..m.yeu..........4...t8..&.i..P.u. ..#...,..0z.<..D..]....\......S.G.q...v.].&.-3.k./.u.wqZ....F.)..0.I.mFng.I.....I......e6qE.vZ..m.r...n.!..7n>.......d_.Un.tU]?..7& X..Oa.<D[;].L..+W........\h;..D.0U..S...G..j....-...k%.}^E.V.c`...2...-..\|.eWZx.......?...s.JgK..N>.2.....p...xtYH)Go..[..#.0.#.:...L..A.b>M......J<..t.]...q.J].b.....I]...w.H..u3v.H-y...BW..Z..$..m..>..wj#....."7P.`.Cp4`jJ,...=ho.....9...X.N....(.,.6M/..t.V.z6.nI..xRqC...v..4.*..X.f..?v......

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64398)
Category:	dropped
Size (bytes):	254961
Entropy (8bit):	5.157935778298396
Encrypted:	false
SSDEEP:	3072:baRWCAGMFW5dwcLDL/utlfU89DK2Jr42uz1Uu6TA1m+uPSaSvN53:ipvMAd6lHWvu/2n
MD5:	D81728B84FADEE4F3E6F11E7A322146E
SHA1:	ED00C5DC0F336D5DAF0D347A154A0A7E337F07A3
SHA-256:	D582A0874FA6D0F4379A7A1AA10B506BF1303CAF06F0CDCA775B0602ABC56FA7
SHA-512:	F94068951DF78712100C202CF53B913A7F30BBD8C03AC3D48D3ABFD04A9F8641FF5115D0BBDA44E99D9292E33CFFFADFD3E7E7648EFA9BA8E84C26AB5BA2BFB7
Malicious:	false
Reputation:	low
Preview:	/! jQuery UI - v1.13.3 - 2024-06-11. https://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js, widgets/droppable.js, widgets/resizable.js, widgets/selectable.js, widgets/sortable.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/selectmenu.js, widgets/slider.js, widgets/spinner.js, widgets/tabs.js, widgets/tooltip.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/eff

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (17570)
Category:	downloaded
Size (bytes):	40845
Entropy (8bit):	5.34115582451504
Encrypted:	false
SSDEEP:	384:2ni0Dn1WoHLqKuaAXRmnpyxC9+NPzJ66IQ8dyfaRxZc71bj9OB:2iqP/uaABmnp7+NrE1dyf627p0B
MD5:	A667E79957F3087A07CDDD730BCAAD90
SHA1:	1D7DC3CB69F1A7B8BF5A95F9EA40D8899C147532
SHA-256:	97DFB488C48904BD8CE7DF886FAE2E52DB85651A31E9A1B4353B3EF40C05FFC4
SHA-512:	53E3C6ACBF52DF68345DBBB48A9B235CE1C1A1FB1E398E93D95087B741D614455315F819D864C7B84E42B0438A6B9C2B48811D91EF8A97CEEB9166CA3D257576
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3Df9bcb952ac981036%3AT%3D1727736043%3ART%3D1727736043%3AS%3DALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwODMmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Easy%20Credit%20Online&afdt=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=1421727740867155&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727740867157&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1227&frm=0&uio=-&cont=ab-default&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%253D%26query%3DEasy%2BCredit%2BOnline%26afdToken%3DChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56867)
Category:	downloaded
Size (bytes):	402703
Entropy (8bit):	5.475259998054872
Encrypted:	false
SSDEEP:	3072:S65BGXyy0KtEGy88CQG3Gm8bLlST92XRsd:t54iyptEGy89QG3Gm8vET9L
MD5:	9B62689DA1AA72A71835D38D99D20A96
SHA1:	603697230E1B51B5031A25AB1A53F4A4F361A059
SHA-256:	E758E555B63E231A16170A028053D83D90A38C01574A9AFA372A59D8049DE450
SHA-512:	8860A650735EFBBE91DB4363927C17ECF56C56B467830F99018AAF2A723D613B2B0B48FCD487FD70434FE38A7AAA22F4CA98F9A92C0B09150C41589F2EE2E84F
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/zkLxDsbw1hz2/full.footer.min.js
Preview:	!function(){var e={"./src/Footer.js":./!*********************!\. !* ./src/Footer.js !. \*********************/function(e,n,o){"use strict";o.r(n);var t=o(/! @sedo/vue-component-library/utils/sedoCookieManager /"./node_modules/@sedo/vue-component-library/utils/sedoCookieManager.js"),r=o(/! @sedo/vue-component-library/i18n/languageMapping.json /"./node_modules/@sedo/vue-component-library/i18n/languageMapping.json"),i=o(/! ./utils/Template /"./src/utils/Template.js"),s=o(/! ./utils/Languages /"./src/utils/Languages.js"),a=o(/! ./utils/NewsletterService /"./src/utils/NewsletterService.js"),l=o(/! ./utils/animationHelper */"./src/utils/animationHelper.js");n.default=class{constructor(e,n){this.variant=e,this.newsletterService=new a.default,this.template=new i.default,this.footer=this.template.createFooter(e,(0,s.default)(n)),document.addEventListener("templateAddedFooter",(()=>{this.templateInit(n)})),"loading"!==document.readyState?this.template.addTemplateToBody():

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2016:05:31 14:22:58], baseline, precision 8, 1420x1082, components 3
Category:	downloaded
Size (bytes):	192363
Entropy (8bit):	7.636436886854452
Encrypted:	false
SSDEEP:	3072:fPIylqoepCbCrGxh1a4I6a1/IPv6py5kb257kQDRgL0R:HZqUa4Lncy5kbikQDx
MD5:	C4FC2A699F5911C8A76801F9CC0E6041
SHA1:	234FB5423FA474A9AD4E6400AA0BFD234BCCD17D
SHA-256:	F3DE437B6F851ACA580C747F36504E7267C60A6909DD365096B8A19C7BC2B6CE
SHA-512:	426C8A00BC7AB0FF13C36B7704EB5EF5A81DCF43237D892986E46792A04173B8A50A6EA51C89626109481869E646682CCC646C6E9876CDAB4AF88C9C2BB8433E
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Parking_50-50_1420x1082_EN.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2016:05:31 14:22:58......................................:...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..I$...e4..m.k.9$.V..a.....~,...tO.g..7....x..b6.....yh......[....Fq2$.kCL.r....j8......]g...g..K..Y...o.......m.t..N......,w......I...M........7........

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (12714)
Category:	downloaded
Size (bytes):	25614
Entropy (8bit):	5.487174491256411
Encrypted:	false
SSDEEP:	384:2ni0Zfaxi4UNsQ4M0C2Tbl7Dr2ozaDxg7rEpJO7:2i6ai4UNJmltxrn7
MD5:	00B4DE0D4C200B3FAA6EAEE27C84B7D0
SHA1:	1BE7AB9CE7B50593AF3FDE563BBC6D59D1E81075
SHA-256:	98CE55D37231BCC8AB65E738AA8D1B63D57590C0545BD2D9BC5E78E2B45DBDA1
SHA-512:	F15EC0F3731A7C0B2E61D6A809E56FE627A64517AE8755E6C3D82387F8B6436A7EB5E8C5FF1C62E15CAAF62CF23A94E9F8A7044C2E5A0C0B824B5F2CD1873DA5
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3Df9bcb952ac981036%3AT%3D1727736043%3ART%3D1727736043%3AS%3DALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwOTcmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Online%20Personal%20Banking&afdt=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=6801727740881857&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727740881858&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1227&frm=0&uio=-&cont=ab-default&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%253D%26query%3DOnline%2BPersonal%2BBanking%26afdToken%3DChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4%26pcsa%3Dfalse%26nb%3D0%26nm%3D2
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp55kknrum", last modified: Tue Sep 17 11:16:40 2024, max compression, original size modulo 2^32 450160
Category:	downloaded
Size (bytes):	120986
Entropy (8bit):	7.99779152335096
Encrypted:	true
SSDEEP:	3072:qRGJgz6bNgd3sl+bB1MA5Pj6uv5HqHpxTKa7tzzufQO1vIy68Mgkpx:qL2bkcQbfJVtktJufQ8wy6ykP
MD5:	2B99A4D62A7128947770E032AD56F377
SHA1:	47B1A12A8069445B647B73FAFF175079969A97EC
SHA-256:	F8AA8AC514D45C9AA9159FC1C8A8F4A23D5CD3F25001E617F792401E2630302B
SHA-512:	D5B4407A2E636EFAE9A98CAF8AE4CB7E70DE87392451DEC6FC9245DCAF2A917659B3FA229014B6D904F7C8608AE0D30234F23A888D684429A5D9FC427A80BD54
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/index.module.js
Preview:	.....e.f..tmp55kknrum.....6.(.Ud..^....I.]).V..D._k..CW..%.b#...q-..~g.....N6.s../.I.....`0....I......_&.....0.E....y.r..E.G..u<Y..I ...;u....8.oT....7..F..h....w/.......b.G.......aN..".j.....o5..x.F..8.RQK......,.D(....w......=.\.4.{.C.u\|.]o...C..u...a.].X...YQlU.x...U....\|..=..:.)a....,.p.....}]...u..j.....x.......+..L..........#.G....&H.I8...cc=dA..W.;..k...8.....7.Q%<.JV.0@Q..'.g..<.G<I....S.;.........D..Q.....P.co..fq0.Rk.#....i...z0..h.......Ri.....X.0@....4.>...4j.........'..w}..RY...`...I.2.......P.".J..\b.0.m.......3.].XT./.)vzv..x+MM+..........U.\.....GWb...dOB?Z.f...1..-..q.jF..k...7...W....L.\|..,...H4..a.R.&.2....r@ {.(4.kXmZ.....a?..c'4.y.`..H..+\|S%.X.. ..Q91U.l.8...._.....s..xS...HJ...$......!R.M.Nj;...i:...`6.Z.K...,f0[.U.&...).I\|[..y.ir.:...U].z..S..js..&.-x..x..!.0.r..........'.`c.-.9..,..9(..&Z.!K..../.\...=5...lv46v.p...ja.o.P....~0k.C...0..[...E..cj....%..K...Y3K....L<....f.."Fd.Aj...[...M. ...E.,T.@L......

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	48097
Entropy (8bit):	4.541259077514592
Encrypted:	false
SSDEEP:	768:cfppX5/9YbZIqEGYbGqnq77SdMOsZff7pUbGA+dHeSZKFwj:CKYw3A9+
MD5:	5A2C392E7ACDF6E9DE6E00129500503C
SHA1:	C8D0F80381E4CE180B5EB3C4C98539907292A7BB
SHA-256:	878DA09A057EC8F1775CDC522E5F7EC44966DF547A87A9C29826BA114833C24B
SHA-512:	52223B04EB9121F05442DBC48519A95FDABB81C414772EE43DC837B58F797B97314796EF6D77EA6B7A1F3FEE5937EC039E617FCDF8B146822792ACCD2534E141
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">. Creator: CorelDRAW 2018 (64-Bit) -->.<svg xmlns="http://www.w3.org/2000/svg" xml:space="preserve" width="1440px" height="140px" version="1.1" style="shape-rendering:geometricPrecision; text-rendering:geometricPrecision; image-rendering:optimizeQuality; fill-rule:evenodd; clip-rule:evenodd".viewBox="0 0 1451.085 141.382". xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <font id="FontID0" horiz-adv-x="666" font-variant="normal" style="fill-rule:nonzero" font-weight="400">..<font-face ...font-family="Arial">...<font-face-src>....<font-face-name name="Arial"/>...</font-face-src>..</font-face>. <missing-glyph><path d="M0 0z"/></missing-glyph>. <glyph unicode=" " horiz-adv-x="277" d=""/>. <glyph unicode="." horiz-adv-x="277" d="M90.9909 0l0 99.9962 99.9962 0 0 -99.9962 -99.9962 0z"/>. <glyph unicode="?" horiz-adv-x="556" d="M231.002 175.

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7457
Entropy (8bit):	5.34297521532081
Encrypted:	false
SSDEEP:	192:7iDQ7e1rjU7t+K4K8caBIsKcML42CRNcookG2SXTTev5:7roKlX3eSXTTeR
MD5:	E1FBAB4A7A2F1F4DB9C23112004E958A
SHA1:	DFC4F8DBFDFC8E3AFF41881145D7BABD2C914B9B
SHA-256:	293C213205CD107EC18A50AE1F8A7B79915117D162CC58701A575DEF7C295D39
SHA-512:	D97D5F13D61BDAB589DE2734DA87D603C3C8540D3EB2C9D8A98DA56093DA2E9CAFEFF55997335946F8A15AA5C26367D34AAC11ED3626D7998E0EFB704AB993E3
Malicious:	false
Reputation:	low
URL:	https://api.usercentrics.eu/translations/translations-en.json
Preview:	{"labels":{"ALL":"All","BACK":"Back","CID_TITLE":"ID to request consent data","CNIL_DENY_LINK_TEXT":"Continue without accepting","COOKIE_REFRESH":"Cookie refresh","COOKIE_STORAGE":"Cookie storage","DETAILS":"Details","LANGUAGE_TOOLTIP":"Changes occur immediately after selection.","MOBILE_TCF_MAX_STORAGE_DURATION_TEXT":"The choices you make regarding the purposes and entities listed are saved in the local storage","MOBILE_TCF_MAX_STORAGE_DURATION_TITLE":"CMP Maximum Storage Duration","SUB_SERVICE":"Subservice","SUB_SERVICES":"Subservices","SUB_SERVICES_DESCRIPTION":"Below you can find all the services that are subordinate to this service. The current consent status of this service applies to all subservices.","THIRD_COUNTRY_TRANSFER":"Data Transfer to Third Countries","VENDORS_OUTSIDE_EU":"This vendor is transferring data outside the EU / EEA.","WEB_TCF_MAX_STORAGE_DURATION_TEXT":"The choices you make regarding the purposes and entities listed are saved in the local storage","WEB_TCF_MA

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp_fdb7c0w", last modified: Tue Sep 17 11:16:30 2024, max compression, original size modulo 2^32 2217
Category:	downloaded
Size (bytes):	970
Entropy (8bit):	7.80515027083298
Encrypted:	false
SSDEEP:	24:XzQSBED6tjGe2UQ2zYWn13kF9jD14va1UHOaZ1mk40D77O:XzbBEDejX5zlpEbeOo1mgD2
MD5:	343C5A2330FBEBA75D5619CBDF4BF55E
SHA1:	06721B4782D4C06B9FC66A789399D99B23A86D02
SHA-256:	E0B85C9BA9C3292DD86D7D9FAF6D29524AB70ED1D6E020883FD6BA09460CD390
SHA-512:	77B2BA703BBD116755E6F292779C5C157836D87B8E769DBFBC5AEB1C8FF6424396C0C232F7810AA0EA0BE5D74245464F248D8957DA38D93FA87425B4767A5C07
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/DefaultData-fa10cf7f-3d7db9aa.js
Preview:	.....e.f..tmp_fdb7c0w..Vmk.8..~..."..m../."t{.[.w.s.A...G.#..Jw....Qd.v....F....yF..^.....8\|s.@............>:....l.P....u"..Nl.?'.....'..F..e.N...w.%.....!.A.6Vf.P..Zw.@....v6kf.,-KRm.A..[L5......^(.3)m..h.x...b....9.U\|./.0.....i...x.I.9...".7OO._..^....t...K..s ...R...u..A..[...\...3B.O..F..<.D.x..n.[..{ee....:pm.E<lW....&.Dz.i."..5....N...c...)d.....cC&.'.....y.....L..u...\GbC...W.4U3N(..y..c\....@,.-&.G^..r...L..6..L..&Q.^..po.,'p..aEay..sW.....y..I.bBW..M.'ct...N........+.1.?....V.A.&.c0.ZiR.......~.[.=.....y.._.\|H._.....>..+;#k&..]...$......;@......3..`l....u4......).\..{B.Qg,....2.$.W....x.gxue..e...L.Y.DKuP.\|A.}:j.#.2.......N{..%,....W....".(Q".o.$~..y..q.. ..XF!e.t.o.}V..%.L._^...}...(.%..7.b.P...+,?=...@....V....a.t..k.......I.#...G#.=n..`.zB..[..Z..h.NB...p........-....o...ZZ.._....L. .....`O.1-!.'d......... Z..."......h.RL,..hK1.w%I.Dgg2.^I....+...o.i....'...+.oR[V......i/.....

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmplia6_9k8", last modified: Tue Sep 17 11:16:34 2024, max compression, original size modulo 2^32 159833
Category:	downloaded
Size (bytes):	48659
Entropy (8bit):	7.994214091197096
Encrypted:	true
SSDEEP:	768:jM/GZCmBGNDG9Ri8HGd3I9NydPngtCuwRQMlXHHd9MPCFzOCsz8U/iJMeMBTTXCq:jMG1GNDg4ifMPnzu+XXd9MyMzSJMeMhz
MD5:	C50FB1F4D031300832BA08A720FB45C4
SHA1:	4C0758D8B6CD0164AB620D2115C17FBC3EE3EBC1
SHA-256:	245CBF9A2B05D6FD36FF612F28688B82F0F65E896D7957A95427C5535FB6DA42
SHA-512:	EF1A92374CD813F720DAA2F9E8469F25136E2E12E7F2AA97B95E59632026E7D793EAC9A2611BD6AB43DF0DED10E228E39026888149B8894EE5CE27769A72E522
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/VirtualServiceItem-d95151cb.js
Preview:	.....e.f..tmplia6_9k8..Yb..(.....\'a.3.B..l.,[I.U:2H.",.`...K.....;..J:"2.$@P...t.... ...####cJ.b....bG...v.7f.K.u....6z..>....!....f.>.z..........;f.!........;.......1.=.^..U7e#.n.F....."..d#.....WWlD.o1....1.5....5..lj.^..6......Q{.l.........l......#...'.}.F.........=e.S.}..m.}.l..5.=..l\..oll..+6n..{6n...6n..G6...7l...Ol....l.../l...?.M....;.....i.`.h.1<,h..f.C.)4s...6M....)#.4x.......l...Ap...B.!..;......rh..aJ...g4..@.t..i.......7.Cx8.I...f...h.....#..4....L...k....7.!......@.....}x........4A..;.i.\(.3.8..E0Yx..-R......c.1s5.[J8...b9..\U6..QcM.......l+TU.a1........U_U..J`.z.cG..../B..9...KM[j.88I..9.N.\......v._0/....K.")..\....[.~.L...L...y.B...\|i......-p...n.s...h......c...a..q.2[Z..(..cE..2T...{...X\|.F..^....gY..--...]..R.tg..MG..?......<...8.X......[..-.....`.j.!@..:..@.>xN.}....uw.(0Y.ju.?.!.'.[.37..@.C]rx..M.L..T..4cI3..f&I3.=.N....R@...3k....zxw.x...p....LQT.....F..,...Xp....%".....:. ....Q....yC.".t....v..O....`..!;...r

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	522
Entropy (8bit):	4.486830141218752
Encrypted:	false
SSDEEP:	12:Z+Nv4FBU8Th0NIv4FB86cN8YVvF6DVvFRhn:ZW448CQ4rcCYJF6DJFRhn
MD5:	5B66A3D2A8973A29D8D192DB0A46080B
SHA1:	FF72CF3C5FE0192B10089B599502AB3FABBF0023
SHA-256:	7BC33CEB36096D0DE05681B3D455CAD366588A8E5117B36EF8F4061F47E39425
SHA-512:	A78DF47CC3EE052B4ED1FBD50C91940941B095CAE13C6394408A44BBC5E6965DF8CA5A232AF25DAEDBF5E4BB3587BC6335B2689ACC1C59452B888123D2500642
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/c7r/assets/static/images/icons/site.webmanifest?v=dLJ3bx2xjj
Preview:	{. "name": "Sedo",. "short_name": "Sedo",. "icons": [. {. "src": "/c7r/assets/static/images/icons/android-chrome-192x192.png?v=dLJ3bx2xjj",. "sizes": "192x192",. "type": "image/png". },. {. "src": "/c7r/assets/static/images/icons/android-chrome-512x512.png?v=dLJ3bx2xjj",. "sizes": "512x512",. "type": "image/png". }. ],. "theme_color": "#0060a9",. "background_color": "#0060a9",. "display": "standalone".}.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (15768)
Category:	downloaded
Size (bytes):	30375
Entropy (8bit):	5.5629201549845115
Encrypted:	false
SSDEEP:	384:2ni0Zfaxi4UNsQ4M0CHWnWICAyxWGXRX2fMXqV+VxwVAdOc:2i6ai4UNJ+JfOoc
MD5:	268144E325CB793217D1A8761EA565BE
SHA1:	915DA5324D0FF41D13B9C8C67A9ACEC24D841137
SHA-256:	1E3B324CE901FA7629B3CA41EBB732AAB6306FB776765CD2BAB3DD56D35F48E8
SHA-512:	9D17D1916D9DCFE2D76512AC494C59EE73D3F718393A5DAB6FD2974B3F45C3B3277DE0113810B34F68F5098297092469A272A683CA2AA53E37F2A4597D9D81E1
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3Df9bcb952ac981036%3AT%3D1727736043%3ART%3D1727736043%3AS%3DALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNzcmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Cit%20Online%20Savings%20Account%20Rates&afdt=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=9271727740860643&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727740860645&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1227&frm=0&uio=-&cont=ab-default&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%253D%26query%3DCit%2BOnline%2BSavings%2BAccount%2BRates%26afdToken%3DChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55651)
Category:	downloaded
Size (bytes):	443013
Entropy (8bit):	5.565770993049353
Encrypted:	false
SSDEEP:	3072:UaC6+WKyy0ztEGIJ2TjD9yAZnSPdh7sGQZVq8bLlbT9jcc:FCk3yctEGIcTjDrZrHlT9H
MD5:	292F026AB8F4867FAE5824CB8F3D34A3
SHA1:	D6B96752D29BAAB2A3C907769109714B1B196B46
SHA-256:	06660678D49BFBE85FF7B4BA47D1FFE1E47F6B56AB0C24A3560119D23B5A5AE0
SHA-512:	C3F2BD22440FA925DDAB7F4DD5C55A7AD0D1A9B9E848F0A2529218B79760AF71FCAE2A0CEAD1BAF773977337CC0808C40869AF27CA175783045C56011A210020
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/p9HJ4M2Uz7U4/full.header.min.js
Preview:	!function(){var e={"./src/FullHeader.js":./!*************************!\. !* ./src/FullHeader.js !. \*************************/function(e,n,r){"use strict";r.r(n);var t=r(/! ./utils/LoginService /"./src/utils/LoginService.js"),o=r(/! ./utils/searchHelpers /"./src/utils/searchHelpers.js"),a=r(/! ./Header */"./src/Header.js");n.default=class extends a.default{constructor(e,n){super(e,n),"loading"!==document.readyState?this.init():document.addEventListener("DOMContentLoaded",(()=>{this.init()}))}init(){this.LoginService=new t.default(this.lang);this.loginData=(async()=>{const e=await this.LoginService.getStatus();this.userLoginHandling(e.data)})();const e=window.location.search;this.$loginStatusLoggedOff=document.querySelector("#login-status-logged-off"),this.$loginStatusLogged=document.querySelector("#login-status-logged"),this.$watchlistStatusLoggedOff=document.querySelector("#watchlist-status-logged-off"),this.$watchlistStatusLogged=document.querySelector("#watchlist-s

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmplia6_9k8", last modified: Tue Sep 17 11:16:34 2024, max compression, original size modulo 2^32 159833
Category:	dropped
Size (bytes):	48659
Entropy (8bit):	7.994214091197096
Encrypted:	true
SSDEEP:	768:jM/GZCmBGNDG9Ri8HGd3I9NydPngtCuwRQMlXHHd9MPCFzOCsz8U/iJMeMBTTXCq:jMG1GNDg4ifMPnzu+XXd9MyMzSJMeMhz
MD5:	C50FB1F4D031300832BA08A720FB45C4
SHA1:	4C0758D8B6CD0164AB620D2115C17FBC3EE3EBC1
SHA-256:	245CBF9A2B05D6FD36FF612F28688B82F0F65E896D7957A95427C5535FB6DA42
SHA-512:	EF1A92374CD813F720DAA2F9E8469F25136E2E12E7F2AA97B95E59632026E7D793EAC9A2611BD6AB43DF0DED10E228E39026888149B8894EE5CE27769A72E522
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmplia6_9k8..Yb..(.....\'a.3.B..l.,[I.U:2H.",.`...K.....;..J:"2.$@P...t.... ...####cJ.b....bG...v.7f.K.u....6z..>....!....f.>.z..........;f.!........;.......1.=.^..U7e#.n.F....."..d#.....WWlD.o1....1.5....5..lj.^..6......Q{.l.........l......#...'.}.F.........=e.S.}..m.}.l..5.=..l\..oll..+6n..{6n...6n..G6...7l...Ol....l.../l...?.M....;.....i.`.h.1<,h..f.C.)4s...6M....)#.4x.......l...Ap...B.!..;......rh..aJ...g4..@.t..i.......7.Cx8.I...f...h.....#..4....L...k....7.!......@.....}x........4A..;.i.\(.3.8..E0Yx..-R......c.1s5.[J8...b9..\U6..QcM.......l+TU.a1........U_U..J`.z.cG..../B..9...KM[j.88I..9.N.\......v._0/....K.")..\....[.~.L...L...y.B...\|i......-p...n.s...h......c...a..q.2[Z..(..cE..2T...{...X\|.F..^....gY..--...]..R.tg..MG..?......<...8.X......[..-.....`.j.!@..:..@.>xN.}....uw.(0Y.ju.?.!.'.[.37..@.C]rx..M.L..T..4cI3..f&I3.=.N....R@...3k....zxw.x...p....LQT.....F..,...Xp....%".....:. ....Q....yC.".t....v..O....`..!;...r

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpjb_3iwb1", last modified: Tue Sep 17 11:16:17 2024, max compression, original size modulo 2^32 5482
Category:	downloaded
Size (bytes):	1142
Entropy (8bit):	7.838370181242706
Encrypted:	false
SSDEEP:	24:XEHTZiYxeX9oZbeYbis3qP4vIPqxAMp4gUaqHlOeF/:XKAUetoJeYGs3Hwqq5g/qHlOeF/
MD5:	2D333D3B78DEEAB0A42FC5C2C41494F3
SHA1:	B5439CE6D3B2357466B22E3188CFB11457DF3DAD
SHA-256:	2D611DBDE27CA7196AE91A5D1DC899A33323BE04DD288D38A68FB445004313DF
SHA-512:	C6BDE41051D6EC18CA92CD98CA8B6711248760E889F0A4AB9C64DE61F6A6123D3830D50E5967E90FA9F0840F5844D59C4EEA26A10056E2666675F2750D88CCF6
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-sdk/4.38.4/cross-domain-bridge.html
Preview:	.....e.f..tmpjb_3iwb1..X[s.6.~.WhyX..1}.....C....K'.a.Y.O..Jr..N.{%..lSC....p.w.wn.<.4]LV........P^@......u.....P..... .r..Q..\| .....a>.y...+.x......;Q...>.].&.;<.R.D8.)....=..'..f..3L...1b>.....~Hv0N.........Re...W...@.&_...z........j.^.+0.N....Z.9f..4..d\|.\-....)..T6..&...E....X.F(...\|.6./..G........D..,n.....7x....n/..`.<E<&i.......{...D..E..9..q.....4<I6f5^.r...I[=0.....M.S.#/....J1.iZ.l)....h.\.3.v.`.&.9^.$....?..Ee...B..<...p?U_.7n..NtN.....v.B.N....TH....S.7......E...D`.!.....rq.grn...e..."k!...B_O.>..B..-..mL)..1+...mcK.....50......D[.{..g.......Q.Y...M.W=F..B...J....ZWThe.vL..%O...kO....[....U.....^j...'\......[..p.s5N.ib.t..E.....a.}......p.'8..z.V.H.r.a.i....!..["W.R.W...>!..=..e..hhXS.6"X.......).D......l...r....Zf....NQ...G.E.....L.......}A...^.<.X..X.z..U.@u.4.7.O\,.*M6U...;..C.\Y.Z.Y...r..$m.WAkHO..Ns\......9.......oe.;..\...}#N....6..{GP.+.<8...c.r..(....I..E..\|p< .9%I..<\|...pPL.Z^...D.f.y.g-Y6.zO..........&S....[...?

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp0yrdjd2n", last modified: Tue Sep 17 11:16:31 2024, max compression, original size modulo 2^32 1728
Category:	dropped
Size (bytes):	755
Entropy (8bit):	7.775474941492504
Encrypted:	false
SSDEEP:	12:X2jC8DoYO/DMdBMlSAll4D7sOVuU8DSu2TNHfq1WOK1T55jHobgf0hjdAd7W7hn:X2ugHO/DMdBMdll4uDSu2RHSLwzOP8Oh
MD5:	B0B7CF1233C893469CAF7CBF3145560E
SHA1:	D22FF70EF795B5ABF97B488E01C64CB0141A5B55
SHA-256:	FE11978FB303E3DE23F1F5904653DDDCB3EC6899FDD6BD90250249C69AB277C9
SHA-512:	ED5C49BF050574F2B3F1341DD1B68C50ABCE875982B16FFCBEBAC3486CCF750E881A74A2477A0FB06DA629DF6C41E361FD26A5E2B9FB6FBA3A36026E5A78BD79
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmp0yrdjd2n..U]o.0.}.H..H.K.$J..O..m.%........%..!$.Z4.bs....c;$.2..i........L.........9....1.,5./.".j..e....cB.2.......T.......LH..?P.F{..q0..{}.F#.6..:z.I.h..G.c....!...w...u.....5.............~4..{......_..w"7.h.......Nd........x ..+c"&....&....F...CcS7..f...e.i'.../.......NbF.U.D9..cg...w.YF.%.;.$&..u]3w.Y.-g.u.Nj..........3IggF......p:4, .\|...!EQ..:.Fqi..T?.u...W....n...>..toZ...a.o`.k_\...........beg.P%V.0._.Zg'j......1A....L...-\|......r.(~.A..[%.EQ....D.......P.P...P.4.`..8..d...^......>..]m]p.ElG-...X.....'....F.o.NW.\|.;...?a!....O.'.V...R....QL..1P'.@.^ne9..1.>?/....U....m..T..X..M`.b<.Re.kR..z.5i....m.S.Zc..@y....0...%.[...UX...M...-W..,@.r..\|..Q...?..FlF.Z :..w._.....B8.Y"..O..@.......

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmphejarc7e", last modified: Tue Sep 17 11:16:32 2024, max compression, original size modulo 2^32 1513
Category:	dropped
Size (bytes):	616
Entropy (8bit):	7.64751725155793
Encrypted:	false
SSDEEP:	12:XJQiwAirSYKl6SbehEMlKN9RkcNR4ZkwDlujUTbwwmUszJx0FGUE0sO3cJnLO/:XeiwTrSvZbeWMBcNRC/uoTkrdxht0qL+
MD5:	954CA4ED0665A91EEC3838F6217030AE
SHA1:	5A515CE38AEE45BE434A801D51BA0B10442B1C98
SHA-256:	C894B7A9CF6E2BF3E964E6EDAB92EFD9DBF82670954B4B28DEF5022D28689D35
SHA-512:	59EDEBE9D1D6300E5B84CF48FDF5C72C93D76DDE70DE5A65DDFC414631BF3BC34EB686AA8CF493E4D089EBE10E4C663D9C557B398ECAA65CF7BDCE5CF2E57644
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmphejarc7e.....0...}....$..,fQG4J.H..f.F.2...cl.K....!...vu..`~.O2.....-GH.(@/N.@.S..W..d.S.2.T..S...N-(.d..NU.S....2A.6.%.....7e.....N..S.".P.a.~44..w.w.w8.?.Rh3..#L..S..."...B..N.!B.QI......5..)9.e.D.w.&;.2.5L.e0."..`...iXT..y.....O?.q....fr..7..XG.....Q.y.TQc..!?..c...~..g{x..y...8...C.1-...#..q.....y....ddt..0.M}..9.....C.u...$.\*..-;...t..+.y.`C.a.z.O./&..I..wp.......ZZ.......An.j..sdA}....v.Ne/`W.=..;../{P..O.[+.X5.].h..39.."..:@..$T.]..t.t..i[u..l.n...#+.d.N.......p.T.!....j...D/...m. .aJ.ek..U.,k......+..37...h.=.F..k.....H.0.z.s.....V....)..+v....'...T.7....~.....

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpz39m4eqo", last modified: Tue Sep 17 11:16:31 2024, max compression, original size modulo 2^32 2937
Category:	dropped
Size (bytes):	1077
Entropy (8bit):	7.802144664467643
Encrypted:	false
SSDEEP:	24:X2LG5DiW9Za6EIL0AXpEdSQdpiI7RuXAMJoadrF65wsdvAh+L:X2LG5DiSa9IFXp8nPiItuXA8c6t+L
MD5:	C2E932D4D1B024014630F22BD817AA3B
SHA1:	FC46FC43601100941B49908D7DE4D508FFB8EC42
SHA-256:	0BE9A77CCF72E583D8F7F421203F14F01085405FC73CFFA3E27E6BB6E1FED93E
SHA-512:	A9E5C3223E586D9E917585F50B03F5080461472BFC67C304E484B4B1FC35026CA1B9E683F9082D0734A64FEFCBFB48187DE66CF6DEFF924DC832CEB05F07E260
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmpz39m4eqo..V.n.6.}.Wh] ....E.n.@.\|.b..."...7Z..%R ).../I...8[YAh...\.9&....p.H.....2 +3R /fd@.f.@3 .f.w..y/.....A..2.._.Y..a..,R.......fATJ.s.J.p..T.$.)...Y...v.i...,..Jq6t..v..o......w`...Q<...2....K.bd..wU.{._3H.8..H.B..s.S...r&. C.........x...{?'..........+. ..X..r....X..f0..S...R...-.$..(uE.45..c<.....8c.$8v.gg..&...P...w.T].dd..wAW$..C.......J......[.IHN.j..Q.a.m.X.v....^..QF../.=URa.U/...E...N...)Go6.....=......a...d..oL.".u^.W.W..a<..a.BE#..c..w.....Pj....&=.$}.V~.....GN/..W...Yf..fN.e*x..1.......?2Fm.+..j..........C...../...m......7Y'.>.C...".e6.x.7....\|.v`N..Z.&2.....O..<.L=.tp....Z...C.%5]9`........~o0.J-...i..........oz.!..a.....e.....N...>...\|q......J.C..n.vS....#\|q..a=..Z.0u....%$G..-.[.1s{...#l...P..a..1.......F.I.asr.......[.....v..2~&.......s...7C.V....(\..l.!.....j....~n^x.f.[@.P.p..S.w.;,o.....@..q.q.y{#//....\|.....#...B....6..4.>.qU........IC}..1.....<-..\|...e]6{....a....>N.i..i.:x.9l...

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	3.090787153125625
Encrypted:	false
SSDEEP:	192:jiHSINqv0tJ30DezSfPAXTZwC3D2N2xp1Fd/ar/+zi3LHZNwkQH0iWpXDt3TN8rB:jzAnP9j
MD5:	DEF00C11B1596DB4EFEE6A9FBE64FC27
SHA1:	BD298981E6D8D7E4FFA18ABCF687041F4246672D
SHA-256:	95C427FA3143B1896FAF42A6406686CE7602CB39052081BB32D12B51C9E047E4
SHA-512:	C056E95DBFA1AAB3A50DFF18C6D577DBFFEA72C93316FFC53B6B7AA41DCC7707A810D563894589A7305DE0B76610F88150B2034670DE368773B2B356F14AD30F
Malicious:	false
Reputation:	low
URL:	http://img.sedoparking.com/templates/logos/sedo_logo.png
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................@...@...@...........................@...A...A. .A. .A. .A...A. .A. .A...@.......................@...@...@...........................................................................@...@...@...............@...A...A.U.@...@...@..@..@..@..@..@...@...@...@..@..@..@..@...@.}.A.U.A. .@...........@...@...............................................................@...........@...A...@.j.@...@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@..@.}.A...........@...@...................................................@.......A. .@.}.@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...A.G.....@...@...........................................@.......A.U.@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpyiylrfjd", last modified: Tue Sep 17 11:16:29 2024, max compression, original size modulo 2^32 473
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	7.101694903074545
Encrypted:	false
SSDEEP:	6:XISDMHA6RQv98lnIQh0z8AuiUAJS6rYcyyln:XIq6Hlnjh0Q36pYD2n
MD5:	810EE2A65A302B5F880E3A00E840D6CE
SHA1:	0216DAA7AE065F8634DF06741E9CC791CAA9C1C0
SHA-256:	570D71A067BF20C244E164897D82D6C8E77D712A5B400A00BE41EFBBD6128487
SHA-512:	898D331822B32A20BD8286B2494EBD1119A8881D82B4C468594838459783C794D8F01D8D00B69B068C5D407C229EC5E899E621E72527127095FF01AE75CAC695
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/ButtonsCustomization-5698ac85-5d43b15f.js
Preview:	.....e.f..tmpyiylrfjd...Mj.0...=.....f.#...r.U....3A.....^.D-t.....{\|.`..p...8<.#7.......C.^..M}......2...'..(Q....V..o;.j..V[..EL.a..)r"x..q.%...1%.e.oWF(........E.C.=z..B._b..w..+..=...FV5..=x.=..+nH.d.h.+..=...P.n.f...hi.]....

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	171
Entropy (8bit):	4.99164110946794
Encrypted:	false
SSDEEP:	3:t6WCrSrwvDmJS4RKb5sAR+bIAG7dScHaZfPRFUV6d+GsMQ5rxXEREhfgW:t6h/mc4slhobIAKRaFNzQ5rREyN5
MD5:	4D5C5B51837AC556B931A2D38B6566D2
SHA1:	AB94B7F0E1881E6C5475EE14EC37AAB254F64542
SHA-256:	FCF552DAEECA47E67A22CE6EDA8EE35C5F0DF67CDBFA5CD5AD8C33055C300A34
SHA-512:	BE0FDE7A0D261AA92AF89DF904A47A88973EA4B855D7119E3FDB84E42E81AD7CFA059754273E816386AAC3536A71DE2D0CA96072D206D0251DDB8DE33FAFE233
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/svg/right_arrow.svg
Preview:	<svg fill='#D7D7D7' xmlns="http://www.w3.org/2000/svg" height="48" width="48"><path d="m24 40.55-3.35-3.4 10.85-10.8H7.45v-4.7H31.5L20.65 10.8 24 7.45 40.55 24Z"/></svg>.

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.452819531114783
Encrypted:	false
SSDEEP:	3:H52WthYHV2Nk1:IqR21
MD5:	5C338D6F09B30800D3CBE195E9C1685D
SHA1:	1A1879ADE5024AEF1FDC9272719C0CAE73AE6182
SHA-256:	33A6546E6E1AD007224E785BE77227DC006FD1057F30F4DA2351DDE40E84BD6C
SHA-512:	D2F5BC23E0F50963F867CB022203E9BBB426C0F4E8DE2C865C8BA6FE8C658170934FAAB1AAF85E8612B317B9F524C4ACE3297A382C6EA4C60646406EC693BBC1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmRDbEU98QszRIFDeO8ISoSEAkBBRZl3eKjCBIFDVQbpTU=?alt=proto
Preview:	CgkKBw3jvCEqGgAKCQoHDVQbpTUaAA==

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	3.090787153125625
Encrypted:	false
SSDEEP:	192:jiHSINqv0tJ30DezSfPAXTZwC3D2N2xp1Fd/ar/+zi3LHZNwkQH0iWpXDt3TN8rB:jzAnP9j
MD5:	DEF00C11B1596DB4EFEE6A9FBE64FC27
SHA1:	BD298981E6D8D7E4FFA18ABCF687041F4246672D
SHA-256:	95C427FA3143B1896FAF42A6406686CE7602CB39052081BB32D12B51C9E047E4
SHA-512:	C056E95DBFA1AAB3A50DFF18C6D577DBFFEA72C93316FFC53B6B7AA41DCC7707A810D563894589A7305DE0B76610F88150B2034670DE368773B2B356F14AD30F
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................@...@...@...........................@...A...A. .A. .A. .A...A. .A. .A...@.......................@...@...@...........................................................................@...@...@...............@...A...A.U.@...@...@..@..@..@..@..@...@...@...@..@..@..@..@...@.}.A.U.A. .@...........@...@...............................................................@...........@...A...@.j.@...@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@..@.}.A...........@...@...................................................@.......A. .@.}.@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...A.G.....@...@...........................................@.......A.U.@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	543
Entropy (8bit):	4.199353192354715
Encrypted:	false
SSDEEP:	12:yQHSz5Rd7OTR0VyAX9SxSyrtZDRWtYyNnULcHByI:7a5RdSRvAUlrtJRWyySLYByI
MD5:	4C6258062633129D69AECCE4F0023D9C
SHA1:	C985E54A808E6FB1B69B949ACADC054AE39629DB
SHA-256:	728AEC7E6742CF7D5C0894860C9D2DFB2C9AED8A8FF6ED399094AB782341762E
SHA-512:	E593EDB63A8D7D2CDFBFA87669C1768A2A357F5A6A45778AEAB4188D66A364286BA10533E2FB2FB715F1630AA73AA2AD75504385D25DC4B759861046511F232D
Malicious:	false
Reputation:	low
Preview:	$(function(){. $( ".ce-accordion" ).accordion({. collapsible: true,. animate: false,. icons: false,. collapsible: true,. active: false,. heightStyle: 'content'. });. });.. // init sliders. document.addEventListener( 'DOMContentLoaded', function() {. var elms = document.getElementsByClassName( 'splide' );. for ( var i = 0; i < elms.length; i++ ) {. new Splide( elms[i], {. arrows: false. }).mount();. }. });

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2720), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	82380
Entropy (8bit):	4.731253654050267
Encrypted:	false
SSDEEP:	1536:q1RH9cuH5LigSun2deT73iiiish2gJW7U8rdFP0IRbb7GzrEgHnh8k3Sx/a:gjcu9ik2dUhgJSU8bRb/GfEgHnh8k3Ma
MD5:	38E4DF982A23BBB62D0CCB477C908055
SHA1:	DEFEB029A981CA4BE68B2A817274B18B9D4F090F
SHA-256:	594D6FA1D9C6C91D5042729F56689A12CFA40F4F68AF107AF177B524E1F01435
SHA-512:	D39C4023510AE32368EDEC884A5528AC790CC814722DDD59F082B98A16BB259B179E6CC0E53FD7C979E2CAD19860DAD92F5881183B698B6EB5CBED4F6E08AC37
Malicious:	false
Reputation:	low
URL:	https://sedo.com/us/park-domains/?tracked=&partnerid=&language=us
Preview:	<!DOCTYPE html>.<html lang="en-US">.<head>..<meta charset="utf-8">. ..This website is powered by TYPO3 - inspiring people to share!..TYPO3 is a free open source Content Management Framework initially created by Kasper Skaarhoj and licensed under GNU/GPL...TYPO3 is copyright 1998-2024 of Kasper Skaarhoj. Extensions are copyright of their respective owners...Information and contribution at https://typo3.org/.-->....<title>Domain parking \| Earn money with parked domains \| Sedo</title>.<meta name="generator" content="TYPO3 CMS" />.<meta name="description" content="Earn money with domain parking at Sedo! Award-winning parking program . Fast . Easy & accessible . Register now and get started!.." />.<meta name="viewport" content="width=device-width, initial-scale=1.0" />.<meta name="robots" content="index, follow" />.<meta name="keywords" content="Domain Parking, park domain, unused domains, earn money with domains, advertising on domains, turning traffic into money" />.<meta na

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.72645217666044
Encrypted:	false
SSDEEP:	6:t6F3Ci9mc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6F3H9FPUPkHSt1UiT6i6jUs8b0I0C
MD5:	A6AD6E65373DB8C1B1F154C4C83F8CE5
SHA1:	84CC007D6D682C589E1E1F87482A5278830F3000
SHA-256:	920A378947204498C122722933B3A4B67788A2B6FADE8BD0D47CF830EEEE0563
SHA-512:	09B6D4711C284B1A04C9C4D874F3D1DDFC876C1491FB2AA283A13505BCDBFE90B02731D0B7AD5F492B1DDA2161A4AFE20040801EA634D2727CDE84319ADFB1D2
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2
Preview:	<svg fill='#1967d2' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp_fdb7c0w", last modified: Tue Sep 17 11:16:30 2024, max compression, original size modulo 2^32 2217
Category:	dropped
Size (bytes):	970
Entropy (8bit):	7.80515027083298
Encrypted:	false
SSDEEP:	24:XzQSBED6tjGe2UQ2zYWn13kF9jD14va1UHOaZ1mk40D77O:XzbBEDejX5zlpEbeOo1mgD2
MD5:	343C5A2330FBEBA75D5619CBDF4BF55E
SHA1:	06721B4782D4C06B9FC66A789399D99B23A86D02
SHA-256:	E0B85C9BA9C3292DD86D7D9FAF6D29524AB70ED1D6E020883FD6BA09460CD390
SHA-512:	77B2BA703BBD116755E6F292779C5C157836D87B8E769DBFBC5AEB1C8FF6424396C0C232F7810AA0EA0BE5D74245464F248D8957DA38D93FA87425B4767A5C07
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmp_fdb7c0w..Vmk.8..~..."..m../."t{.[.w.s.A...G.#..Jw....Qd.v....F....yF..^.....8\|s.@............>:....l.P....u"..Nl.?'.....'..F..e.N...w.%.....!.A.6Vf.P..Zw.@....v6kf.,-KRm.A..[L5......^(.3)m..h.x...b....9.U\|./.0.....i...x.I.9...".7OO._..^....t...K..s ...R...u..A..[...\...3B.O..F..<.D.x..n.[..{ee....:pm.E<lW....&.Dz.i."..5....N...c...)d.....cC&.'.....y.....L..u...\GbC...W.4U3N(..y..c\....@,.-&.G^..r...L..6..L..&Q.^..po.,'p..aEay..sW.....y..I.bBW..M.'ct...N........+.1.?....V.A.&.c0.ZiR.......~.[.=.....y.._.\|H._.....>..+;#k&..]...$......;@......3..`l....u4......).\..{B.Qg,....2.$.W....x.gxue..e...L.Y.DKuP.\|A.}:j.#.2.......N{..%,....W....".(Q".o.$~..y..q.. ..XF!e.t.o.}V..%.L._^...}...(.%..7.b.P...+,?=...@....V....a.t..k.......I.#...G#.=n..`.zB..[..Z..h.NB...p........-....o...ZZ.._....L. .....`O.1-!.'d......... Z..."......h.RL,..hK1.w%I.Dgg2.^I....+...o.i....'...+.oR[V......i/.....

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65469)
Category:	dropped
Size (bytes):	128582
Entropy (8bit):	5.285583929776152
Encrypted:	false
SSDEEP:	1536:rNZtf3ftRu6GTGkwGh+rVs+xsv2F7t835vk3CqDHEASBBmZJj/+L0S/dIG0ZqwaC:/tvfb+MZ8pvTb+JjGLqowajnCxn5
MD5:	E1D695FFAC0AF680A179A699A68B9893
SHA1:	A27500032B6DD1EA82054499BFA22063073CDC5A
SHA-256:	022C3D1C8A0C8FD5C46E82A58C269D6B501458186C23B13A6B6E1F3B52CCA0DD
SHA-512:	F13C7F98DF48EC3307E066FFDB6E02F7E3EECFFF0E27D6C3767F6CE877B3E8B81246CBA92EFFC5AD93412DACF086565ABC99BD09C64BA1249DB548FD8EF649C9
Malicious:	false
Reputation:	low
Preview:	/! For license information please see app.min.js.LICENSE.txt /.!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/dist/",n(n.s=9)}([function(e,t,n){"

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27332, version 2.1310
Category:	downloaded
Size (bytes):	27332
Entropy (8bit):	7.991751157831881
Encrypted:	true
SSDEEP:	768:98lHID7bGsgKetE+hR2nTPXyAlFh6Zc6u2:qGDWsgKUR2RveI2
MD5:	8BB4BA711047411893D35612BC631AB9
SHA1:	FDDC00ECA2E66E4431C9615DF508A1A377ADCE42
SHA-256:	4BCE5252202292E4D9D6DE37A5BD004CB52D8C44E9F940BBCDD030EA569F29DC
SHA-512:	48BEA7A2A376B01D097E02409AAC713500AA7CFA9903378977178677A2764C0C8E07B692379B3722163BCB201F9649620347045B4503C0A35CBDD16F1E036470
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/p9HJ4M2Uz7U4/2febe6dbe65f64ce36be.woff2
Preview:	wOF2......j.......`...jQ...........................?FFTM..(........`..R.L..e.....`..{.6.$..(..V.. ..>..d..L?webf.[gMq.o.I+....L.(.]..c.M?odF........2.&U.....!7.d.B......."...'yu.....s,C...3{.(........9e...Y.,?+uT$..T.=i....?T.)).6..+...L..tl.!^A~..Z.C.... H$.DM..qw.e......,.g..s..C+.[<........{..\{.......%..M.?..P3..;...f,;N.i..rU.'E.U.s}TD8........hn...0.B....s...fImcAl....Y....J2...........Jy._....R...jj..... f........+...4.. 6.wd..#k.Lp.............k..W..>mq... .....6...P.9....._.f.^.._...Y...Z...Vu.8..n..".0N.kF.1.B,bX...c..`.b...A..W...d..3r.r..~w..#...Ch...a.,y.X..."...L...........g.kiUlY[+...t.H..0.@.....}..Z.[..>L.E-..N..1.d?.N....}.3a.......g.mD...K&.D.i..$.e.]-...?k.g.....wF..K)".p..FD/Y:.l.~.>a....'....S{P.dC....1...uK............./.B.D.!.)OO.s..M...w.M.7..v....t.@..)..J..I1..\|Ar..B...B.Sr...m.r.]..KU=.g.9$4.kU....K....*.0]....zh...g..w.z!.,~._..0.}...aP...2..%kv.U.\......2<.....I.xS.b......f..f....j.}E=..DBf.a..$H.L....B.$k.E.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpuhnqew5e", last modified: Tue Sep 17 11:16:31 2024, max compression, original size modulo 2^32 5491
Category:	dropped
Size (bytes):	2448
Entropy (8bit):	7.915825988584021
Encrypted:	false
SSDEEP:	48:X2TRvvxBZQkdysZTyAxhqRa5U2Q5yJR/HKcUGm+H2baIjVIOfS35oklcB:eRnxB9gAxtU2Q5SzU7+HSaIqJ3YB
MD5:	5DA72F9934EC4DA8A4798966F0B6BFD8
SHA1:	F6973E32A9EFC3162635AD1FD0805FEDD8275BBA
SHA-256:	B3B6367472632D79597A664B7C1E5904E057AA7F11E9575667337BD101A7E0C5
SHA-512:	E806BA43043635444C7ECB7B6A5C067ED95B3B08E645A39738C9CE77F984D1FCA1A73392EC547F0B593716E685E348E68A8ABB23CB5DE77B94070CF6CA1D8773
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmpuhnqew5e..Xi......_A....h..IA1....`.....E.S.G.....K...{.:f..\|..`..bwu....]..m7..7N.;..r.T.7.......F.?s.T....q.T..c......u.]...,.;.n......d.n..YLk=..C....M..x.P..b^m.......e..6..U.d.v..+6.:.^W..]_......u...;.w^...m.G'.....n.rV.\|%.:.+2$...t.Dv..L..j0..M...+X=Y...)...........\|99....j.g.....r..7..l...vS\.w.b.yo......(..Di..I.O.m9..{Y..X.7U.~.....?..p..n.5...M...~.o......4eu....[.Gt...g./......h?..uU.......mW..{=[.Eu].aL.....jh...9.........]...../....n. ..h.9.q..i..e...[o.Z6.Wy.o..W..WHY...S......>..pT......-....E.).Xm.#p4#..Y.j..n6}.a[<.~{{.oC.v..........t.M].l...w\|'...c.[..i.w..:.....YVvu.....3..`...V......VAt.D..?..'....a...:3N..t.i?s\|O..T.. .\.X'...(pL...o.p....?.Y..^...1:2..i..q....I..Of.<r.9.dW..8...'..'8J.....I....D...>..X.!,.u`t.Bb..u$:..E..^.:..4.[.^A.O.r.[............-....4..Az..Y.C.".&.&v.N<.a:M.-M`d..>.h+../...D.T-....VG.T.$P.xD=\|.A.\|.R..z....P...0...j0.b{..eh...0..)...X.^b.......h..BQ.. .[.8..!n>.I.T.^..^"..c

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56867)
Category:	dropped
Size (bytes):	402703
Entropy (8bit):	5.475259998054872
Encrypted:	false
SSDEEP:	3072:S65BGXyy0KtEGy88CQG3Gm8bLlST92XRsd:t54iyptEGy89QG3Gm8vET9L
MD5:	9B62689DA1AA72A71835D38D99D20A96
SHA1:	603697230E1B51B5031A25AB1A53F4A4F361A059
SHA-256:	E758E555B63E231A16170A028053D83D90A38C01574A9AFA372A59D8049DE450
SHA-512:	8860A650735EFBBE91DB4363927C17ECF56C56B467830F99018AAF2A723D613B2B0B48FCD487FD70434FE38A7AAA22F4CA98F9A92C0B09150C41589F2EE2E84F
Malicious:	false
Reputation:	low
Preview:	!function(){var e={"./src/Footer.js":./!*********************!\. !* ./src/Footer.js !. \*********************/function(e,n,o){"use strict";o.r(n);var t=o(/! @sedo/vue-component-library/utils/sedoCookieManager /"./node_modules/@sedo/vue-component-library/utils/sedoCookieManager.js"),r=o(/! @sedo/vue-component-library/i18n/languageMapping.json /"./node_modules/@sedo/vue-component-library/i18n/languageMapping.json"),i=o(/! ./utils/Template /"./src/utils/Template.js"),s=o(/! ./utils/Languages /"./src/utils/Languages.js"),a=o(/! ./utils/NewsletterService /"./src/utils/NewsletterService.js"),l=o(/! ./utils/animationHelper */"./src/utils/animationHelper.js");n.default=class{constructor(e,n){this.variant=e,this.newsletterService=new a.default,this.template=new i.default,this.footer=this.template.createFooter(e,(0,s.default)(n)),document.addEventListener("templateAddedFooter",(()=>{this.templateInit(n)})),"loading"!==document.readyState?this.template.addTemplateToBody():

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153215
Entropy (8bit):	5.543655544096109
Encrypted:	false
SSDEEP:	1536:qni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:GqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	F26FCAB00DB4D6F16A709FA82F98BF8D
SHA1:	6A0C2D5559686DEDFE52A3B24C4516ACA3AF9D2C
SHA-256:	AE524EF03C6AB8B5E58DBB38AC93CD24AEB174196C1EC9913E4E7AF3E9AEA602
SHA-512:	25FC2E9D5212751DF33DABF4092C5C2B4AD5A7528BFF828123A48F401139882056C06127041778AC316005E49BB19F3C4439CC369353FD6874D17A1CFCC6F94D
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,17301442,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":10,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return funct

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	151
Entropy (8bit):	3.837002606073176
Encrypted:	false
SSDEEP:	3:YJELTrzaEIGWpHBAHJDLRHZFM9pz8JHABMREHJxr/4ALpHBAHJDLRHZFM9pzO:YQTiE32AHJTi8JERHdAHJTiO
MD5:	E9CD67A12859A172B0E44A712D57D56E
SHA1:	C710B9581CE5B3599FC267660F119AC78D486C4F
SHA-256:	1325830F2CAADAC80119B837399252F3A70353B6D73FA725AAC4E58ED73EE499
SHA-512:	A83C1E311FF01FAB116396F6ACAC026CD273079D1785E53DB5780F03B64C18A81E605AD37630DF2941A2B6CA6B86624DB0BC372F1B2380D2B95271E50280189F
Malicious:	false
Reputation:	low
Preview:	{"languagesAvailable":["en","de","fr","pt","es","zh","it","nl","ko","pl"],"editableLanguages":["en","de","fr","pt","es","zh","it","nl","ko","pl","ru"]}

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpkijf5vvx", last modified: Tue Sep 17 11:16:39 2024, max compression, original size modulo 2^32 5128
Category:	dropped
Size (bytes):	2111
Entropy (8bit):	7.906743654914115
Encrypted:	false
SSDEEP:	48:XcHr4l7jJBKtLqLBZfPgCUKphtJiwgJjIklYCKBjR33S0:sHc5jzKtLIBZfrLodPKfS0
MD5:	5DDBD52E915AA0202DCB4058D613068F
SHA1:	731594B30F11A511C901EFB097FC621EEE4E0F02
SHA-256:	D038445DB649CA70900DE422361C52F12B2534EF179D62197102EF139ED99C98
SHA-512:	58E1473DB6FE050CCF6E3BBE5A47F2E203340E77DBFFCD0B76CA7EFFCA6420DB9BE4967F765A29E4E95BB18DC8E0292274FCA64E49EFB38ABF45D7D123218622
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmpkijf5vvx..X{o.8...>.m......-.C.8...u..n[..%.m6...)?....c.I.`q-....p..y(\|.G..^........FQ.kE"`mE....!.....O......~P...R4..LQ.\-g..\.5x.............. Vd..GE..F....+..W.Y.+.=.W...W.........6.I..k.x...G~...C..<7....@.z.....-.4.2.....\.....k..SEVp..9h.:.]x..E.p...V.'2e......#q^..;~w.e.Z...3..4.C.........4...BV..Z>_..j,...I..=.%&...8`k.....>.p..d...b.......s.....al...hcf:.EK.....r.@k....9..!.4..u.._t.o....!<=c.0z...(.:M.P...G..5K.~....Ke...).$....=.Z..h..x....... 5..c.1..(Y.....;.m.Q....t........3.....~..^}+...xk.D...4..a...X..ty.N..3....Z.-.E.....b@k.....I./...xNi.p.....}....h...J.F.FK...9.0a.P..{.9..X...w}{.....O..zd.....HP.IX.o><x..$2V.a.g]m.o=>...bv.%..'Q2g.G!...&Q..-..W.1.CP'h.S(..;..:.#..E...u~..1....X..i.h....s....y...8&'..Q.P]X...@A.%.......:.~..b.2Z`./..cb+p4.,.t3..l&<.R.p............j.c.L..cY.B....{.......L_y..%.rC$0.Q.2..S.?'..^..6.1Y..].NS6.....i..y..&).....k.....N...Ow.).Z...F..i.....Rn..dr.i..$.*r99."s\|.^..'.~.).QL.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64398)
Category:	downloaded
Size (bytes):	254961
Entropy (8bit):	5.157935778298396
Encrypted:	false
SSDEEP:	3072:baRWCAGMFW5dwcLDL/utlfU89DK2Jr42uz1Uu6TA1m+uPSaSvN53:ipvMAd6lHWvu/2n
MD5:	D81728B84FADEE4F3E6F11E7A322146E
SHA1:	ED00C5DC0F336D5DAF0D347A154A0A7E337F07A3
SHA-256:	D582A0874FA6D0F4379A7A1AA10B506BF1303CAF06F0CDCA775B0602ABC56FA7
SHA-512:	F94068951DF78712100C202CF53B913A7F30BBD8C03AC3D48D3ABFD04A9F8641FF5115D0BBDA44E99D9292E33CFFFADFD3E7E7648EFA9BA8E84C26AB5BA2BFB7
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/c7r/assets/static/libs/external/jquery-ui.min.js
Preview:	/! jQuery UI - v1.13.3 - 2024-06-11. https://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js, widgets/droppable.js, widgets/resizable.js, widgets/selectable.js, widgets/sortable.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/selectmenu.js, widgets/slider.js, widgets/spinner.js, widgets/tabs.js, widgets/tooltip.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/eff

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 24134
Category:	dropped
Size (bytes):	7514
Entropy (8bit):	7.972817339817039
Encrypted:	false
SSDEEP:	192:xu+tUmw+Xl4veocBfqyrPEuB+59F1oeIjjY:cjcKvPcBfqyrD+b1
MD5:	149F8B397FE711244EF204823190CB86
SHA1:	1AE7A6222C28FD5D32A89B6A2C9BBC72FD6F647A
SHA-256:	8D54148B53158E3D06FE5285AFF2C3E189390FE355B2EE400BAF8F1F5A0A819A
SHA-512:	B6CA495E1A0A55D00854F467BF88D87D86C149BFE285CE490F9BEFEA0D0EEA06B868F8B02880E30D2EFD779980554862F38DEF6992B2018701550AD90D13E1E2
Malicious:	false
Reputation:	low
Preview:	...........<Mo.Hv...2..q...m..o...]...gv.1..X...".d.n...bo.$@..r..,..{.....a~.$../..bQ.l..,..i.-.>_.z........2.!gY.J.d$...$r9....._.B<.Dy...n.!...l...K..v[=....2/......AW...'.,Qe.:.n]....u..Y.:.Q.f.5bi..gq...g._u>s<..f1....o...:}.....^:..X. .S.q......A./...0J......E..V.P....zy.O..a......j.3.....F.$O...a.O..~B.+~...^..0.....i/...$.0o..m.<gC..O....1.4..y6.9.s.q.....C`...+.. .?<y...:z...7.^.Nw.?..~..W.\|w\|....K..<.p.6....M..uw........C........`.7.ot..&...s9#..%Y.dA.QB5..B.t.g\.....).!.`...i9.y4H........I.\...e.J.8.%..y.m7.os.U.G..Ja....l..hw....mx.'y.3$.X+a..jg....)..8.G..(...;D.j.%..x..e.M..V...;.> .0.8.....g.p.....+.tn..~J?r..+.R..."....SL.\|...Y.....e.....f9....I..CRB.(.i..8.h.%..aX..#{=.n(..S...L.n.kV...1'.M.....^#OG.T...l.p...AZ....<V=A7....yB ....3.q......f..q<..c8.....A..H.v..J.^aR...b..F...z....@...<.z...LC.. .T..gnA.f..0.Q...iVr7.H....r]l...d..i.$@. [.jM..r.. @.nT6(h~Cs....8....A..i.A..JN..h..p.)...d(k.l.0..M}Z.}.gt..1.I.^...

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2016:05:31 14:22:58], baseline, precision 8, 1420x1082, components 3
Category:	dropped
Size (bytes):	192363
Entropy (8bit):	7.636436886854452
Encrypted:	false
SSDEEP:	3072:fPIylqoepCbCrGxh1a4I6a1/IPv6py5kb257kQDRgL0R:HZqUa4Lncy5kbikQDx
MD5:	C4FC2A699F5911C8A76801F9CC0E6041
SHA1:	234FB5423FA474A9AD4E6400AA0BFD234BCCD17D
SHA-256:	F3DE437B6F851ACA580C747F36504E7267C60A6909DD365096B8A19C7BC2B6CE
SHA-512:	426C8A00BC7AB0FF13C36B7704EB5EF5A81DCF43237D892986E46792A04173B8A50A6EA51C89626109481869E646682CCC646C6E9876CDAB4AF88C9C2BB8433E
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS6 (Windows).2016:05:31 14:22:58......................................:...........................................&.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..I$...e4..m.k.9$.V..a.....~,...tO.g..7....x..b6.....yh......[....Fq2$.kCL.r....j8......]g...g..K..Y...o.......m.t..N......,w......I...M........7........

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpkijf5vvx", last modified: Tue Sep 17 11:16:39 2024, max compression, original size modulo 2^32 5128
Category:	downloaded
Size (bytes):	2111
Entropy (8bit):	7.906743654914115
Encrypted:	false
SSDEEP:	48:XcHr4l7jJBKtLqLBZfPgCUKphtJiwgJjIklYCKBjR33S0:sHc5jzKtLIBZfrLodPKfS0
MD5:	5DDBD52E915AA0202DCB4058D613068F
SHA1:	731594B30F11A511C901EFB097FC621EEE4E0F02
SHA-256:	D038445DB649CA70900DE422361C52F12B2534EF179D62197102EF139ED99C98
SHA-512:	58E1473DB6FE050CCF6E3BBE5A47F2E203340E77DBFFCD0B76CA7EFFCA6420DB9BE4967F765A29E4E95BB18DC8E0292274FCA64E49EFB38ABF45D7D123218622
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/index-4d0d6d10.js
Preview:	.....e.f..tmpkijf5vvx..X{o.8...>.m......-.C.8...u..n[..%.m6...)?....c.I.`q-....p..y(\|.G..^........FQ.kE"`mE....!.....O......~P...R4..LQ.\-g..\.5x.............. Vd..GE..F....+..W.Y.+.=.W...W.........6.I..k.x...G~...C..<7....@.z.....-.4.2.....\.....k..SEVp..9h.:.]x..E.p...V.'2e......#q^..;~w.e.Z...3..4.C.........4...BV..Z>_..j,...I..=.%&...8`k.....>.p..d...b.......s.....al...hcf:.EK.....r.@k....9..!.4..u.._t.o....!<=c.0z...(.:M.P...G..5K.~....Ke...).$....=.Z..h..x....... 5..c.1..(Y.....;.m.Q....t........3.....~..^}+...xk.D...4..a...X..ty.N..3....Z.-.E.....b@k.....I./...xNi.p.....}....h...J.F.FK...9.0a.P..{.9..X...w}{.....O..zd.....HP.IX.o><x..$2V.a.g]m.o=>...bv.%..'Q2g.G!...&Q..-..W.1.CP'h.S(..;..:.#..E...u~..1....X..i.h....s....y...8&'..Q.P]X...@A.%.......:.~..b.2Z`./..cb+p4.,.t3..l&<.R.p............j.c.L..cY.B....{.......L_y..%.rC$0.Q.2..S.?'..^..6.1Y..].NS6.....i..y..&).....k.....N...Ow.).Z...F..i.....Rn..dr.i..$.*r99."s\|.^..'.~.).QL.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpl5u_ed55", last modified: Tue Sep 17 11:16:32 2024, max compression, original size modulo 2^32 567
Category:	dropped
Size (bytes):	318
Entropy (8bit):	7.302858438317619
Encrypted:	false
SSDEEP:	6:XJDUm4z/kBLRxGb35H0uCCXjzVQQmiq9RRudG+HLkAuzJfdZdp6zuUHQY2QVL6C:XJ2kBLR45HDTz3mX9RUcaQJfbr6zHHQu
MD5:	E46EF9182081D5B5A9DBDC1F0B20036D
SHA1:	1C5BD2868DEF0452591D89323DDC0EE1C4D5825C
SHA-256:	FDEDCB287B14EA8E85C9A10E400BA60857A90EB2ED40112365CA9102B1FF36CE
SHA-512:	897051ADC9767334CFBF0D3120AB2959303C238FF2EE2A0487E7242BD6970C2EB77D607641DEEF628F143A069BC2AA6F12F3C445D66BB1C597DD27D794082B3E
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmpl5u_ed55.u.Ao.0......S+E....&.v.4i..v7..Li<.i.A...BE%.d+...S.S...{.&........V...V#.CN.Yz...8.[Y..,....u.x..\.....}X...?j..v...........;..y....o...)J..~...!.,g.y&:..h\|.....d6n...6....=F.'...&.<"^.f..W........,.<..'.1..,....z~E..,....U.*....+.E.J....g.CMF'.H..}..h=.,.,....h..&.m.S.K5..?.1.7...

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 477 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68061
Entropy (8bit):	7.991826692964678
Encrypted:	true
SSDEEP:	1536:3xKkzKqx+cdA9KhAjMt4v7KnCkGaSNTOW7ou9jHRcB1WO:4kh/A4AjMtb93un7outuQO
MD5:	B125DC28311A0C2BBE52C81E2B448DD6
SHA1:	571E1CCCDC8514618AD14D2822C2B9D39AD50B75
SHA-256:	678F9D972EFD3371793E158BA103863F55B38A40A89067CD9D476717A4E86801
SHA-512:	DADD0DD9460DE525488C0C02900AEA17F1F903019215CD979215F23EBC335EF912F6A0BACFA544E31672A4B4E280974E6BE7D4775C109CE59352A8C3C2BCA58A
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/zkLxDsbw1hz2/d5634a838071888dbd2a.png
Preview:	.PNG........IHDR...............Ru....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:F9295479158111E8A9F9C70B84CCAA81" xmpMM:DocumentID="xmp.did:F929547A158111E8A9F9C70B84CCAA81"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F9295477158111E8A9F9C70B84CCAA81" stRef:documentID="xmp.did:F9295478158111E8A9F9C70B84CCAA81"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>j.....PIDATx..}..\U...No.[6.M.....@."% .X@..D..E..>..\|....C\|"...t...'......l.uvz...w.3;......0..;.{....?-I..e..

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8024), with no line terminators
Category:	dropped
Size (bytes):	8024
Entropy (8bit):	5.774886756930328
Encrypted:	false
SSDEEP:	192:7ClIKLhEQTiIZjr6LjqcLqC9yhUpK6Xnb6qqOiu:gZi8f6LjqcLVFXb6qqW
MD5:	E3D11C69405766BAB621376D829963A9
SHA1:	01A6821B4AC15CC69B9BD053148523DAAE45EBBD
SHA-256:	F7E0C17B24B1E266A8420584984749593D8B465C88CD4B24CB003A9ABBE0746E
SHA-512:	266A2A4DD0E2BF9D5CDA61A62E9916551E90341B7A71D2A1E175BD1CA9B9570B3A93194DE9BA381767663745D854ECE149917BF99EDED5A3128D44619B5CF07A
Malicious:	false
Reputation:	low
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(V,f,g,l,m,v,x,z){V=b,function(c,d,U,B,C){for(U=b,B=c();!![];)try{if(C=parseInt(U(239))/1(-parseInt(U(221))/2)+parseInt(U(256))/3(-parseInt(U(183))/4)+-parseInt(U(264))/5+parseInt(U(252))/6+-parseInt(U(248))/7(-parseInt(U(236))/8)+-parseInt(U(270))/9(-parseInt(U(200))/10)+-parseInt(U(245))/11,d===C)break;else B.push(B.shift())}catch(D){B.push(B.shift())}}(a,550420),f=this\|\|self,g=f[V(189)],l={},l[V(188)]='o',l[V(260)]='s',l[V(173)]='u',l[V(186)]='z',l[V(204)]='n',l[V(195)]='I',m=l,f[V(262)]=function(B,C,D,E,a4,G,H,I,J,K,L){if(a4=V,C===null\|\|void 0===C)return E;for(G=s(C),B[a4(192)][a4(241)]&&(G=G[a4(212)](B[a4(192)][a4(241)](C))),G=B[a4(259)][a4(255)]&&B[a4(265)]?B[a4(259)][a4(255)](new B[(a4(265))](G)):function(M,a5,N){for(a5=a4,M[a5(168)](),N=0;N<M[a5(267)];M[N+1]===M[N]?M[a5(174)](N+1,1):N+=1);return M}(G),H='nAsAaAb'.split('A'),H=H[a4(190)][a4(166)](H),I=0;I<G[a4(267)];J=G[I],K=o(B,C,J),H(K)?(L=K==='s'&&!B[a4(235)](C[J]),a4(224)===D+J?F(D

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 12:02:22], progressive, precision 8, 1420x1082, components 3
Category:	dropped
Size (bytes):	47523
Entropy (8bit):	7.553550969005098
Encrypted:	false
SSDEEP:	768:76yIEPrdyIOE/Ne5ZxmEnbsELrhVzqb90rGef1pC+XF:mCpkpx9nbZ/hVzqbsda+XF
MD5:	2FE3D5FBCB0D85C72D064FC69D6414FA
SHA1:	CDB5F75E5341FEFD368F11FEC82D43F941DA518C
SHA-256:	0AC600398C7FF1A29828A0A0C2C77BBA481740D8A041BB748D478729166BE975
SHA-512:	42DA2613BE687CF38C87C9F8DE6E13CE9D450FADDF6754B533F7435A30D7A7FE21731BB3568165E433E3674560813FF9890EF9D5A8D309B01DA009B4AB8A6BCD
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....jExif..II*...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 12:02:22.....................................:...........................................&...(...............................4.......H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..../...n...V...e.!E.k..cy&9.kt+F...P.U.....`.<$.yq.Q.y...x.u.e..M..e`.V6.......)@.]...N.~%$.q1..u.#$.)..W..$.NX..L...I$.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 12:02:22], progressive, precision 8, 1420x1082, components 3
Category:	downloaded
Size (bytes):	47523
Entropy (8bit):	7.553550969005098
Encrypted:	false
SSDEEP:	768:76yIEPrdyIOE/Ne5ZxmEnbsELrhVzqb90rGef1pC+XF:mCpkpx9nbZ/hVzqbsda+XF
MD5:	2FE3D5FBCB0D85C72D064FC69D6414FA
SHA1:	CDB5F75E5341FEFD368F11FEC82D43F941DA518C
SHA-256:	0AC600398C7FF1A29828A0A0C2C77BBA481740D8A041BB748D478729166BE975
SHA-512:	42DA2613BE687CF38C87C9F8DE6E13CE9D450FADDF6754B533F7435A30D7A7FE21731BB3568165E433E3674560813FF9890EF9D5A8D309B01DA009B4AB8A6BCD
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Parking_einrichten.jpg
Preview:	......JFIF.....H.H.....jExif..II*...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 12:02:22.....................................:...........................................&...(...............................4.......H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..../...n...V...e.!E.k..cy&9.kt+F...P.U.....`.<$.yq.Q.y...x.u.e..M..e`.V6.......)@.]...N.~%$.q1..u.#$.)..W..$.NX..L...I$.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	4.72645217666044
Encrypted:	false
SSDEEP:	6:t6F3Ci9mc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6F3H9FPUPkHSt1UiT6i6jUs8b0I0C
MD5:	A6AD6E65373DB8C1B1F154C4C83F8CE5
SHA1:	84CC007D6D682C589E1E1F87482A5278830F3000
SHA-256:	920A378947204498C122722933B3A4B67788A2B6FADE8BD0D47CF830EEEE0563
SHA-512:	09B6D4711C284B1A04C9C4D874F3D1DDFC876C1491FB2AA283A13505BCDBFE90B02731D0B7AD5F492B1DDA2161A4AFE20040801EA634D2727CDE84319ADFB1D2
Malicious:	false
Reputation:	low
Preview:	<svg fill='#1967d2' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	3.090787153125625
Encrypted:	false
SSDEEP:	192:jiHSINqv0tJ30DezSfPAXTZwC3D2N2xp1Fd/ar/+zi3LHZNwkQH0iWpXDt3TN8rB:jzAnP9j
MD5:	DEF00C11B1596DB4EFEE6A9FBE64FC27
SHA1:	BD298981E6D8D7E4FFA18ABCF687041F4246672D
SHA-256:	95C427FA3143B1896FAF42A6406686CE7602CB39052081BB32D12B51C9E047E4
SHA-512:	C056E95DBFA1AAB3A50DFF18C6D577DBFFEA72C93316FFC53B6B7AA41DCC7707A810D563894589A7305DE0B76610F88150B2034670DE368773B2B356F14AD30F
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................@...@...@...........................@...A...A. .A. .A. .A...A. .A. .A...@.......................@...@...@...........................................................................@...@...@...............@...A...A.U.@...@...@..@..@..@..@..@...@...@...@..@..@..@..@...@.}.A.U.A. .@...........@...@...............................................................@...........@...A...@.j.@...@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@..@.}.A...........@...@...................................................@.......A. .@.}.@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...A.G.....@...@...........................................@.......A.U.@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpkg97jlww", last modified: Tue Sep 17 11:16:38 2024, max compression, original size modulo 2^32 1740
Category:	downloaded
Size (bytes):	809
Entropy (8bit):	7.720303795641301
Encrypted:	false
SSDEEP:	24:XIWEXTA2oLo4HrPzCh07TfSkxp5crljJeYxn:XREXTAlLjHjOaakxbch
MD5:	22A4A3ABC5E97B864B21EDF7B8142D96
SHA1:	0E0522764E5AC8586F53E0A56F9696A65ED1E0D4
SHA-256:	E9ADA726EB1B3A8998A4F9FB6A6724ED1A1AB9CAB98E020D0AB4DD4C2F1B4295
SHA-512:	607E974C18A42E3362CB0E0E835AE146ACC5F2E83E8456585FBF12BE292F2650946801BCC11DCB60A5970809383844013E619593A580FC3A2F086049B114EF0B
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/index-3ff76a26.js
Preview:	.....e.f..tmpkg97jlww..Umo.H..._..C.Hs\R.r',NB.74~.!.NUe.a.7Y/..~...o..&q...g..yv<3..&.........4RXi...F....~..^k.p.......W......p....j,.G..:.....O&b.7.i\pj....(.2.,mJ.1....5..F.$.qN...H.?.....}.XC2.4G..a....8......}.....\|./....L......F...(....G.,xn...]..(.T......}...Jw.U..x...@\.Jj....X....J.....k..z@......w........z.-.2q.R..0c(rk.L:.'p.il.@.......QF..F...b.......5....,`.].......P..c&...n.$4..i...&.J..b>..-.G...mYD..or.....kx..9.mKi+~&..K../9m..[7S9..=1.\|E.!(."j.C.w.$3....z..75`D._..a.pc?.U...{p..x...Q.<.:.?......V...O.0.W.&lO......c...1..cR..,......$..~?....e..z.\|.z.i`..W.uW.X....(#..#M.8VF."...0(..\|.rXBuQ...@.\|..B..=P.......S7....j...\|^;GF.U..... \|[..-1O.z.zxM^.c..-...c/....9i=..T.mUmO.....e#....j....L^...ZG./T.g...T+.wU..O.j.C{..Vx#U...j5...Sw....&!f....

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65469)
Category:	downloaded
Size (bytes):	128582
Entropy (8bit):	5.285583929776152
Encrypted:	false
SSDEEP:	1536:rNZtf3ftRu6GTGkwGh+rVs+xsv2F7t835vk3CqDHEASBBmZJj/+L0S/dIG0ZqwaC:/tvfb+MZ8pvTb+JjGLqowajnCxn5
MD5:	E1D695FFAC0AF680A179A699A68B9893
SHA1:	A27500032B6DD1EA82054499BFA22063073CDC5A
SHA-256:	022C3D1C8A0C8FD5C46E82A58C269D6B501458186C23B13A6B6E1F3B52CCA0DD
SHA-512:	F13C7F98DF48EC3307E066FFDB6E02F7E3EECFFF0E27D6C3767F6CE877B3E8B81246CBA92EFFC5AD93412DACF086565ABC99BD09C64BA1249DB548FD8EF649C9
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/dist/js/typo3/app.min.js?1724922195
Preview:	/! For license information please see app.min.js.LICENSE.txt /.!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/dist/",n(n.s=9)}([function(e,t,n){"

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmphejarc7e", last modified: Tue Sep 17 11:16:32 2024, max compression, original size modulo 2^32 1513
Category:	downloaded
Size (bytes):	616
Entropy (8bit):	7.64751725155793
Encrypted:	false
SSDEEP:	12:XJQiwAirSYKl6SbehEMlKN9RkcNR4ZkwDlujUTbwwmUszJx0FGUE0sO3cJnLO/:XeiwTrSvZbeWMBcNRC/uoTkrdxht0qL+
MD5:	954CA4ED0665A91EEC3838F6217030AE
SHA1:	5A515CE38AEE45BE434A801D51BA0B10442B1C98
SHA-256:	C894B7A9CF6E2BF3E964E6EDAB92EFD9DBF82670954B4B28DEF5022D28689D35
SHA-512:	59EDEBE9D1D6300E5B84CF48FDF5C72C93D76DDE70DE5A65DDFC414631BF3BC34EB686AA8CF493E4D089EBE10E4C663D9C557B398ECAA65CF7BDCE5CF2E57644
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/SaveButton-c74cbe89.js
Preview:	.....e.f..tmphejarc7e.....0...}....$..,fQG4J.H..f.F.2...cl.K....!...vu..`~.O2.....-GH.(@/N.@.S..W..d.S.2.T..S...N-(.d..NU.S....2A.6.%.....7e.....N..S.".P.a.~44..w.w.w8.?.Rh3..#L..S..."...B..N.!B.QI......5..)9.e.D.w.&;.2.5L.e0."..`...iXT..y.....O?.q....fr..7..XG.....Q.y.TQc..!?..c...~..g{x..y...8...C.1-...#..q.....y....ddt..0.M}..9.....C.u...$.\*..-;...t..+.y.`C.a.z.O./&..I..wp.......ZZ.......An.j..sdA}....v.Ne/`W.=..;../{P..O.[+.X5.].h..39.."..:@..$T.]..t.t..i[u..l.n...#+.d.N.......p.T.!....j...D/...m. .aJ.ek..U.,k......+..37...h.=.F..k.....H.0.z.s.....V....)..+v....'...T.7....~.....

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29400)
Category:	dropped
Size (bytes):	29802
Entropy (8bit):	5.245806072418599
Encrypted:	false
SSDEEP:	768:/veaVfq2uGhc6eIRE2yNQ4iyHuqpp0L0pvj8vCwF3Cn:/5VfqpGvPqZWyNf0L0pvjWCwF32
MD5:	FCFF8644D2012C95B22B7A521DA0C2DD
SHA1:	6250E5B45FE3EA26E0F1B17C9AA576C9F5AFA5D3
SHA-256:	420514B11077554F1CBC0425327EA7301D930BDD5C01DDA9BE6FAF4FD1927D19
SHA-512:	4BC35067AF2BA6F3E345F447AF34125B88FEB54A71A6B090AF899A343F9A64E0C5729F6C1C302431DF74CE38A5632428F05640FE80E07FE843DFE342F72C35A3
Malicious:	false
Reputation:	low
Preview:	function r(n,t){for(var i=0;i<t.length;i++){var r=t[i];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(n,r.key,r)}}function Jt(n,t,i){t&&r(n.prototype,t),i&&r(n,i),Object.defineProperty(n,"prototype",{writable:!1})}./!. Splide.js. * Version : 4.1.4. * License : MIT. * Copyright: 2022 Naotoshi Fujita. */.var n,t;n=this,t=function(){"use strict";var v="(prefers-reduced-motion: reduce)",G=4,rn=5,r={CREATED:1,MOUNTED:2,IDLE:3,MOVING:G,SCROLLING:rn,DRAGGING:6,DESTROYED:7};function D(n){n.length=0}function o(n,t,i){return Array.prototype.slice.call(n,t,i)}function R(n){return n.bind.apply(n,[null].concat(o(arguments,1)))}function on(){}var p=setTimeout;function h(n){return requestAnimationFrame(n)}function u(n,t){return typeof t===n}function un(n){return!c(n)&&u("object",n)}var e=Array.isArray,x=R(u,"function"),C=R(u,"string"),en=R(u,"undefined");function c(n){return null===n}function m(n){try{return n instanceof(n.ownerDocument.default

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1520 x 500, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	537573
Entropy (8bit):	7.988877951560557
Encrypted:	false
SSDEEP:	12288:orYcqGIpRhLSLl0wrBVFH6aLHx7QZVemCG:xGIpRhMjrBVXHGV3CG
MD5:	2CA55CFD34932B173AFC0805F28AEACE
SHA1:	E8CEF798BF4B66E28ABD892F0303BF6458EFB43B
SHA-256:	83F14346B68DC3C90039B7331720DE1EDB570485320252332023EBFD0C4B4074
SHA-512:	7DD6274C9A8403A3D9CBBF9B62B00C5080C6DFDAE73E97DDD62DF0628453069DF5C12B54259CB1B1621C31B526596F9533F279390A05619F66533EABE2740BBE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............r..r....pHYs.................sRGB.........gAMA......a...3zIDATx...I.mK.&......{/"#..YDU...j. ..A@....p .......8.....@.4. ...e.........w......kYo.{.........9g....w.........$..D".H$..D".H$..D"....*$..D".H$..D".H$..D"....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$..D".....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$..D".....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$..D".....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87532
Entropy (8bit):	5.262415846264695
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7
MD5:	C9771CC3E90E18F5336EEDBD0FFFB2CF
SHA1:	6EE8AAA3AC1F4E0AE18717A3FD26892E9F0E4CC5
SHA-256:	3E7501D15C3630E791C8B20392EB9DEE31A9F65CE3EFDDE76CEF5C710141AB24
SHA-512:	C503341FA3A7176FD10BD8CD7A5717C8FAF971F87FA0C158F2D94FCD484AE3ED5031F49414DAE833FB806B7365B5699C21D2E655376F69ADB052B22F6F6982A7
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	25066
Entropy (8bit):	3.729531622434699
Encrypted:	false
SSDEEP:	384:NNQFuqx0sUTmVC557hGpcn6ZF04O3iNtCEkusgLPOcP1nHR4ZHx/B+spYPn+Hz5H:NqsqxEToCu8uF0lixLLWcRHyZp51
MD5:	F55C5F0057D84AA4EEEDAB2A8F4D558C
SHA1:	EDF55FA3D61D93E3EB7EB085F77890B752EBA049
SHA-256:	17CF6709088D4FF6D398CDE251F6394C88AB3CD1D2C3D1FFBE3357A6C54BDD2E
SHA-512:	B346380F6448BF2D3140BA49A71E58B03928F33BADBF29009EFBFF0E5DA0360F56FD53F36666AF56C26F74AF3240AB919E35AE108EA1088E4134F1DCA9F350F4
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/zkLxDsbw1hz2/b75b73e313804cf110ea.svg
Preview:	<svg width="250" height="65" viewBox="0 0 250 65" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M80.1996 37.4998H88.9245V0H80.1996V11.5749C79.1612 11.0678 78.0925 10.6253 76.9996 10.2499C75.7027 9.86294 74.3524 9.6857 72.9996 9.72494C71.3876 9.74368 69.7966 10.0925 68.3246 10.7499C66.8114 11.3824 65.4547 12.338 64.3496 13.5499C63.1559 14.8902 62.2232 16.4419 61.5997 18.1249C60.9097 20.0921 60.5712 22.1654 60.5997 24.2499C60.4075 27.9197 61.4553 31.5476 63.5746 34.5498C64.4907 35.7777 65.6893 36.7665 67.0689 37.4323C68.4485 38.0982 69.9684 38.4215 71.4996 38.3748C73.0443 38.4016 74.5775 38.1035 75.9996 37.4998C77.5082 36.771 78.9192 35.8555 80.1996 34.7748V37.4998ZM80.1996 16.7999V29.9998V30.1248C79.4812 30.6472 78.6892 31.06 77.8496 31.3498C77.047 31.6376 76.2021 31.7897 75.3496 31.7998C74.5255 31.8754 73.6954 31.7512 72.9295 31.4379C72.1636 31.1246 71.4844 30.6313 70.9496 29.9998C69.8787 28.2466 69.3969 26.1966 69.5746 24.1499C69.4535

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 12:02:59], progressive, precision 8, 1420x1082, components 3
Category:	dropped
Size (bytes):	52602
Entropy (8bit):	7.4287422947114035
Encrypted:	false
SSDEEP:	768:/E6FrL65El0Krcmskr6siDLYu0QjUoqiacJVFsX665/XeD7rr2ghN:RY5A0KIIWDLYuXUohVFsX661OWKN
MD5:	F65D136F378CD22EED47C416D1D8097E
SHA1:	F59C9C299939E28F77B1FCD42DF7609FC6C529CB
SHA-256:	DA5FE47C053D2DDF43B3D159330C30276F942E26934DA65242D449644414358E
SHA-512:	942E4D95C8D5F722E06F089E000DB8A754F4AB6D0775C522DBBFE778AC01C4FB25E6109114F95B7559BC066258D7170D4E901D52B2E73A8A070EC86147AEECC4
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H..... Exif..II*...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 12:02:59.....................................:...........................................&...(.......................................H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...I%}.RI$...I$.$..N5L...Z0..w>..~..@n....+.i.v........Gj_g.Zo..u.....!.[.?..+./b....I....LJ.. .&.......=.W...N....%.{.....

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	25066
Entropy (8bit):	3.729531622434699
Encrypted:	false
SSDEEP:	384:NNQFuqx0sUTmVC557hGpcn6ZF04O3iNtCEkusgLPOcP1nHR4ZHx/B+spYPn+Hz5H:NqsqxEToCu8uF0lixLLWcRHyZp51
MD5:	F55C5F0057D84AA4EEEDAB2A8F4D558C
SHA1:	EDF55FA3D61D93E3EB7EB085F77890B752EBA049
SHA-256:	17CF6709088D4FF6D398CDE251F6394C88AB3CD1D2C3D1FFBE3357A6C54BDD2E
SHA-512:	B346380F6448BF2D3140BA49A71E58B03928F33BADBF29009EFBFF0E5DA0360F56FD53F36666AF56C26F74AF3240AB919E35AE108EA1088E4134F1DCA9F350F4
Malicious:	false
Reputation:	low
Preview:	<svg width="250" height="65" viewBox="0 0 250 65" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M80.1996 37.4998H88.9245V0H80.1996V11.5749C79.1612 11.0678 78.0925 10.6253 76.9996 10.2499C75.7027 9.86294 74.3524 9.6857 72.9996 9.72494C71.3876 9.74368 69.7966 10.0925 68.3246 10.7499C66.8114 11.3824 65.4547 12.338 64.3496 13.5499C63.1559 14.8902 62.2232 16.4419 61.5997 18.1249C60.9097 20.0921 60.5712 22.1654 60.5997 24.2499C60.4075 27.9197 61.4553 31.5476 63.5746 34.5498C64.4907 35.7777 65.6893 36.7665 67.0689 37.4323C68.4485 38.0982 69.9684 38.4215 71.4996 38.3748C73.0443 38.4016 74.5775 38.1035 75.9996 37.4998C77.5082 36.771 78.9192 35.8555 80.1996 34.7748V37.4998ZM80.1996 16.7999V29.9998V30.1248C79.4812 30.6472 78.6892 31.06 77.8496 31.3498C77.047 31.6376 76.2021 31.7897 75.3496 31.7998C74.5255 31.8754 73.6954 31.7512 72.9295 31.4379C72.1636 31.1246 71.4844 30.6313 70.9496 29.9998C69.8787 28.2466 69.3969 26.1966 69.5746 24.1499C69.4535

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (376), with no line terminators
Category:	dropped
Size (bytes):	376
Entropy (8bit):	5.472089889339167
Encrypted:	false
SSDEEP:	6:xWzPmKYZ1dZ1mEoLIJLdV28kJPV9z67M+dm9BmLwZ1dZ1myamnV28kJPV9z6Aen:xWiKq1z1mCJLdPkf9z67HABmO1z1m7m3
MD5:	D834BFCCF594D07B39DC9E42CC75AC9D
SHA1:	A02E6795E02316B4F1BB88F38C530074C612D125
SHA-256:	45E78750074626A41913E60FA22BAC2CF2C3EC02D56A9AF2CD04F5E9D23CE964
SHA-512:	3C760A57378BE835FF239F446CA0C3C09CF19BE2502A8BC36F5E2E2B7A926787DFEA7F0F0FE55AA598ADFCFB7A25A9428A780097D105E5D0967EFA938AE2FB49
Malicious:	false
Reputation:	low
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=8199a500e79769f2:T=1727736046:RT=1727736046:S=ALNI_MZu0k1zjdDsCJFA2PzqTeM3ZIx9qQ","_expires_":1761432046,"_path_":"/","_domain_":"bankwir.com","_version_":1},{"_value_":"UID=00000eff0cee0c55:T=1727736046:RT=1727736046:S=ALNI_MbNzmKJwHIKtCmlguq6TwsuatDqxw","_expires_":1761432046,"_path_":"/","_domain_":"bankwir.com","_version_":2}]});

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11400, version 1.3276
Category:	downloaded
Size (bytes):	11400
Entropy (8bit):	7.9806431346374405
Encrypted:	false
SSDEEP:	192:tk7ah2APGmFIFXjih0570McQvxVwON4EmgoIBXzs+BlHdt7zvVCXOIYSbL:+mrJF+Xjih0R08v7wo4EhdBXzllHdt7C
MD5:	00BFA19CECC3900646C108E4AC706488
SHA1:	C53D45529667D136551D190B3D0433C10317F6DA
SHA-256:	ADBBB1570F134E34309F6335B650F8704232D270F25624283A8B56EA48236E57
SHA-512:	6A7559C4257B647DDE6BE0A08EBD47EDE622F60DC179DAD2BF76DE0CC7644AF5B31B23E06293379D1EAD6DA256B5795332D1E28D6FD38FB67784AF3E1C0495AE
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/p9HJ4M2Uz7U4/a7d29342348138d42728.woff2
Preview:	wOF2......,.......c@..,/.........................@..p..`.`..f....L.f.6.$..D..d.. ..F..9..T....a.. .wRQTpF..?&P..v.t..WT..B!.u..l......m....u....N_=.c'...".u.........I.&......>.C"22S...!%...]C4gM.E5b.Q".G...Q.x.+.K.h....W..{...x{W....6....^h.b.f......(q.^..?..>.`.L6....h..v.%.w..F]HD..".>ky..7...`.S-.!$...^Q7...-+.,._...K[d..+...o.9.6s....Dwo...S......n@.J.+".. p.D.....5.N... ...Y.............jt@...`.../...h.'.5..C./H..+;4.#"...A.-..bET5.^GUsEIEu..o~6T..B...W..m.[..:....'d%..T.a.....B....B....d......E.P.T.JKF..P......d.I.!....x`..=..{.< ...;.........y.... .!...- H.4<{C`..a.c.d.....WAfF...72...$....i5..#.lrR.,...is..A7.`..m.(h....H{.z.v$....J..............fc[.s..._.l..!..,....MQ.G .K.N4...!`;...g...5...`..9..!^...kin....>S..u..L\|.$......vz......V.r.K.T...g:q\|x..3..=.E..*....1.G...w..u....a.....`.k~...-.E..>...I.....a......o.EVq..z.....)....O#......H.`2....sZ...R..n.=.3.eN...y.T....E..q...,...y.}.r..F.3.S.F.U.....M.6R;..J.....s..65...]8b.....

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 413 x 594, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13502
Entropy (8bit):	7.912202553387551
Encrypted:	false
SSDEEP:	384:/mKXXNN5Jr7k18sA6pXsox1amFbraxPpkJ:euNN3r7SJZRGmgxPC
MD5:	107694EE1E94990D97B7E58651FFD6A0
SHA1:	7DD9AE7BADF78BE01EA0623DF1E90171348716FF
SHA-256:	7AA2A3E9A9575A27F5593C3B0357423128C468A46ED20D284CE5A21555EE67BC
SHA-512:	5D695545E1516D28CA05933C88AEC08CA324A61804BD662102A1EEB7A515BA543343AD24FDA53ABA329AE803F622664B29D5A3461BCCBD264EC8950E8CA51002
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......R........^....pHYs.................sRGB.........gAMA......a...4SIDATx....\.y........F.U.b.U....A...#V.......J..?....w..UD&.A...P&.....Q...#..qA.d\.E[...Y.....'...;....{.......+_....<.y.9.k.o.-J..%.C)I3..7o..e..........0....f.<.6/J...&.}.S..n.%...1........'........'X..+...4Z..;JTf.JV........)S-e.'Z.dO...y.'....a{mM.C...r...1.V.....L.K..@...:...H..N^.}..ex....N...\/k..l..P....\...j..:vr........_.3..n...!..n.?t....8.pNX...5.Dwd....8...`iB..Q=...L.:...`.b...L+Ne.....7tF.....V..x..S.e{.....:.....H..........]...!..`6.........ooqN......i......x.N.h......z1...%....T?.V.lD..+Bg9zZ..NB...D..-.U[%...~../..D.J......?..F.)5................J....k.I...W....5..ns.....^..%!o.}..g/.~.....<@......8.J'....T?.\E......X..........\|.vS.`....hY."....`.h..}?...J'^..y...7[....@.tP..5.ZQ....5...F.`,......&.&.6.....`VT:.T3.......A.`jy.....7.....z.0.*.T.p.7.G tP).........S...tP76..8@.`a........C.`.L;W).....~......t...Y."A...<.f!_... T

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7457
Entropy (8bit):	5.34297521532081
Encrypted:	false
SSDEEP:	192:7iDQ7e1rjU7t+K4K8caBIsKcML42CRNcookG2SXTTev5:7roKlX3eSXTTeR
MD5:	E1FBAB4A7A2F1F4DB9C23112004E958A
SHA1:	DFC4F8DBFDFC8E3AFF41881145D7BABD2C914B9B
SHA-256:	293C213205CD107EC18A50AE1F8A7B79915117D162CC58701A575DEF7C295D39
SHA-512:	D97D5F13D61BDAB589DE2734DA87D603C3C8540D3EB2C9D8A98DA56093DA2E9CAFEFF55997335946F8A15AA5C26367D34AAC11ED3626D7998E0EFB704AB993E3
Malicious:	false
Reputation:	low
Preview:	{"labels":{"ALL":"All","BACK":"Back","CID_TITLE":"ID to request consent data","CNIL_DENY_LINK_TEXT":"Continue without accepting","COOKIE_REFRESH":"Cookie refresh","COOKIE_STORAGE":"Cookie storage","DETAILS":"Details","LANGUAGE_TOOLTIP":"Changes occur immediately after selection.","MOBILE_TCF_MAX_STORAGE_DURATION_TEXT":"The choices you make regarding the purposes and entities listed are saved in the local storage","MOBILE_TCF_MAX_STORAGE_DURATION_TITLE":"CMP Maximum Storage Duration","SUB_SERVICE":"Subservice","SUB_SERVICES":"Subservices","SUB_SERVICES_DESCRIPTION":"Below you can find all the services that are subordinate to this service. The current consent status of this service applies to all subservices.","THIRD_COUNTRY_TRANSFER":"Data Transfer to Third Countries","VENDORS_OUTSIDE_EU":"This vendor is transferring data outside the EU / EEA.","WEB_TCF_MAX_STORAGE_DURATION_TEXT":"The choices you make regarding the purposes and entities listed are saved in the local storage","WEB_TCF_MA

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp55kknrum", last modified: Tue Sep 17 11:16:40 2024, max compression, original size modulo 2^32 450160
Category:	dropped
Size (bytes):	120986
Entropy (8bit):	7.99779152335096
Encrypted:	true
SSDEEP:	3072:qRGJgz6bNgd3sl+bB1MA5Pj6uv5HqHpxTKa7tzzufQO1vIy68Mgkpx:qL2bkcQbfJVtktJufQ8wy6ykP
MD5:	2B99A4D62A7128947770E032AD56F377
SHA1:	47B1A12A8069445B647B73FAFF175079969A97EC
SHA-256:	F8AA8AC514D45C9AA9159FC1C8A8F4A23D5CD3F25001E617F792401E2630302B
SHA-512:	D5B4407A2E636EFAE9A98CAF8AE4CB7E70DE87392451DEC6FC9245DCAF2A917659B3FA229014B6D904F7C8608AE0D30234F23A888D684429A5D9FC427A80BD54
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmp55kknrum.....6.(.Ud..^....I.]).V..D._k..CW..%.b#...q-..~g.....N6.s../.I.....`0....I......_&.....0.E....y.r..E.G..u<Y..I ...;u....8.oT....7..F..h....w/.......b.G.......aN..".j.....o5..x.F..8.RQK......,.D(....w......=.\.4.{.C.u\|.]o...C..u...a.].X...YQlU.x...U....\|..=..:.)a....,.p.....}]...u..j.....x.......+..L..........#.G....&H.I8...cc=dA..W.;..k...8.....7.Q%<.JV.0@Q..'.g..<.G<I....S.;.........D..Q.....P.co..fq0.Rk.#....i...z0..h.......Ri.....X.0@....4.>...4j.........'..w}..RY...`...I.2.......P.".J..\b.0.m.......3.].XT./.)vzv..x+MM+..........U.\.....GWb...dOB?Z.f...1..-..q.jF..k...7...W....L.\|..,...H4..a.R.&.2....r@ {.(4.kXmZ.....a?..c'4.y.`..H..+\|S%.X.. ..Q91U.l.8...._.....s..xS...HJ...$......!R.M.Nj;...i:...`6.Z.K...,f0[.U.&...).I\|[..y.ir.:...U].z..S..js..&.-x..x..!.0.r..........'.`c.-.9..,..9(..&Z.!K..../.\...=5...lv46v.p...ja.o.P....~0k.C...0..[...E..cj....%..K...Y3K....L<....f.."Fd.Aj...[...M. ...E.,T.@L......

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	151
Entropy (8bit):	3.837002606073176
Encrypted:	false
SSDEEP:	3:YJELTrzaEIGWpHBAHJDLRHZFM9pz8JHABMREHJxr/4ALpHBAHJDLRHZFM9pzO:YQTiE32AHJTi8JERHdAHJTiO
MD5:	E9CD67A12859A172B0E44A712D57D56E
SHA1:	C710B9581CE5B3599FC267660F119AC78D486C4F
SHA-256:	1325830F2CAADAC80119B837399252F3A70353B6D73FA725AAC4E58ED73EE499
SHA-512:	A83C1E311FF01FAB116396F6ACAC026CD273079D1785E53DB5780F03B64C18A81E605AD37630DF2941A2B6CA6B86624DB0BC372F1B2380D2B95271E50280189F
Malicious:	false
Reputation:	low
URL:	https://api.usercentrics.eu/settings/5QJe3R54G/latest/languages.json
Preview:	{"languagesAvailable":["en","de","fr","pt","es","zh","it","nl","ko","pl"],"editableLanguages":["en","de","fr","pt","es","zh","it","nl","ko","pl","ru"]}

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
URL:	https://sedo.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	543
Entropy (8bit):	4.199353192354715
Encrypted:	false
SSDEEP:	12:yQHSz5Rd7OTR0VyAX9SxSyrtZDRWtYyNnULcHByI:7a5RdSRvAUlrtJRWyySLYByI
MD5:	4C6258062633129D69AECCE4F0023D9C
SHA1:	C985E54A808E6FB1B69B949ACADC054AE39629DB
SHA-256:	728AEC7E6742CF7D5C0894860C9D2DFB2C9AED8A8FF6ED399094AB782341762E
SHA-512:	E593EDB63A8D7D2CDFBFA87669C1768A2A357F5A6A45778AEAB4188D66A364286BA10533E2FB2FB715F1630AA73AA2AD75504385D25DC4B759861046511F232D
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/typo3temp/assets/js/4c6258062633129d69aecce4f0023d9c.js?1718178726
Preview:	$(function(){. $( ".ce-accordion" ).accordion({. collapsible: true,. animate: false,. icons: false,. collapsible: true,. active: false,. heightStyle: 'content'. });. });.. // init sliders. document.addEventListener( 'DOMContentLoaded', function() {. var elms = document.getElementsByClassName( 'splide' );. for ( var i = 0; i < elms.length; i++ ) {. new Splide( elms[i], {. arrows: false. }).mount();. }. });

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (13705)
Category:	downloaded
Size (bytes):	14506
Entropy (8bit):	5.396355772307852
Encrypted:	false
SSDEEP:	192:2E12iMpgbkzMBhsV/WrldU+n8HHGGa56eDYOM:2ni0gsdydUg8HHGGa59cOM
MD5:	A0BE65B8BDE4CCA9418339217896441A
SHA1:	9CBE8F8FAEEDC9ABB14A2BB83532FE2BF10913A4
SHA-256:	CB17DDBC2F56ACD2DD813F1B833C6719ECB5E7C8BCCCA167C3BCF9233CF0DDC7
SHA-512:	526DF4CCE089BDCA66F87823FAE24B515F28E8A5CBB43767C55003C95916440C3C66777DA20D6AE384E4C25BD03BF716763301B26DFE22FE04F25923D389AFB3
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=r3%7Cs&nocache=9481727736041134&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727736041142&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1146&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fwww.bankwir.com%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	610
Entropy (8bit):	5.4559097885945365
Encrypted:	false
SSDEEP:	12:TMHdPhRi/nzVV/KYf3nS31PHEX7aPjW2e/bKI0C2UbKt9:2dzAjLf3S5kX72ObKbhU2
MD5:	950A5568A5DC7D9B5C1C8E33C9686077
SHA1:	4AC8BE7FA70589332CA25BC6CEA1263CA54306E0
SHA-256:	0D8EEC0DF98211FA752EBE83512BFD9027B3423FEFB1F116D062B58233B88C50
SHA-512:	380236D6F03ACFF1215F6159479F428BEB1F8904A6CD5F5FB6D19098A2BFC08EA0E9770B158B732A7BF669CA592DC56A2F35F681FCE173386A40F1A98C9CDD8C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 79.5 79.5" style="enable-background:new 0 0 79.5 79.5;" xml:space="preserve">.<style type="text/css">...st0{fill:#C7AC9A;}.</style>.<g>..<path class="st0" d="M39.8,0C17.8,0,0,17.8,0,39.8s17.8,39.8,39.8,39.8s39.8-17.8,39.8-39.8C79.5,17.8,61.7,0,39.8,0z M34.1,58.5...L15.4,39.8l7.5-7.5l11.2,11.2L56.6,21l7.5,7.5L34.1,58.5z"/>.</g>.</svg>.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4696)
Category:	downloaded
Size (bytes):	7555
Entropy (8bit):	5.352986407699594
Encrypted:	false
SSDEEP:	96:n200TXAOFr6W0oEujWwmZuzUl3y2bJlNNhVfkGOinwWrb5FKolU0y3g1aNlWrrzI:lgR2pumuSpbJbNhVfHXRT2QyWrrthFCF
MD5:	EBABDE677604270643EDD01458C4F10F
SHA1:	100D84FD2175AAABF534A9F5A2C1B497C5E261A9
SHA-256:	C8A3188726D12E2E6A8C84B1534456425C2704BF7D87CABDB838CFAB76CB157D
SHA-512:	E9949F8FA5748BD9FEF096321A28E2121A5E4F92914E435B84BDD1E4A143A84F280CFB3B6F67725F066C3B4E97305838396DF1CD88ABD5B5A3CFA3A8F568EC31
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/TfcP3WYRyZ9A/cookie-banner.min.js
Preview:	!function(){"use strict";var e={"./src/CookieBanner.js":./!***************************!\. !* ./src/CookieBanner.js !. \***************************/function(e,t,n){n.r(t);var a=n(/! ./utils/CookieHandler /"./src/utils/CookieHandler.js"),i=n(/! ./utils/helpers /"./src/utils/helpers.js"),r=n(/! ./utils/Template */"./src/utils/Template.js");t.default=class{constructor(e,t){this.gtmId=e,this.lang=t,this.cookieHandler=new a.default(window.document),this.template=new r.default(this.lang),this.banner=this.template.createBanner(),this.template.addTemplateToBody(),this.externalScriptsHandler()}externalScriptsHandler(){const e=`window.dataLayer = window.dataLayer \|\| [];\n (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':\n new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],\n j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=\n 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);\

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	214519
Entropy (8bit):	5.906193140023946
Encrypted:	false
SSDEEP:	1536:cHGBkY+5UPEKaTV3Xv5H3nvNj8FBw1H7V8HHYAfuq0ciAIR4MJT0cKgrjgXrjETq:cv/xwBcyH/fuq0N6fcSbhgyTbDQ5W
MD5:	4D34395F5FC4601249FC0ADD1149B75B
SHA1:	525379A580FE74AD70FD218FFFC1E57289B931AA
SHA-256:	7738C8373A5B87AA8281BDC4960DE5026717881C83DF2666093718CA5AFFA444
SHA-512:	E1944C2C7B56777B4D4837ECE50F023919E7E7ECD296B8555E719BEDFC46E179987AEF67FF5E662F72DC98EAC6B0DE513C31A889EC49E1F2D3275EADAD568EF5
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/c7r/assets/static/dist/js/deprecated/typescript/static/app.min.js
Preview:	(()=>{var __webpack_modules__={1424:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{"use strict";eval("__webpack_require__.r(__webpack_exports__);\n/* harmony export / __webpack_require__.d(__webpack_exports__, {\n/ harmony export / \"default\": () => (__WEBPACK_DEFAULT_EXPORT__)\n/ harmony export / });\n/ harmony import / var _helpers_GTMHelper__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(9796);\n/ harmony import / var _helpers_GTMHelper__WEBPACK_IMPORTED_MODULE_0___default = /#__PURE__/__webpack_require__.n(_helpers_GTMHelper__WEBPACK_IMPORTED_MODULE_0__);\n/ harmony import / var _helpers_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(1052);\n/ harmony import / var _helpers_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1___default = /#__PURE__/__webpack_require__.n(_helpers_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1__);\n/ harmony import / var _helpers_Debounce__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(6652);\n/ har

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	25066
Entropy (8bit):	3.729531622434699
Encrypted:	false
SSDEEP:	384:NNQFuqx0sUTmVC557hGpcn6ZF04O3iNtCEkusgLPOcP1nHR4ZHx/B+spYPn+Hz5H:NqsqxEToCu8uF0lixLLWcRHyZp51
MD5:	F55C5F0057D84AA4EEEDAB2A8F4D558C
SHA1:	EDF55FA3D61D93E3EB7EB085F77890B752EBA049
SHA-256:	17CF6709088D4FF6D398CDE251F6394C88AB3CD1D2C3D1FFBE3357A6C54BDD2E
SHA-512:	B346380F6448BF2D3140BA49A71E58B03928F33BADBF29009EFBFF0E5DA0360F56FD53F36666AF56C26F74AF3240AB919E35AE108EA1088E4134F1DCA9F350F4
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/p9HJ4M2Uz7U4/b75b73e313804cf110ea.svg
Preview:	<svg width="250" height="65" viewBox="0 0 250 65" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M80.1996 37.4998H88.9245V0H80.1996V11.5749C79.1612 11.0678 78.0925 10.6253 76.9996 10.2499C75.7027 9.86294 74.3524 9.6857 72.9996 9.72494C71.3876 9.74368 69.7966 10.0925 68.3246 10.7499C66.8114 11.3824 65.4547 12.338 64.3496 13.5499C63.1559 14.8902 62.2232 16.4419 61.5997 18.1249C60.9097 20.0921 60.5712 22.1654 60.5997 24.2499C60.4075 27.9197 61.4553 31.5476 63.5746 34.5498C64.4907 35.7777 65.6893 36.7665 67.0689 37.4323C68.4485 38.0982 69.9684 38.4215 71.4996 38.3748C73.0443 38.4016 74.5775 38.1035 75.9996 37.4998C77.5082 36.771 78.9192 35.8555 80.1996 34.7748V37.4998ZM80.1996 16.7999V29.9998V30.1248C79.4812 30.6472 78.6892 31.06 77.8496 31.3498C77.047 31.6376 76.2021 31.7897 75.3496 31.7998C74.5255 31.8754 73.6954 31.7512 72.9295 31.4379C72.1636 31.1246 71.4844 30.6313 70.9496 29.9998C69.8787 28.2466 69.3969 26.1966 69.5746 24.1499C69.4535

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 40x40, components 3
Category:	downloaded
Size (bytes):	660
Entropy (8bit):	6.768927861394116
Encrypted:	false
SSDEEP:	12:7PBpAYzbrygLaLlTTrjY32z1MX7+91fwShmbVBVzwGuOTlmYrw:rQPgaLlT3jY32zKzShmbVoGN/w
MD5:	F59791F3D71A211DA6CC65F09FEFBA07
SHA1:	A65DE7F105BB84FFBA6C48D9D3BB1E72352B318C
SHA-256:	DAF5020ED2321E535D34631326B2C04709863F74D1B64252EA46D0BDD364BD6A
SHA-512:	7574640002D663F770A0C8A0E6840150C87A36487A3FE227DA5E4646AF6EAF573C1C779A22A8C5435136F73FCC8A8918DFC490023B993F605D5E513886085B88
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/17402906137501258544?sqp=-oaymwEKCCgQKCABUAFYAQ&rs=AOga4qlDvLj6tY_clwu5ZJsep3AOS2QvBA
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......(.(.."....................................1...........................!1.A"Taes.........2R....................................................1...!............?..D.o.F.My..,.)...FQ..R.y.B...K[.......x]{N.qE..2."$.p.XA....%,...F2.c..OQP...d.%.rPeLG....h....EC7...R...DG......\|7.....0.v........Q..2e1.s.-w.\..Gr.SG...D...pu.........G....)..g..0.Fu...^.{.EKN....d.n.."-...Q_f8..C.N.G...E.#."b.D..$M. .Jd.gaG....D....x...r..A.T6.m7........!ie.Q.A...q...q.M5_..VS.M-..[t...=....@Z.d......

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 24134
Category:	downloaded
Size (bytes):	7514
Entropy (8bit):	7.972817339817039
Encrypted:	false
SSDEEP:	192:xu+tUmw+Xl4veocBfqyrPEuB+59F1oeIjjY:cjcKvPcBfqyrD+b1
MD5:	149F8B397FE711244EF204823190CB86
SHA1:	1AE7A6222C28FD5D32A89B6A2C9BBC72FD6F647A
SHA-256:	8D54148B53158E3D06FE5285AFF2C3E189390FE355B2EE400BAF8F1F5A0A819A
SHA-512:	B6CA495E1A0A55D00854F467BF88D87D86C149BFE285CE490F9BEFEA0D0EEA06B868F8B02880E30D2EFD779980554862F38DEF6992B2018701550AD90D13E1E2
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
Preview:	...........<Mo.Hv...2..q...m..o...]...gv.1..X...".d.n...bo.$@..r..,..{.....a~.$../..bQ.l..,..i.-.>_.z........2.!gY.J.d$...$r9....._.B<.Dy...n.!...l...K..v[=....2/......AW...'.,Qe.:.n]....u..Y.:.Q.f.5bi..gq...g._u>s<..f1....o...:}.....^:..X. .S.q......A./...0J......E..V.P....zy.O..a......j.3.....F.$O...a.O..~B.+~...^..0.....i/...$.0o..m.<gC..O....1.4..y6.9.s.q.....C`...+.. .?<y...:z...7.^.Nw.?..~..W.\|w\|....K..<.p.6....M..uw........C........`.7.ot..&...s9#..%Y.dA.QB5..B.t.g\.....).!.`...i9.y4H........I.\...e.J.8.%..y.m7.os.U.G..Ja....l..hw....mx.'y.3$.X+a..jg....)..8.G..(...;D.j.%..x..e.M..V...;.> .0.8.....g.p.....+.tn..~J?r..+.R..."....SL.\|...Y.....e.....f9....I..CRB.(.i..8.h.%..aX..#{=.n(..S...L.n.kV...1'.M.....^#OG.T...l.p...AZ....<V=A7....yB ....3.q......f..q<..c8.....A..H.v..J.^aR...b..F...z....@...<.z...LC.. .T..gnA.f..0.Q...iVr7.H....r]l...d..i.$@. [.jM..r.. @.nT6(h~Cs....8....A..i.A..JN..h..p.)...d(k.l.0..M}Z.}.gt..1.I.^...

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp5ay73b4h", last modified: Tue Sep 17 11:17:07 2024, max compression, original size modulo 2^32 33954
Category:	dropped
Size (bytes):	8553
Entropy (8bit):	7.972892727864916
Encrypted:	false
SSDEEP:	192:SBnfOnCZlLsSg0SM61d0L0jcwdBvmPMM9/caIoc:Sp8SS7BThgwdBeZ/re
MD5:	DA6FD8696488229B01EE683C868A69D4
SHA1:	D04F9AADAC0EA4981B4B0C5825A28A21D41461C0
SHA-256:	2BBE9507295BA99051EE3ACEF34C0B36D5CADC6946614EEF45445F8D6DF33F3A
SHA-512:	C8D1447E683AD4D4935D8B80844591F6657FDCC178CAAEAAE66A286E7D260E13DC879CEC3DE61F073C84FB99ECE9E2F1DEAE193B2817FCCE38BF5ABFD75908BE
Malicious:	false
Reputation:	low
Preview:	....3e.f..tmp5ay73b4h..=iW.H...W..>Jj...S .\.W5.\.......,.m5..VJP4x..F.!.\|a05;og..SyDFDFdD...4..?...^O).h..^....F...=.b$..Fc.J...1.c..q..R....<..<j~rtw4n.n7 =..o...:g......V...a..l7..;.I.$.E...#.K\|<:m...T..w..5.;g_[?;z7...On...w$>K..37NO..O.. .!..E.m..$>..$.....a....>.~....z.Q......Tu..._.O G.H.E.z.~.25.v.O?5....Q.`...3...'_..@j..........p..[.F+... 1.A......f.y....P.p.[..O.O........{..;.o^\..N........ L..7$...R......M.V..8........c.M...V;.]D'....`I...4y....b.%.P:....h..........$^_../g.\..\..Z..'..\|. ...M..Q.h~.\|.J.vZ.o.r..0 ...-..#=1.'....{...H.{R.5U.CG...$wc.........:e.........(..I&.<.....#%.kP.....d..2\..Q.a...........=..C..`.D]7.......y9o...........37.%A.s...,..L .N.PP2P.......Kr.JC...gq4&qrW.. 0..CMn.$.Y#%.....8....(N.}?.....r.1q.'9V....~.H..)...8.?}...{.....ZjM.$,...eY..pl.G.lT.(..F....$.`l%....".....M..9,.=....$...u.Hb..s.......2!`I..3....A.035...AJl.........7...mT8.I.\|.6..ds. N......D6.....G.P(....(`y...1/&nB.0...A....

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp0yrdjd2n", last modified: Tue Sep 17 11:16:31 2024, max compression, original size modulo 2^32 1728
Category:	downloaded
Size (bytes):	755
Entropy (8bit):	7.775474941492504
Encrypted:	false
SSDEEP:	12:X2jC8DoYO/DMdBMlSAll4D7sOVuU8DSu2TNHfq1WOK1T55jHobgf0hjdAd7W7hn:X2ugHO/DMdBMdll4uDSu2RHSLwzOP8Oh
MD5:	B0B7CF1233C893469CAF7CBF3145560E
SHA1:	D22FF70EF795B5ABF97B488E01C64CB0141A5B55
SHA-256:	FE11978FB303E3DE23F1F5904653DDDCB3EC6899FDD6BD90250249C69AB277C9
SHA-512:	ED5C49BF050574F2B3F1341DD1B68C50ABCE875982B16FFCBEBAC3486CCF750E881A74A2477A0FB06DA629DF6C41E361FD26A5E2B9FB6FBA3A36026E5A78BD79
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/DefaultUI-efcc91c9-fa5e06dd.js
Preview:	.....e.f..tmp0yrdjd2n..U]o.0.}.H..H.K.$J..O..m.%........%..!$.Z4.bs....c;$.2..i........L.........9....1.,5./.".j..e....cB.2.......T.......LH..?P.F{..q0..{}.F#.6..:z.I.h..G.c....!...w...u.....5.............~4..{......_..w"7.h.......Nd........x ..+c"&....&....F...CcS7..f...e.i'.../.......NbF.U.D9..cg...w.YF.%.;.$&..u]3w.Y.-g.u.Nj..........3IggF......p:4, .\|...!EQ..:.Fqi..T?.u...W....n...>..toZ...a.o`.k_\...........beg.P%V.0._.Zg'j......1A....L...-\|......r.(~.A..[%.EQ....D.......P.P...P.4.`..8..d...^......>..]m]p.ElG-...X.....'....F.o.NW.\|.;...?a!....O.'.V...R....QL..1P'.@.^ne9..1.>?/....U....m..T..X..M`.b<.Re.kR..z.5i....m.S.Zc..@y....0...%.[...UX...M...-W..,@.r..\|..Q...?..FlF.Z :..w._.....B8.Y"..O..@.......

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4210
Entropy (8bit):	7.930002383326811
Encrypted:	false
SSDEEP:	96:zllcHitlIxv9vk7C1+I4wWHLihk/xVUYyuFbA9VDo:gIIHUCD4warUYyc03k
MD5:	1867771ADD1D5DBB17BD1AB7469C7FFF
SHA1:	8DFB8D9245D4ABBD0174B28D66422B2E211A6329
SHA-256:	8343010321A203AA9285287D0D107B0255EFAD786F6BC2E4D675652EFD828633
SHA-512:	76E269C9BC966301FE22359D4E6BEBE17FD0310E996E3DC2AD09ACE0470160B583E626B6EB22730F150A035714CA9BA26D4481D80CF1EE4853232ABDF134C7B5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6N...CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	27346
Entropy (8bit):	4.931460709222008
Encrypted:	false
SSDEEP:	384:BbLwi6HkwBb9O9lxKwhtUjP4qhqa3TnAGnZ6g4ASe6Rs4mRkz3R54W2:BbUVHkwBb9O9ls/74qhX3TbUUnLoR5W
MD5:	DDC1A1F070CF0B6118CDE45749359A22
SHA1:	4C854109540F768F794D8675A98CCFCD1499CBB6
SHA-256:	325088F998FAC12A93057677B52799897639E9E003D50837BEA26A5790D2A58C
SHA-512:	81BB263C1C23E67A9EA164A283664E351AD2663FAD77D82B4964F5163A4AEA333A67CA9A2BDDD354776E0CFF1824895F8D8DF99635DD2BD2BE6F1C64516FE943
Malicious:	false
Reputation:	low
URL:	https://api.usercentrics.eu/settings/5QJe3R54G/latest/en.json
Preview:	{"settingsId":"5QJe3R54G","version":"31.17.158","isLatest":true,"buttonDisplayLocation":"bl","moreInfoButtonUrl":"","actionClickOnViewConsentInSearchApp":"","layout":1,"privacyModal":1,"urlConsentInfo":"","stylesCss":"","buttonPrivacyOpenIcon":"","buttonPrivacyCloseIcon":"","buttonPrivacyOpenIconUrl":"https://img.usercentrics.eu/misc/icon-fingerprint.svg","bannerMobileDescription":"","consentSharingIFrameUrl":"","bannerMobileDescriptionIsActive":false,"controllerIdCookie":"","chipDisplayLocation":"rm","privacyButtonIsVisible":false,"chipIsVisible":false,"disableScriptIfBot":false,"consentSharingIFrameIsCustomUrl":false,"consentSharingIFrameIsActive":true,"iabConsentIsActive":false,"resetConsentsOnShowingInitialView":false,"btnMoreInfoIsVisible":true,"isVisibleInIframe":true,"btnDenyIsVisible":true,"showLanguageDropdown":true,"enablePoweredBy":false,"storeUserCounter":false,"useConsentCookie":true,"tagLoggerIsActive":true,"storeConsents":true,"optInCountdownVisible":false,"optInCountdow

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4696)
Category:	dropped
Size (bytes):	7555
Entropy (8bit):	5.352986407699594
Encrypted:	false
SSDEEP:	96:n200TXAOFr6W0oEujWwmZuzUl3y2bJlNNhVfkGOinwWrb5FKolU0y3g1aNlWrrzI:lgR2pumuSpbJbNhVfHXRT2QyWrrthFCF
MD5:	EBABDE677604270643EDD01458C4F10F
SHA1:	100D84FD2175AAABF534A9F5A2C1B497C5E261A9
SHA-256:	C8A3188726D12E2E6A8C84B1534456425C2704BF7D87CABDB838CFAB76CB157D
SHA-512:	E9949F8FA5748BD9FEF096321A28E2121A5E4F92914E435B84BDD1E4A143A84F280CFB3B6F67725F066C3B4E97305838396DF1CD88ABD5B5A3CFA3A8F568EC31
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var e={"./src/CookieBanner.js":./!***************************!\. !* ./src/CookieBanner.js !. \***************************/function(e,t,n){n.r(t);var a=n(/! ./utils/CookieHandler /"./src/utils/CookieHandler.js"),i=n(/! ./utils/helpers /"./src/utils/helpers.js"),r=n(/! ./utils/Template */"./src/utils/Template.js");t.default=class{constructor(e,t){this.gtmId=e,this.lang=t,this.cookieHandler=new a.default(window.document),this.template=new r.default(this.lang),this.banner=this.template.createBanner(),this.template.addTemplateToBody(),this.externalScriptsHandler()}externalScriptsHandler(){const e=`window.dataLayer = window.dataLayer \|\| [];\n (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':\n new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],\n j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=\n 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);\

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp_cgccsit", last modified: Tue Sep 17 11:16:33 2024, max compression, original size modulo 2^32 1270
Category:	dropped
Size (bytes):	687
Entropy (8bit):	7.681964112643804
Encrypted:	false
SSDEEP:	12:XFnlsvP8Gagyl4M43aPTyLAsMHPzkgYF1SAKy0YxojBlfBKwn:XFn638xgy+M43a7y9MHPYfFMy06ABlfp
MD5:	E4C20E66800385031ECA3E76F11D9A33
SHA1:	5955E24E438BCDC0D9342C40393F7FE897BFF32F
SHA-256:	AEE18B7A861A520930DF1435A8C81368504DCC3135ED1BC16C4DAC94838448AA
SHA-512:	F9BD85D721972B3E0CDA7A5AAAA60A5FCD72F4E466AD2299C16CDFEBE10B0FFFBD20497495C8B6658537730B81B17F98AC446083B0E5D60FFE63D0D5ED296FA1
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmp_cgccsit.mT]o.0.}.p..l5..>...a..J..N.D3.$.p..}]...}.@.~HQ...\.{.iZ.q]1..f..N?v3..j`l./.qU.A=.>~..\|.m..Y!../....J....m..Us.n%...FOX.z..W-$.....G.V.w.%..=..U$3..\.......Y.{......z........6..m.yeu..........4...t8..&.i..P.u. ..#...,..0z.<..D..]....\......S.G.q...v.].&.-3.k./.u.wqZ....F.)..0.I.mFng.I.....I......e6qE.vZ..m.r...n.!..7n>.......d_.Un.tU]?..7& X..Oa.<D[;].L..+W........\h;..D.0U..S...G..j....-...k%.}^E.V.c`...2...-..\|.eWZx.......?...s.JgK..N>.2.....p...xtYH)Go..[..#.0.#.:...L..A.b>M......J<..t.]...q.J].b.....I]...w.H..u3v.H-y...BW..Z..$..m..>..wj#....."7P.`.Cp4`jJ,...=ho.....9...X.N....(.,.6M/..t.V.z6.nI..xRqC...v..4.*..X.f..?v......

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 11:29:28], progressive, precision 8, 1420x1082, components 3
Category:	downloaded
Size (bytes):	36978
Entropy (8bit):	6.9636627771866975
Encrypted:	false
SSDEEP:	768:kSkp0pOrckp0psEsL000000000000000000002qWQ7jX/zG0OHuc45UV5hlBFroR:VI0ppI0pshtWQ7jX/oHL425hlBq
MD5:	34728207D8866591537B004617EBC934
SHA1:	C2349D2DA5E93B32B8B37DE746B895D4355DA876
SHA-256:	417E432A47F7DF09B95A50DD64EA392F008F3A3FE64389234D221FB59EF14F20
SHA-512:	B8300A4C33D067DF0E1D060DD03126E377F036266BE4D73D0D3A6AC9898B6E0CDC2B72A41D37C3DA68D3372BADA77CA70FCAEDA1360B3522D9E28BB838C57BC0
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/user_upload/Sell_Domains/Domain_Auction/FAQ.jpg
Preview:	......JFIF.....H.H......Exif..II*...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 11:29:28.....................................:...........................................&...(.......................................H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...I%}.RI'k\..0K...)d...cc.$.....R..G......L.a.a.g9%..6......"...<_......<U....Ii~....x....2......"....{3.sRZ_.(...?.)~.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	dropped
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HrPyY:zyY
MD5:	6CEA4FAAAFA38FD40BB35DE6589E85F6
SHA1:	8105D649FBDC85604236E65C53E97BCF0CBF5A36
SHA-256:	FC11A6B80A3B077C6ABCF624E3331E30045DEA7896F6539A7CB263E74964F5C0
SHA-512:	7DB4FBAAE22AA961987C0750E13E1B7A3CDEE6C0502A7C5093D4FAAE84454EF6709F8690278FF2AF9ED984601FDD8FFC59E887A34AE723C5BCAAE54125F4FCD4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAk_ENelIzeMPRIFDVKKSaM=?alt=proto
Preview:	CgkKBw1SikmjGgA=

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8017), with no line terminators
Category:	downloaded
Size (bytes):	8017
Entropy (8bit):	5.7768857318891955
Encrypted:	false
SSDEEP:	96:hdlHb0OWGWeJ00wLIw+1ppOic7CgcPfZoN2+UB7qhmcYG8dTlc2/n53wb:7l7nNwLIw0pOic7CRXZkXhxYG8dB/nq
MD5:	888C5525EC29FF8E9CEEDED20E99A963
SHA1:	BFF09941F35DDC3960159CB8463CB3D60D80CDBA
SHA-256:	05D43EB91E61BE796F552DCB93524476AE117927C92CDD5B989CF660299233C6
SHA-512:	4A90E57DAFC5E4BBCCE9BA99DB1F857640F5C4F4076F025DA9708BB529A352FC19B9EEACD918B5499B70460BEF1610DDCB64EB4A970A7D28CBA0EC72C615B537
Malicious:	false
Reputation:	low
URL:	https://sedo.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js?
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(V,f,g,l,m,v,x,z){V=b,function(c,d,U,B,C){for(U=b,B=c();!![];)try{if(C=parseInt(U(396))/1(parseInt(U(368))/2)+parseInt(U(412))/3+-parseInt(U(360))/4+-parseInt(U(337))/5(parseInt(U(323))/6)+-parseInt(U(315))/7(-parseInt(U(371))/8)+parseInt(U(326))/9+parseInt(U(359))/10(-parseInt(U(390))/11),C===d)break;else B.push(B.shift())}catch(D){B.push(B.shift())}}(a,529529),f=this\|\|self,g=f[V(325)],l={},l[V(375)]='o',l[V(402)]='s',l[V(321)]='u',l[V(365)]='z',l[V(367)]='n',l[V(330)]='I',m=l,f[V(385)]=function(B,C,D,E,a4,G,H,I,J,K,L){if(a4=V,null===C\|\|C===void 0)return E;for(G=s(C),B[a4(318)][a4(345)]&&(G=G[a4(320)](B[a4(318)][a4(345)](C))),G=B[a4(378)][a4(409)]&&B[a4(335)]?B[a4(378)][a4(409)](new B[(a4(335))](G)):function(M,a5,N){for(a5=a4,M[a5(401)](),N=0;N<M[a5(329)];M[N+1]===M[N]?M[a5(415)](N+1,1):N+=1);return M}(G),H='nAsAaAb'.split('A'),H=H[a4(307)][a4(324)](H),I=0;I<G[a4(329)];J=G[I],K=o(B,C,J),H(K)?(L='s'===K&&!B[a4(358)](C[J]),a4(361)===D+J?F(D+J,

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 40x40, components 3
Category:	dropped
Size (bytes):	660
Entropy (8bit):	6.768927861394116
Encrypted:	false
SSDEEP:	12:7PBpAYzbrygLaLlTTrjY32z1MX7+91fwShmbVBVzwGuOTlmYrw:rQPgaLlT3jY32zKzShmbVoGN/w
MD5:	F59791F3D71A211DA6CC65F09FEFBA07
SHA1:	A65DE7F105BB84FFBA6C48D9D3BB1E72352B318C
SHA-256:	DAF5020ED2321E535D34631326B2C04709863F74D1B64252EA46D0BDD364BD6A
SHA-512:	7574640002D663F770A0C8A0E6840150C87A36487A3FE227DA5E4646AF6EAF573C1C779A22A8C5435136F73FCC8A8918DFC490023B993F605D5E513886085B88
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......(.(.."....................................1...........................!1.A"Taes.........2R....................................................1...!............?..D.o.F.My..,.)...FQ..R.y.B...K[.......x]{N.qE..2."$.p.XA....%,...F2.c..OQP...d.%.rPeLG....h....EC7...R...DG......\|7.....0.v........Q..2e1.s.-w.\..Gr.SG...D...pu.........G....)..g..0.Fu...^.{.EKN....d.n.."-...Q_f8..C.N.G...E.#."b.D..$M. .Jd.gaG....D....x...r..A.T6.m7........!ie.Q.A...q...q.M5_..VS.M-..[t...=....@Z.d......

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87532
Entropy (8bit):	5.262415846264695
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7
MD5:	C9771CC3E90E18F5336EEDBD0FFFB2CF
SHA1:	6EE8AAA3AC1F4E0AE18717A3FD26892E9F0E4CC5
SHA-256:	3E7501D15C3630E791C8B20392EB9DEE31A9F65CE3EFDDE76CEF5C710141AB24
SHA-512:	C503341FA3A7176FD10BD8CD7A5717C8FAF971F87FA0C158F2D94FCD484AE3ED5031F49414DAE833FB806B7365B5699C21D2E655376F69ADB052B22F6F6982A7
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin_git/resources/public/JavaScripts/jquery-3.7.1.min.js?1724921946
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153214
Entropy (8bit):	5.543630481633971
Encrypted:	false
SSDEEP:	1536:sni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:gqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	40530F1DED793B59E0D928D18CF39569
SHA1:	A0F3E2E77B57996C4AAFA678188064EFC979AA0C
SHA-256:	3FF8C01FF32ACE1D0DBD7F4DE73CB1C027E30FCC0A68CE8698193092C2A5E6E8
SHA-512:	E9164FE5D3A4692591F0AFF6B7560CF719301A0B3106CDA0DEFC47FF5D66CFAB5F95293B68BB8E131C066BDE77AE98D2F953CC6F5EB4D6CF79819DC879DDB0EB
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return functi

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3162
Entropy (8bit):	4.830006603526534
Encrypted:	false
SSDEEP:	96:xGUL7Q6vvtgr/t2wiQIPvQ/HmjOI2RqakuAvu3fVMEl0fiCe:xGU/Q6vvtgr/t2wiQSQ/zI2Rqagu3f9X
MD5:	CFD16B174D7F7B046E20ADBC2E0A1094
SHA1:	EF062CEA98686FFBF69748C18B166D71BFC8EC07
SHA-256:	388BDB43BAAF9D4FFBB371E5B6E1EB633DB424A863A73D99981F5B11A007C9CB
SHA-512:	DA1C6A6557718844CF16F7E2AD4B5FE83BC305E7DB702A62E35F3077EAA10958C15F6A7F4885B496F48B0CF1D73815868C03975CE3E6566B8115FC62E3CCD8E4
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/typo3temp/assets/js/cfd16b174d7f7b046e20adbc2e0a1094.js?1689601391
Preview:	(function() {. /*. Decoding helper function. . @param {number} charCode. * @param {number} start. * @param {number} end. * @param {number} offset. * @return {string}. /. function decryptCharcode(charCode, start, end, offset) {. charCode = charCode + offset;. if (offset > 0 && charCode > end) {. charCode = start + (charCode - end - 1);. } else if (offset < 0 && charCode < start) {. charCode = end - (start - charCode - 1);. }. return String.fromCharCode(charCode);. }. /. Decodes string. . @param {string} value. * @param {number} offset. * @return {string}. /. function decryptString(value, offset) {. var result = '';. for (var i=0; i < value.length; i++) {. var charCode = value.charCodeAt(i);. if (charCode >= 0x2B && charCode <= 0x3A) {. result += decryptCharcode(charCode,0x2B,0x3A,offset);./ 0-9 . , - + / : */. } else if (charCode >= 0x40 && charCode <= 0x5A) {. result += decryptC

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4210
Entropy (8bit):	7.930002383326811
Encrypted:	false
SSDEEP:	96:zllcHitlIxv9vk7C1+I4wWHLihk/xVUYyuFbA9VDo:gIIHUCD4warUYyc03k
MD5:	1867771ADD1D5DBB17BD1AB7469C7FFF
SHA1:	8DFB8D9245D4ABBD0174B28D66422B2E211A6329
SHA-256:	8343010321A203AA9285287D0D107B0255EFAD786F6BC2E4D675652EFD828633
SHA-512:	76E269C9BC966301FE22359D4E6BEBE17FD0310E996E3DC2AD09ACE0470160B583E626B6EB22730F150A035714CA9BA26D4481D80CF1EE4853232ABDF134C7B5
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/zkLxDsbw1hz2/e3c69f63348c1ec6e547.png
Preview:	.PNG........IHDR...............6N...CiCCPICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R...J5e?

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3162
Entropy (8bit):	4.830006603526534
Encrypted:	false
SSDEEP:	96:xGUL7Q6vvtgr/t2wiQIPvQ/HmjOI2RqakuAvu3fVMEl0fiCe:xGU/Q6vvtgr/t2wiQSQ/zI2Rqagu3f9X
MD5:	CFD16B174D7F7B046E20ADBC2E0A1094
SHA1:	EF062CEA98686FFBF69748C18B166D71BFC8EC07
SHA-256:	388BDB43BAAF9D4FFBB371E5B6E1EB633DB424A863A73D99981F5B11A007C9CB
SHA-512:	DA1C6A6557718844CF16F7E2AD4B5FE83BC305E7DB702A62E35F3077EAA10958C15F6A7F4885B496F48B0CF1D73815868C03975CE3E6566B8115FC62E3CCD8E4
Malicious:	false
Reputation:	low
Preview:	(function() {. /*. Decoding helper function. . @param {number} charCode. * @param {number} start. * @param {number} end. * @param {number} offset. * @return {string}. /. function decryptCharcode(charCode, start, end, offset) {. charCode = charCode + offset;. if (offset > 0 && charCode > end) {. charCode = start + (charCode - end - 1);. } else if (offset < 0 && charCode < start) {. charCode = end - (start - charCode - 1);. }. return String.fromCharCode(charCode);. }. /. Decodes string. . @param {string} value. * @param {number} offset. * @return {string}. /. function decryptString(value, offset) {. var result = '';. for (var i=0; i < value.length; i++) {. var charCode = value.charCodeAt(i);. if (charCode >= 0x2B && charCode <= 0x3A) {. result += decryptCharcode(charCode,0x2B,0x3A,offset);./ 0-9 . , - + / : */. } else if (charCode >= 0x40 && charCode <= 0x5A) {. result += decryptC

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	3.090787153125625
Encrypted:	false
SSDEEP:	192:jiHSINqv0tJ30DezSfPAXTZwC3D2N2xp1Fd/ar/+zi3LHZNwkQH0iWpXDt3TN8rB:jzAnP9j
MD5:	DEF00C11B1596DB4EFEE6A9FBE64FC27
SHA1:	BD298981E6D8D7E4FFA18ABCF687041F4246672D
SHA-256:	95C427FA3143B1896FAF42A6406686CE7602CB39052081BB32D12B51C9E047E4
SHA-512:	C056E95DBFA1AAB3A50DFF18C6D577DBFFEA72C93316FFC53B6B7AA41DCC7707A810D563894589A7305DE0B76610F88150B2034670DE368773B2B356F14AD30F
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/c7r/assets/static/images/icons/favicon.ico?v=dLJ3bx2xjj
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................@...@...@...........................@...A...A. .A. .A. .A...A. .A. .A...@.......................@...@...@...........................................................................@...@...@...............@...A...A.U.@...@...@..@..@..@..@..@...@...@...@..@..@..@..@...@.}.A.U.A. .@...........@...@...............................................................@...........@...A...@.j.@...@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@..@.}.A...........@...@...................................................@.......A. .@.}.@..@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...A.G.....@...@...........................................@.......A.U.@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@...@

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpuhnqew5e", last modified: Tue Sep 17 11:16:31 2024, max compression, original size modulo 2^32 5491
Category:	downloaded
Size (bytes):	2448
Entropy (8bit):	7.915825988584021
Encrypted:	false
SSDEEP:	48:X2TRvvxBZQkdysZTyAxhqRa5U2Q5yJR/HKcUGm+H2baIjVIOfS35oklcB:eRnxB9gAxtU2Q5SzU7+HSaIqJ3YB
MD5:	5DA72F9934EC4DA8A4798966F0B6BFD8
SHA1:	F6973E32A9EFC3162635AD1FD0805FEDD8275BBA
SHA-256:	B3B6367472632D79597A664B7C1E5904E057AA7F11E9575667337BD101A7E0C5
SHA-512:	E806BA43043635444C7ECB7B6A5C067ED95B3B08E645A39738C9CE77F984D1FCA1A73392EC547F0B593716E685E348E68A8ABB23CB5DE77B94070CF6CA1D8773
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/PrivacyButton-62ab6c78.js
Preview:	.....e.f..tmpuhnqew5e..Xi......_A....h..IA1....`.....E.S.G.....K...{.:f..\|..`..bwu....]..m7..7N.;..r.T.7.......F.?s.T....q.T..c......u.]...,.;.n......d.n..YLk=..C....M..x.P..b^m.......e..6..U.d.v..+6.:.^W..]_......u...;.w^...m.G'.....n.rV.\|%.:.+2$...t.Dv..L..j0..M...+X=Y...)...........\|99....j.g.....r..7..l...vS\.w.b.yo......(..Di..I.O.m9..{Y..X.7U.~.....?..p..n.5...M...~.o......4eu....[.Gt...g./......h?..uU.......mW..{=[.Eu].aL.....jh...9.........]...../....n. ..h.9.q..i..e...[o.Z6.Wy.o..W..WHY...S......>..pT......-....E.).Xm.#p4#..Y.j..n6}.a[<.~{{.oC.v..........t.M].l...w\|'...c.[..i.w..:.....YVvu.....3..`...V......VAt.D..?..'....a...:3N..t.i?s\|O..T.. .\.X'...(pL...o.p....?.Y..^...1:2..i..q....I..Of.<r.9.dW..8...'..'8J.....I....D...>..X.!,.u`t.Bb..u$:..E..^.:..4.[.^A.O.r.[............-....4..Az..Y.C.".&.&v.N<.a:M.-M`d..>.h+../...D.T-....VG.T.$P.xD=\|.A.\|.R..z....P...0...j0.b{..eh...0..)...X.^b.......h..BQ.. .[.8..!n>.I.T.^..^"..c

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 230x101, components 3
Category:	dropped
Size (bytes):	30229
Entropy (8bit):	7.6614619332375105
Encrypted:	false
SSDEEP:	768:tF9RpiaTsfr3rZkGyvKb5Ywooend03umCI:tFX4aTsfr3rZk3Sbmw8mV
MD5:	F90B38EFE028D24F5514E9CF2203EED9
SHA1:	E11744A0C9753531F0A27B63AA64F5C6F3FA635B
SHA-256:	DAB36F28B5807E060A190A44401CBDE97E5F4FBC999692B7E5B75E29F170F82F
SHA-512:	3D46111096365E683637EE5F9EBB3F37E53A4B81DBB219B6E05722E46C09CE90BF2A5772324775F61FA0CE8E1FB6D5003360B5F2615C0BEF04A63B0263D9F619
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......`.......`.................0210....................0100................................e...........http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x='adobe:ns:meta/'>.<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-01-22</Attrib:Created>. <Attrib:ExtId>ae82471a-0c80-42b3-b7d8-ecbb7f494ea5</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>. </Attrib:Ads>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>2024 ICA Badges (230 x 101 px) - ICA-2024-Platinum</r

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/afs/snowman.png
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27332, version 2.1310
Category:	downloaded
Size (bytes):	27332
Entropy (8bit):	7.991751157831881
Encrypted:	true
SSDEEP:	768:98lHID7bGsgKetE+hR2nTPXyAlFh6Zc6u2:qGDWsgKUR2RveI2
MD5:	8BB4BA711047411893D35612BC631AB9
SHA1:	FDDC00ECA2E66E4431C9615DF508A1A377ADCE42
SHA-256:	4BCE5252202292E4D9D6DE37A5BD004CB52D8C44E9F940BBCDD030EA569F29DC
SHA-512:	48BEA7A2A376B01D097E02409AAC713500AA7CFA9903378977178677A2764C0C8E07B692379B3722163BCB201F9649620347045B4503C0A35CBDD16F1E036470
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/dist/files/sourcesanspro-regular-webfont.woff2
Preview:	wOF2......j.......`...jQ...........................?FFTM..(........`..R.L..e.....`..{.6.$..(..V.. ..>..d..L?webf.[gMq.o.I+....L.(.]..c.M?odF........2.&U.....!7.d.B......."...'yu.....s,C...3{.(........9e...Y.,?+uT$..T.=i....?T.)).6..+...L..tl.!^A~..Z.C.... H$.DM..qw.e......,.g..s..C+.[<........{..\{.......%..M.?..P3..;...f,;N.i..rU.'E.U.s}TD8........hn...0.B....s...fImcAl....Y....J2...........Jy._....R...jj..... f........+...4.. 6.wd..#k.Lp.............k..W..>mq... .....6...P.9....._.f.^.._...Y...Z...Vu.8..n..".0N.kF.1.B,bX...c..`.b...A..W...d..3r.r..~w..#...Ch...a.,y.X..."...L...........g.kiUlY[+...t.H..0.@.....}..Z.[..>L.E-..N..1.d?.N....}.3a.......g.mD...K&.D.i..$.e.]-...?k.g.....wF..K)".p..FD/Y:.l.~.>a....'....S{P.dC....1...uK............./.B.D.!.)OO.s..M...w.M.7..v....t.@..)..J..I1..\|Ar..B...B.Sr...m.r.]..KU=.g.9$4.kU....K....*.0]....zh...g..w.z!.,~._..0.}...aP...2..%kv.U.\......2<.....I.xS.b......f..f....j.}E=..DBf.a..$H.L....B.$k.E.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	443
Entropy (8bit):	7.328100037894394
Encrypted:	false
SSDEEP:	12:6v/7zevpDz93mc1vmrE3u9SNuoMsBf19Rn0qMn7xF/1:9Rz93mc1vmoBgsJ5TGH9
MD5:	16C1B19295991BF645BD13748F593963
SHA1:	06AF32F1576D0E8D772A85A6BFE2569C85CFA051
SHA-256:	1809DCC57366AF45A57619362F6FEFEC4C6A4C1677ED8204DC5BEF4CA1100A41
SHA-512:	D2F0B6D7385BDACAC22D31814D2B7301CC01A413F293E0876A3ECE1F31BB9D74BCAF0413886E8DD82987E38C0B6CCD65BC220B23A0E9B045ACA6717FB2D43B25
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....PLTE......................K..2t.....\..o..........]..............XR...xv.........?...j.9.....B:...HE......dZ.........*...db.A<.SKj....tp.sl...........L.......YV.D:......h..............IDAT..MO...0.[@.T.[.T.)..o......[..<.L6........4P.m.h..i5...n.v........$S\|U..pD...). ...Y.,Y...`mei.x...6.......,.'.z..M.Oc~,........%.:.h...$.5....%.-J.FW.~..........T..`U.l.]..l.`.....+.X];......IEND.B`.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153198
Entropy (8bit):	5.54355971169404
Encrypted:	false
SSDEEP:	1536:8ni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:wqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	B22C1AC60EAD0F027FBE0661AA5AED8A
SHA1:	6F078850BF476EE27DC182C5D7203586DE7B403D
SHA-256:	BD4D16F5DCFC31BEEDDCBB565F052072034461C145DA3DF205B834422709A64D
SHA-512:	DE4B373622BFCF826278EEF166AF9E4867E2333E2396FBE969FD7C4F50950682BDD7A7BFD766743F6565F3562B7F8BC45D6DE46C98A2BB49C724C47E4ED46949
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return function(){return b<a.

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 12:02:59], progressive, precision 8, 1420x1082, components 3
Category:	downloaded
Size (bytes):	52602
Entropy (8bit):	7.4287422947114035
Encrypted:	false
SSDEEP:	768:/E6FrL65El0Krcmskr6siDLYu0QjUoqiacJVFsX665/XeD7rr2ghN:RY5A0KIIWDLYuXUohVFsX661OWKN
MD5:	F65D136F378CD22EED47C416D1D8097E
SHA1:	F59C9C299939E28F77B1FCD42DF7609FC6C529CB
SHA-256:	DA5FE47C053D2DDF43B3D159330C30276F942E26934DA65242D449644414358E
SHA-512:	942E4D95C8D5F722E06F089E000DB8A754F4AB6D0775C522DBBFE778AC01C4FB25E6109114F95B7559BC066258D7170D4E901D52B2E73A8A070EC86147AEECC4
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Domain-Parking-Profis.jpg
Preview:	......JFIF.....H.H..... Exif..II*...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 12:02:59.....................................:...........................................&...(.......................................H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...I%}.RI$...I$.$..N5L...Z0..w>..~..@n....+.i.v........Gj_g.Zo..u.....!.[.?..+./b....I....LJ.. .&.......=.W...N....%.{.....

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpmdgyjxbt", last modified: Tue Sep 17 11:16:30 2024, max compression, original size modulo 2^32 4399
Category:	downloaded
Size (bytes):	1695
Entropy (8bit):	7.883854507468435
Encrypted:	false
SSDEEP:	48:XzRsRSYn645e0oei9YyDKErV/uPOxuxQYnyHfs0:Vs0Y645y9PbhxuDn0
MD5:	B541F7BDEDF66BD5EAA04711DF6F0240
SHA1:	5AA0ED79236EE16D38FFA76225484B87D29C532E
SHA-256:	A2785C8FB44AE2D0868DF3753D418A2D66348057FEA9D6AC509B5D4D387ED741
SHA-512:	C38F06D7FD5592CA1288A09DEE20EBC7A5EB3A9D7C1124C83C0C91D66B895B77105EAF185A9F2BF3C654F299CDAF58430BE946FA2BFB6A9DE035FE148E8ACEB2
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.55.0/DefaultTabs-99ec4522.js
Preview:	.....e.f..tmpmdgyjxbt..Xmo.:..~.EAs.Ds......h.#...it5j.b.. ..4.}....B;..>Il....[.ZGR'.......%T...5..B..K...P. ..%a..O..d.B..}.b.1x...,.b`..;`#...1...l....z..7..x.p.^......t..U....}..\E~...OU..yL..Y}..#..,s...H....S..C...$.&h...Y~.... s..2..!.......W.....:f........O.O....:.B./.:.4.._......g..l....>.0.2.q.D.(.)[9...5.Jx........D.E..b.v.J...n.......\|N.=.oj.`./-..z...x......H.\..c.......<uFf.>]Z.....4_Dr7..:R\|<.`&Q..../..M...l...\|#.X.=H.a..X...a..v.i]...`.(..atM+.....j.....Z..:..E..A..3.9.y...'w.....0.r.9..L.>...9&...x...k.B.:HL..hx....,\|......^GZG+..Tk6."5=.x3X..G.27.Cm...2...t.#........].+-.z.q.n...k...X.9.![c.....".M....q\+K!..\....[i..h..&......m3..ek.q.!..]..%$.\|...6......=z...\|.D......7.....^... [h..CsJ.9.t\....j...D..Pd@ ....,.rd=.rq.).....m..D..b.# ......-..k..X)....&.V.8...BVn...v.uy.{.?....o.2..?..5....4...RH?..Q0..dg..H1.".*.9N!.+GRI.......@..2w^....C-J>...+..ea.z.. A-X9.e$....#I...N.$iU...)6t$+.....Te....B7 1..bB.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 12:02:02], progressive, precision 8, 1420x1082, components 3
Category:	dropped
Size (bytes):	42237
Entropy (8bit):	7.182519169540984
Encrypted:	false
SSDEEP:	768:v0rmEN9TyI+Z00k1rrtxXrWY48KLz9FzcOuRtMiC1+Jvn:zIJ0C3WY48KtFwOuRSiPR
MD5:	232B19913357B4C657C182AEAB853992
SHA1:	F9D42EC577FAD344A249637BB0AFDF7F1F9D9171
SHA-256:	270838AC3C0E56430D40E9BA072A11C7212B45583840CF3B938C111D9748B98A
SHA-512:	8646D8764F0C86BFCF367BF682454B6B9B04B1E2105360DC6CB5DFFBCD44A843423A6164196D06B9393802035E692766D7C4C0408363EC30B70924922E5AFA55
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..II...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 12:02:02.....................................:...........................................&...(.......................................H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...I%}.RI$...I$.$.$..d.IJI%c.............$.e .h..J.v5Tl5.. ....T"A..(..I$.Z..$...I$.....I%}.RI&IK.I$...I%) . .I:.5%%{.z{_.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153207
Entropy (8bit):	5.543693145362615
Encrypted:	false
SSDEEP:	1536:0ni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:4qM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	2609A64DE5BF4C9822B604B3B4166059
SHA1:	17A8C4743EB499BC76571945CDAEF29D1A32A7B0
SHA-256:	FC16D108E957833C3DE8065818A6DC11EEFAC53A0D726A8ADF6CE5D13F7738FD
SHA-512:	B28DCBFC41E231FD4E108E853589EA7B0B97241DBE01A9AAF79D97C436F545F1CAFEFDF8192C55E6ECA76D07E19171F232D3556F8AB9F314F0D3008840EB0638
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return function(){re

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	214519
Entropy (8bit):	5.906193140023946
Encrypted:	false
SSDEEP:	1536:cHGBkY+5UPEKaTV3Xv5H3nvNj8FBw1H7V8HHYAfuq0ciAIR4MJT0cKgrjgXrjETq:cv/xwBcyH/fuq0N6fcSbhgyTbDQ5W
MD5:	4D34395F5FC4601249FC0ADD1149B75B
SHA1:	525379A580FE74AD70FD218FFFC1E57289B931AA
SHA-256:	7738C8373A5B87AA8281BDC4960DE5026717881C83DF2666093718CA5AFFA444
SHA-512:	E1944C2C7B56777B4D4837ECE50F023919E7E7ECD296B8555E719BEDFC46E179987AEF67FF5E662F72DC98EAC6B0DE513C31A889EC49E1F2D3275EADAD568EF5
Malicious:	false
Reputation:	low
Preview:	(()=>{var __webpack_modules__={1424:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{"use strict";eval("__webpack_require__.r(__webpack_exports__);\n/* harmony export / __webpack_require__.d(__webpack_exports__, {\n/ harmony export / \"default\": () => (__WEBPACK_DEFAULT_EXPORT__)\n/ harmony export / });\n/ harmony import / var _helpers_GTMHelper__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(9796);\n/ harmony import / var _helpers_GTMHelper__WEBPACK_IMPORTED_MODULE_0___default = /#__PURE__/__webpack_require__.n(_helpers_GTMHelper__WEBPACK_IMPORTED_MODULE_0__);\n/ harmony import / var _helpers_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(1052);\n/ harmony import / var _helpers_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1___default = /#__PURE__/__webpack_require__.n(_helpers_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1__);\n/ harmony import / var _helpers_Debounce__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(6652);\n/ har

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29400)
Category:	downloaded
Size (bytes):	29802
Entropy (8bit):	5.245806072418599
Encrypted:	false
SSDEEP:	768:/veaVfq2uGhc6eIRE2yNQ4iyHuqpp0L0pvj8vCwF3Cn:/5VfqpGvPqZWyNf0L0pvjWCwF32
MD5:	FCFF8644D2012C95B22B7A521DA0C2DD
SHA1:	6250E5B45FE3EA26E0F1B17C9AA576C9F5AFA5D3
SHA-256:	420514B11077554F1CBC0425327EA7301D930BDD5C01DDA9BE6FAF4FD1927D19
SHA-512:	4BC35067AF2BA6F3E345F447AF34125B88FEB54A71A6B090AF899A343F9A64E0C5729F6C1C302431DF74CE38A5632428F05640FE80E07FE843DFE342F72C35A3
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin_git/resources/public/JavaScripts/splide.min.js?1724921946
Preview:	function r(n,t){for(var i=0;i<t.length;i++){var r=t[i];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(n,r.key,r)}}function Jt(n,t,i){t&&r(n.prototype,t),i&&r(n,i),Object.defineProperty(n,"prototype",{writable:!1})}./!. Splide.js. * Version : 4.1.4. * License : MIT. * Copyright: 2022 Naotoshi Fujita. */.var n,t;n=this,t=function(){"use strict";var v="(prefers-reduced-motion: reduce)",G=4,rn=5,r={CREATED:1,MOUNTED:2,IDLE:3,MOVING:G,SCROLLING:rn,DRAGGING:6,DESTROYED:7};function D(n){n.length=0}function o(n,t,i){return Array.prototype.slice.call(n,t,i)}function R(n){return n.bind.apply(n,[null].concat(o(arguments,1)))}function on(){}var p=setTimeout;function h(n){return requestAnimationFrame(n)}function u(n,t){return typeof t===n}function un(n){return!c(n)&&u("object",n)}var e=Array.isArray,x=R(u,"function"),C=R(u,"string"),en=R(u,"undefined");function c(n){return null===n}function m(n){try{return n instanceof(n.ownerDocument.default

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 477 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68061
Entropy (8bit):	7.991826692964678
Encrypted:	true
SSDEEP:	1536:3xKkzKqx+cdA9KhAjMt4v7KnCkGaSNTOW7ou9jHRcB1WO:4kh/A4AjMtb93un7outuQO
MD5:	B125DC28311A0C2BBE52C81E2B448DD6
SHA1:	571E1CCCDC8514618AD14D2822C2B9D39AD50B75
SHA-256:	678F9D972EFD3371793E158BA103863F55B38A40A89067CD9D476717A4E86801
SHA-512:	DADD0DD9460DE525488C0C02900AEA17F1F903019215CD979215F23EBC335EF912F6A0BACFA544E31672A4B4E280974E6BE7D4775C109CE59352A8C3C2BCA58A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............Ru....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:F9295479158111E8A9F9C70B84CCAA81" xmpMM:DocumentID="xmp.did:F929547A158111E8A9F9C70B84CCAA81"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F9295477158111E8A9F9C70B84CCAA81" stRef:documentID="xmp.did:F9295478158111E8A9F9C70B84CCAA81"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>j.....PIDATx..}..\U...No.[6.M.....@."% .X@..D..E..>..\|....C\|"...t...'......l.uvz...w.3;......0..;.{....?-I..e..

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpmdgyjxbt", last modified: Tue Sep 17 11:16:30 2024, max compression, original size modulo 2^32 4399
Category:	dropped
Size (bytes):	1695
Entropy (8bit):	7.883854507468435
Encrypted:	false
SSDEEP:	48:XzRsRSYn645e0oei9YyDKErV/uPOxuxQYnyHfs0:Vs0Y645y9PbhxuDn0
MD5:	B541F7BDEDF66BD5EAA04711DF6F0240
SHA1:	5AA0ED79236EE16D38FFA76225484B87D29C532E
SHA-256:	A2785C8FB44AE2D0868DF3753D418A2D66348057FEA9D6AC509B5D4D387ED741
SHA-512:	C38F06D7FD5592CA1288A09DEE20EBC7A5EB3A9D7C1124C83C0C91D66B895B77105EAF185A9F2BF3C654F299CDAF58430BE946FA2BFB6A9DE035FE148E8ACEB2
Malicious:	false
Reputation:	low
Preview:	.....e.f..tmpmdgyjxbt..Xmo.:..~.EAs.Ds......h.#...it5j.b.. ..4.}....B;..>Il....[.ZGR'.......%T...5..B..K...P. ..%a..O..d.B..}.b.1x...,.b`..;`#...1...l....z..7..x.p.^......t..U....}..\E~...OU..yL..Y}..#..,s...H....S..C...$.&h...Y~.... s..2..!.......W.....:f........O.O....:.B./.:.4.._......g..l....>.0.2.q.D.(.)[9...5.Jx........D.E..b.v.J...n.......\|N.=.oj.`./-..z...x......H.\..c.......<uFf.>]Z.....4_Dr7..:R\|<.`&Q..../..M...l...\|#.X.=H.a..X...a..v.i]...`.(..atM+.....j.....Z..:..E..A..3.9.y...'w.....0.r.9..L.>...9&...x...k.B.:HL..hx....,\|......^GZG+..Tk6."5=.x3X..G.27.Cm...2...t.#........].+-.z.q.n...k...X.9.![c.....".M....q\+K!..\....[i..h..&......m3..ek.q.!..]..%$.\|...6......=z...\|.D......7.....^... [h..CsJ.9.t\....j...D..Pd@ ....,.rd=.rq.).....m..D..b.# ......-..k..X)....&.V.8...BVn...v.uy.{.?....o.2..?..5....4...RH?..Q0..dg..H1.".*.9N!.+GRI.......@..2w^....C-J>...+..ea.z.. A-X9.e$....#I...N.$iU...)6t$+.....Te....B7 1..bB.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	620
Entropy (8bit):	5.455520614126619
Encrypted:	false
SSDEEP:	12:TMHdPhRi/nzVV/KYf3nS31PHqgaPjW2K5v/bMtW2I0C24kAXKt9:2dzAjLf3S5Kg2K53bUW2bh4kAS
MD5:	38DC034A6892121319F8A432898F3CA2
SHA1:	E417E2636A04712260F2D5E5A799069F8E9036EC
SHA-256:	EB1677D0DED69FFBBC182C79EBA2F2E33E6F13D719BF4EB4F18F1F7ED62DFD4F
SHA-512:	EAAE9941ACB8D758E092ADA53679EB3DD8B0E9853FD3B26871400609A69C22CB4FBC588DB9D49D8648F75411B248A3E58B73213AEBCD35DBF49BC83C3BC02CC4
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/images/legacy/images/icons/icn-check-blue.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 79.5 79.5" style="enable-background:new 0 0 79.5 79.5;" xml:space="preserve">.<style type="text/css">...st0{fill:#0061AA;}.</style>.<g>..<path class="st0" d="M39.8,0C17.8,0,0,17.8,0,39.8c0,22,17.8,39.8,39.8,39.8c22,0,39.8-17.8,39.8-39.8C79.5,17.8,61.7,0,39.8,0z... M34.1,58.5L15.4,39.8l7.5-7.5l11.2,11.2L56.6,21l7.5,7.5L34.1,58.5z"/>.</g>.</svg>.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 11:29:28], progressive, precision 8, 1420x1082, components 3
Category:	dropped
Size (bytes):	36978
Entropy (8bit):	6.9636627771866975
Encrypted:	false
SSDEEP:	768:kSkp0pOrckp0psEsL000000000000000000002qWQ7jX/zG0OHuc45UV5hlBFroR:VI0ppI0pshtWQ7jX/oHL425hlBq
MD5:	34728207D8866591537B004617EBC934
SHA1:	C2349D2DA5E93B32B8B37DE746B895D4355DA876
SHA-256:	417E432A47F7DF09B95A50DD64EA392F008F3A3FE64389234D221FB59EF14F20
SHA-512:	B8300A4C33D067DF0E1D060DD03126E377F036266BE4D73D0D3A6AC9898B6E0CDC2B72A41D37C3DA68D3372BADA77CA70FCAEDA1360B3522D9E28BB838C57BC0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..II*...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 11:29:28.....................................:...........................................&...(.......................................H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...I%}.RI'k\..0K...)d...cc.$.....R..G......L.a.a.g9%..6......"...<_......<U....Ii~....x....2......"....{3.sRZ_.(...?.)~.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (12714)
Category:	downloaded
Size (bytes):	25230
Entropy (8bit):	5.479635782876721
Encrypted:	false
SSDEEP:	384:2ni0Zfaxi4UNsQ4M0CnKbllXCozHy2YLlukhOl:2i6ai4UNJYl/WhLAl
MD5:	BFE66298967A2AD927EFE2FCA2A65A7D
SHA1:	4C8E739730291777BA03E7E83A3ADC338FCB366B
SHA-256:	6AFC710E352DCE2E551CB41EFC2A06B7B38BAB7B19C5A0B2FA31AD2F085CD4BB
SHA-512:	20FC8F0C54A0E8A167A16CE0DADB35A24A0B8C6FA23838E13DDB8A623A566B902F52A0CFD877A6CFF0831C5A672CE4E76D1B871C15197E802F5C17F67A98CE32
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3Df9bcb952ac981036%3AT%3D1727736043%3ART%3D1727736043%3AS%3DALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNzImdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Online%20Personal%20Banking&afdt=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=4151727740856308&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727740856310&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1227&frm=0&uio=-&cont=ab-default&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%253D%26query%3DOnline%2BPersonal%2BBanking%26afdToken%3DChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4%26pcsa%3Dfalse%26nb%3D0
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1520 x 500, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	537573
Entropy (8bit):	7.988877951560557
Encrypted:	false
SSDEEP:	12288:orYcqGIpRhLSLl0wrBVFH6aLHx7QZVemCG:xGIpRhMjrBVXHGV3CG
MD5:	2CA55CFD34932B173AFC0805F28AEACE
SHA1:	E8CEF798BF4B66E28ABD892F0303BF6458EFB43B
SHA-256:	83F14346B68DC3C90039B7331720DE1EDB570485320252332023EBFD0C4B4074
SHA-512:	7DD6274C9A8403A3D9CBBF9B62B00C5080C6DFDAE73E97DDD62DF0628453069DF5C12B54259CB1B1621C31B526596F9533F279390A05619F66533EABE2740BBE
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/user_upload/park-domains_bild.png
Preview:	.PNG........IHDR.............r..r....pHYs.................sRGB.........gAMA......a...3zIDATx...I.mK.&......{/"#..YDU...j. ..A@....p .......8.....@.4. ...e.........w......kYo.{.........9g....w.........$..D".H$..D".H$..D"....*$..D".H$..D".H$..D"....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$..D".....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$..D".....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$..D".....~".H$..D".H$..D".H$.. ..O$..D".H$..D".H$..D..D...D".H$..D".H$..D".H\|.H.?.H$..D".H$..D".H$..o.I.'..D".H$..D".H$..D".."..D".H$..D".H$..D".H$.A$..H$..D".H$..D".H$...7.$...D".H$..D".H$

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:10 12:02:02], progressive, precision 8, 1420x1082, components 3
Category:	downloaded
Size (bytes):	42237
Entropy (8bit):	7.182519169540984
Encrypted:	false
SSDEEP:	768:v0rmEN9TyI+Z00k1rrtxXrWY48KLz9FzcOuRtMiC1+Jvn:zIJ0C3WY48KtFwOuRSiPR
MD5:	232B19913357B4C657C182AEAB853992
SHA1:	F9D42EC577FAD344A249637BB0AFDF7F1F9D9171
SHA-256:	270838AC3C0E56430D40E9BA072A11C7212B45583840CF3B938C111D9748B98A
SHA-512:	8646D8764F0C86BFCF367BF682454B6B9B04B1E2105360DC6CB5DFFBCD44A843423A6164196D06B9393802035E692766D7C4C0408363EC30B70924922E5AFA55
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/fileadmin/user_upload/Park_Domains/Domain-Parking.jpg
Preview:	......JFIF.....H.H......Exif..II...........................b...........j...(...........1.......r...2...........i....................'.......'..Adobe Photoshop CS4 Windows.2016:08:10 12:02:02.....................................:...........................................&...(.......................................H.......H.............JFIF.....H.H......Adobe_CM......Adobe.d.................................................................................................................................................z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...I%}.RI$...I$.$.$..d.IJI%c.............$.e .h..J.v5Tl5.. ....T"A..(..I$.Z..$...I$.....I%}.RI&IK.I$...I%) . .I:.5%%{.z{_.

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	25066
Entropy (8bit):	3.729531622434699
Encrypted:	false
SSDEEP:	384:NNQFuqx0sUTmVC557hGpcn6ZF04O3iNtCEkusgLPOcP1nHR4ZHx/B+spYPn+Hz5H:NqsqxEToCu8uF0lixLLWcRHyZp51
MD5:	F55C5F0057D84AA4EEEDAB2A8F4D558C
SHA1:	EDF55FA3D61D93E3EB7EB085F77890B752EBA049
SHA-256:	17CF6709088D4FF6D398CDE251F6394C88AB3CD1D2C3D1FFBE3357A6C54BDD2E
SHA-512:	B346380F6448BF2D3140BA49A71E58B03928F33BADBF29009EFBFF0E5DA0360F56FD53F36666AF56C26F74AF3240AB919E35AE108EA1088E4134F1DCA9F350F4
Malicious:	false
Reputation:	low
Preview:	<svg width="250" height="65" viewBox="0 0 250 65" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M80.1996 37.4998H88.9245V0H80.1996V11.5749C79.1612 11.0678 78.0925 10.6253 76.9996 10.2499C75.7027 9.86294 74.3524 9.6857 72.9996 9.72494C71.3876 9.74368 69.7966 10.0925 68.3246 10.7499C66.8114 11.3824 65.4547 12.338 64.3496 13.5499C63.1559 14.8902 62.2232 16.4419 61.5997 18.1249C60.9097 20.0921 60.5712 22.1654 60.5997 24.2499C60.4075 27.9197 61.4553 31.5476 63.5746 34.5498C64.4907 35.7777 65.6893 36.7665 67.0689 37.4323C68.4485 38.0982 69.9684 38.4215 71.4996 38.3748C73.0443 38.4016 74.5775 38.1035 75.9996 37.4998C77.5082 36.771 78.9192 35.8555 80.1996 34.7748V37.4998ZM80.1996 16.7999V29.9998V30.1248C79.4812 30.6472 78.6892 31.06 77.8496 31.3498C77.047 31.6376 76.2021 31.7897 75.3496 31.7998C74.5255 31.8754 73.6954 31.7512 72.9295 31.4379C72.1636 31.1246 71.4844 30.6313 70.9496 29.9998C69.8787 28.2466 69.3969 26.1966 69.5746 24.1499C69.4535

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 230x101, components 3
Category:	downloaded
Size (bytes):	30229
Entropy (8bit):	7.6614619332375105
Encrypted:	false
SSDEEP:	768:tF9RpiaTsfr3rZkGyvKb5Ywooend03umCI:tFX4aTsfr3rZk3Sbmw8mV
MD5:	F90B38EFE028D24F5514E9CF2203EED9
SHA1:	E11744A0C9753531F0A27B63AA64F5C6F3FA635B
SHA-256:	DAB36F28B5807E060A190A44401CBDE97E5F4FBC999692B7E5B75E29F170F82F
SHA-512:	3D46111096365E683637EE5F9EBB3F37E53A4B81DBB219B6E05722E46C09CE90BF2A5772324775F61FA0CE8E1FB6D5003360B5F2615C0BEF04A63B0263D9F619
Malicious:	false
Reputation:	low
URL:	https://cdn.sedo.com/components/zkLxDsbw1hz2/48d68b70659b28905e87.jpg
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......`.......`.................0210....................0100................................e...........http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x='adobe:ns:meta/'>.<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-01-22</Attrib:Created>. <Attrib:ExtId>ae82471a-0c80-42b3-b7d8-ecbb7f494ea5</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>. </Attrib:Ads>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>2024 ICA Badges (230 x 101 px) - ICA-2024-Platinum</r

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 00:40:29.950989008 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 1, 2024 00:40:30.560359001 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 1, 2024 00:40:31.763505936 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 1, 2024 00:40:32.607264042 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 1, 2024 00:40:32.607292891 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 1, 2024 00:40:32.794712067 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 1, 2024 00:40:34.169718981 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 1, 2024 00:40:38.189990044 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 1, 2024 00:40:38.732333899 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 1, 2024 00:40:39.087255955 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 1, 2024 00:40:39.544336081 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 1, 2024 00:40:39.664066076 CEST	49707	80	192.168.2.7	162.255.119.21
Oct 1, 2024 00:40:39.664403915 CEST	49708	80	192.168.2.7	162.255.119.21
Oct 1, 2024 00:40:39.668956041 CEST	80	49707	162.255.119.21	192.168.2.7
Oct 1, 2024 00:40:39.669017076 CEST	49707	80	192.168.2.7	162.255.119.21
Oct 1, 2024 00:40:39.669157982 CEST	49707	80	192.168.2.7	162.255.119.21
Oct 1, 2024 00:40:39.672096014 CEST	80	49708	162.255.119.21	192.168.2.7
Oct 1, 2024 00:40:39.672581911 CEST	49708	80	192.168.2.7	162.255.119.21
Oct 1, 2024 00:40:39.676244020 CEST	80	49707	162.255.119.21	192.168.2.7
Oct 1, 2024 00:40:40.146595001 CEST	80	49707	162.255.119.21	192.168.2.7
Oct 1, 2024 00:40:40.208583117 CEST	49709	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:40.213617086 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:40.213722944 CEST	49709	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:40.213972092 CEST	49709	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:40.219259024 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:40.247637987 CEST	49707	80	192.168.2.7	162.255.119.21
Oct 1, 2024 00:40:40.880218029 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:40.880245924 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:40.880256891 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:40.880269051 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:40.880280018 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:40.880290031 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:40.880307913 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:40.880306959 CEST	49709	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:40.880321980 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:40.880373955 CEST	49709	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:40.953162909 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:40.953201056 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:40.953444958 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:40.953732014 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:40.953747988 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:40.969430923 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:40.975409031 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:40.975466013 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:40.975541115 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:40.977668047 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:40.978029013 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:40.978048086 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:40.982567072 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:40.982647896 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:40.983102083 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:40.987847090 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.020639896 CEST	49709	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:41.033027887 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 1, 2024 00:40:41.443320990 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.443356037 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.443367004 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.443377018 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.443433046 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.443444014 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.443454027 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.443466902 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.443530083 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.443555117 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.443555117 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.443571091 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.446902037 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.448380947 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.448427916 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.448438883 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.448450089 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.448497057 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.448524952 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.530102015 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.574522018 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.606348991 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.617048979 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.648478985 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.650362015 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.650389910 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.650497913 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.650506973 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.651650906 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.651669025 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.651715994 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.651772976 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.651779890 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.651897907 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.655250072 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.655320883 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.656090975 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.656153917 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.656840086 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.656852007 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.657788992 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.657799006 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.700445890 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.700449944 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.761374950 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.761395931 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.761403084 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.761457920 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.761468887 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.761481047 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.761535883 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.761538982 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.761544943 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.761596918 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.847135067 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.847145081 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.847203970 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.847225904 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.847235918 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.847255945 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.847280025 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.847285986 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.847307920 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.848504066 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.848543882 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.848576069 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.848583937 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.848592997 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.848628998 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.848654032 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.852583885 CEST	49715	443	192.168.2.7	172.217.18.4
Oct 1, 2024 00:40:41.852622986 CEST	443	49715	172.217.18.4	192.168.2.7
Oct 1, 2024 00:40:41.852710009 CEST	49715	443	192.168.2.7	172.217.18.4
Oct 1, 2024 00:40:41.854082108 CEST	49715	443	192.168.2.7	172.217.18.4
Oct 1, 2024 00:40:41.854098082 CEST	443	49715	172.217.18.4	192.168.2.7
Oct 1, 2024 00:40:41.892338991 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.892463923 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.892522097 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.892549992 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.892622948 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.892674923 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.892683029 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.898099899 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.898165941 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.898178101 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.898431063 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.898484945 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.898489952 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.899983883 CEST	49712	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:41.899998903 CEST	443	49712	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:41.903465986 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.903527021 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.903533936 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.911360025 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.911417961 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.911429882 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.952821970 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.978900909 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.981509924 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.981576920 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.981596947 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.981627941 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.981678009 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.989113092 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.993223906 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:41.993299007 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:41.993346930 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.000703096 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.000772953 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.000792980 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.000818014 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.000863075 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.006673098 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.019984007 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.020055056 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.020092010 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.020179033 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.020227909 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.020241976 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.023766041 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.023813009 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.023819923 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.029748917 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.029813051 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.029820919 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.029845953 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.029891014 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.035620928 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.041656971 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.041728020 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.041764021 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.041815042 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.041867971 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.041883945 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.064596891 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.064683914 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.064687014 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.064737082 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.064815998 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.064829111 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.067362070 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.067423105 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.067431927 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.072716951 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.072784901 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.072813988 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.078619003 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.078695059 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.078762054 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.084517956 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.084573984 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.084585905 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.090393066 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.090461016 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.090483904 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.096174002 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.096230984 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.096259117 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.101543903 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.101591110 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.101600885 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.103777885 CEST	49716	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:42.103822947 CEST	443	49716	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:42.103885889 CEST	49716	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:42.106689930 CEST	49716	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:42.106703043 CEST	443	49716	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:42.106755972 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.106806993 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.106836081 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.112123013 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.112179995 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.112210035 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.117760897 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.117832899 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.117868900 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.122646093 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.122710943 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.122761011 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.126923084 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.126980066 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.127013922 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.131217003 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.131273985 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.131303072 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.135425091 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.135482073 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.135509968 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.139672995 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.139725924 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.139744043 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.143569946 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.143624067 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.143654108 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.147505999 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.147557974 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.147584915 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.151315928 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.151371002 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.151405096 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.155500889 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.155553102 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.155581951 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.159024000 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.159074068 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.159100056 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.161565065 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.161612034 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.161628962 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.163733959 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.163763046 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.163805008 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.163829088 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.163868904 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.166722059 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.168369055 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.168400049 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.168426991 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.168454885 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.168494940 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.171216011 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.173099041 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.173126936 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.173145056 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.173175097 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.173217058 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.175335884 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.177670956 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.177700043 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.177715063 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.177738905 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.177783012 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.180387020 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.182524920 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.182560921 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.182573080 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.182605028 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.182660103 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.184652090 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.186929941 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.186981916 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.187004089 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.187033892 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.187071085 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.189335108 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.191660881 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.191690922 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.191711903 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.191736937 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.191786051 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.193860054 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.196441889 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.196516991 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.196526051 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.196547985 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.196587086 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.196598053 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.196671963 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.196717978 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.197834969 CEST	49713	443	192.168.2.7	142.250.185.132
Oct 1, 2024 00:40:42.197869062 CEST	443	49713	142.250.185.132	192.168.2.7
Oct 1, 2024 00:40:42.218885899 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 1, 2024 00:40:42.218909979 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 1, 2024 00:40:42.404268026 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 1, 2024 00:40:42.480499029 CEST	443	49715	172.217.18.4	192.168.2.7
Oct 1, 2024 00:40:42.524347067 CEST	49715	443	192.168.2.7	172.217.18.4
Oct 1, 2024 00:40:42.727446079 CEST	49715	443	192.168.2.7	172.217.18.4
Oct 1, 2024 00:40:42.727471113 CEST	443	49715	172.217.18.4	192.168.2.7
Oct 1, 2024 00:40:42.728785038 CEST	443	49715	172.217.18.4	192.168.2.7
Oct 1, 2024 00:40:42.728857040 CEST	49715	443	192.168.2.7	172.217.18.4
Oct 1, 2024 00:40:42.744534016 CEST	49715	443	192.168.2.7	172.217.18.4
Oct 1, 2024 00:40:42.744635105 CEST	443	49715	172.217.18.4	192.168.2.7
Oct 1, 2024 00:40:42.746562958 CEST	49718	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:42.746608973 CEST	443	49718	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:42.746663094 CEST	49718	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:42.747020006 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:42.747039080 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:42.747133970 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:42.747816086 CEST	49709	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:42.748506069 CEST	49718	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:42.748521090 CEST	443	49718	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:42.749072075 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:42.749082088 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:42.752604008 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:42.755426884 CEST	443	49716	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:42.793768883 CEST	49716	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:42.793803930 CEST	443	49716	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:42.794338942 CEST	49715	443	192.168.2.7	172.217.18.4
Oct 1, 2024 00:40:42.794361115 CEST	443	49715	172.217.18.4	192.168.2.7
Oct 1, 2024 00:40:42.795006037 CEST	443	49716	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:42.795202017 CEST	49716	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:42.799871922 CEST	49716	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:42.799945116 CEST	443	49716	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:42.841532946 CEST	49715	443	192.168.2.7	172.217.18.4
Oct 1, 2024 00:40:42.841537952 CEST	49716	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:42.841552019 CEST	443	49716	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:42.888267994 CEST	49716	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:42.948451042 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:42.998861074 CEST	49709	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:43.086889029 CEST	49720	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:43.086934090 CEST	443	49720	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:43.088532925 CEST	49720	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:43.090070009 CEST	49720	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:43.090082884 CEST	443	49720	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:43.383001089 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.383296013 CEST	443	49718	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.383321047 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.383347034 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.383487940 CEST	49718	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.383514881 CEST	443	49718	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.384593010 CEST	443	49718	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.384697914 CEST	49718	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.384834051 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.384943008 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.385071993 CEST	49718	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.385135889 CEST	443	49718	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.385490894 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.385576010 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.385588884 CEST	49718	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.385596991 CEST	443	49718	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.385797024 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.385803938 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.441404104 CEST	49718	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.441421986 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.567579031 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:43.567992926 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:43.568036079 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:43.568167925 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:43.568563938 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:43.568592072 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:43.568634033 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:43.568644047 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:43.568898916 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:43.569658995 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:43.569670916 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:43.572374105 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:43.572679996 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:43.572984934 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:43.577836990 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:43.624814034 CEST	49726	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:43.629729033 CEST	80	49726	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:43.629842043 CEST	49726	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:43.630175114 CEST	49726	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:43.635027885 CEST	80	49726	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:43.648699045 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.648761988 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.648792028 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.648819923 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.648859024 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.648938894 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.648950100 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.649050951 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.654808998 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.654905081 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.655313015 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.655318975 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.661005974 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.661158085 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.661164999 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.665172100 CEST	443	49718	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.665230989 CEST	443	49718	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.665297985 CEST	443	49718	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.665326118 CEST	49718	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.665730953 CEST	49718	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.667218924 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.667363882 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.667365074 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.667581081 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.732140064 CEST	49719	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:43.732161999 CEST	443	49719	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:43.743076086 CEST	443	49720	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:43.743254900 CEST	49720	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:44.013556004 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 1, 2024 00:40:44.030237913 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.030273914 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.030296087 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.030312061 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.030322075 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.030333042 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.030344009 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.030342102 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.030375957 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.030397892 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.030410051 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.030421019 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.030441046 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.030441046 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.030486107 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.035433054 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.035474062 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.035485983 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.035495996 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.035542011 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.035542011 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.117733955 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.158711910 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.205764055 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.220664024 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.234198093 CEST	49720	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:44.234231949 CEST	443	49720	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:44.235203028 CEST	443	49720	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:44.249496937 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.280419111 CEST	80	49726	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:44.312438011 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.312572002 CEST	49720	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:44.366485119 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:44.366524935 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:44.366591930 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:44.367110968 CEST	49718	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:44.367140055 CEST	443	49718	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:44.368222952 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.368232965 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.368526936 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.368541002 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.369777918 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.369786024 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:44.369800091 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:44.369853973 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.371793985 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.371865988 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.372075081 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.372112989 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.372167110 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.376477003 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.376486063 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.420833111 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.436196089 CEST	49726	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:44.436305046 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.436316967 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.459237099 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.459613085 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.459969997 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.459979057 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.544401884 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.566545010 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.566569090 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.566591024 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.566615105 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.566631079 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.566632032 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.566647053 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.566673040 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.566679955 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.566679955 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.566732883 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.566732883 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.573283911 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.573326111 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.573363066 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.573384047 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.573390961 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.573401928 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.573508978 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.576565027 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.576597929 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.576627970 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.576638937 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.576692104 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.576699972 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.580533981 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.580581903 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.580588102 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.586683035 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.586730003 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.586735964 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.602339029 CEST	49720	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:44.634289026 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.643439054 CEST	443	49720	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:44.652856112 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.652884007 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.652925014 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.652942896 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.652959108 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.653131008 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.653137922 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.653178930 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.655271053 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.655288935 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.655327082 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.655334949 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.655340910 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.655394077 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.655400991 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.655435085 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.661667109 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.661736012 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.661782980 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.661792994 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.664280891 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.664313078 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.664347887 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.664355040 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.664397001 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.664613962 CEST	49725	443	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:44.664633036 CEST	443	49725	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:44.673816919 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.677033901 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.677062035 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.677077055 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.677086115 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.677128077 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.684866905 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.699915886 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.699951887 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.699961901 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.699971914 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.700026035 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.700026989 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.700038910 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.700077057 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.701375008 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.709204912 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.709249973 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.709259987 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.713660002 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.713690042 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.713709116 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.713716030 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.713764906 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.718873024 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.718933105 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.718981028 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.718988895 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.750140905 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.750184059 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.750196934 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.750212908 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.750252962 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.750261068 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.750271082 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.750313997 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.750313997 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.750327110 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.750372887 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.752618074 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.755789995 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.755841970 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.755850077 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.762077093 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.762121916 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.762130022 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.767646074 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.767832041 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.767839909 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.773484945 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.773530006 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.773536921 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.778733015 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.778867006 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.778873920 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.786030054 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.786082983 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.786091089 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.793334007 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.793394089 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.793404102 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.794914007 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.795506001 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.795514107 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.795937061 CEST	443	49720	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:44.796386003 CEST	443	49720	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:44.796447039 CEST	49720	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:44.799668074 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.799715996 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.799722910 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.805239916 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.805288076 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.805294991 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.808633089 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.808686972 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.808695078 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.813041925 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.813097000 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.813106060 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.817531109 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.817584991 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.817593098 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.821093082 CEST	443	49701	104.98.116.138	192.168.2.7
Oct 1, 2024 00:40:44.821197033 CEST	49701	443	192.168.2.7	104.98.116.138
Oct 1, 2024 00:40:44.821208000 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.821319103 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.821326971 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.825007915 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.825100899 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.825108051 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.828810930 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.828912973 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.828921080 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.835319996 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.835721970 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.835728884 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.839766979 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.839963913 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.839970112 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.843008995 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.843038082 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.843080997 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.843090057 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.843142986 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.847254992 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.849456072 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.849488020 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.849502087 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.849510908 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.849674940 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.850399017 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.851732016 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.851763010 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.851793051 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.851800919 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.851855993 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.852612019 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.853270054 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.854315042 CEST	49720	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:44.854340076 CEST	443	49720	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:44.854376078 CEST	49720	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:44.854382992 CEST	443	49720	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:44.854548931 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.854583979 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.854600906 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.854609966 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.854665995 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.860049963 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.860116959 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.860146999 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.860171080 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.860179901 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.860299110 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.860686064 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.864639044 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.864662886 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.864681959 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.864691973 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.864788055 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.864906073 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.867391109 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.867458105 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.867465973 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.869539022 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.869569063 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.869585991 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.869594097 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.869672060 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.871803045 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.874655962 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.874713898 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.874735117 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.874742031 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.874809027 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.874855995 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.881290913 CEST	49724	443	192.168.2.7	142.250.184.228
Oct 1, 2024 00:40:44.881314993 CEST	443	49724	142.250.184.228	192.168.2.7
Oct 1, 2024 00:40:44.949589968 CEST	49728	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:44.949626923 CEST	443	49728	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:44.949727058 CEST	49728	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:44.951263905 CEST	49728	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:44.951270103 CEST	443	49728	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:45.028017998 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.028919935 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.028945923 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.029304981 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.029751062 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.029820919 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.030018091 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.065709114 CEST	80	49708	162.255.119.21	192.168.2.7
Oct 1, 2024 00:40:45.065854073 CEST	49708	80	192.168.2.7	162.255.119.21
Oct 1, 2024 00:40:45.071438074 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.311904907 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.312093019 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.312181950 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.312186003 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.312217951 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.312267065 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.312299013 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.317531109 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.317616940 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.317617893 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.317640066 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.317699909 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.317712069 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.324392080 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.324454069 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.324467897 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.330116034 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.330219030 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.330226898 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.398726940 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.398804903 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.398821115 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.401415110 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.401473999 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.401482105 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.407037020 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.407118082 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.407124043 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.413434029 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.413503885 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.413510084 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.420716047 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.420770884 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.420775890 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.426312923 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.426424026 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.426429033 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.432121992 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.432173967 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.432199001 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.437999964 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.438066006 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.438080072 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.444288969 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.444369078 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.444375992 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.450334072 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.450465918 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.450472116 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.455652952 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.455710888 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.455718040 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.461591959 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.461622953 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.461682081 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.461688995 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.461747885 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.467365980 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.486085892 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.486133099 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.486155033 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.486164093 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.486222982 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.486999989 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.492949963 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.493011951 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.493020058 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.493036985 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.493078947 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.500005007 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.504451036 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.504504919 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.504509926 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.510487080 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.510521889 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.510541916 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.510546923 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.510607004 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.516150951 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.521776915 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.521836996 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.521842957 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.527115107 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.527182102 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.527187109 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.531945944 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.532052040 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.532110929 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.532116890 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.532347918 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.536638021 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.541663885 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.541719913 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.541726112 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.547327042 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.547396898 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.547403097 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.552217007 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.552290916 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.552297115 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.557173967 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.557244062 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.557250023 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.563031912 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.563126087 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.563184977 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.563190937 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.563231945 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.567471981 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.572320938 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.572357893 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.572379112 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.572385073 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.572611094 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.578418016 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.583667994 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.583698034 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.583717108 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.583722115 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.583762884 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.587426901 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.591367960 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.591404915 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.591432095 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.591438055 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.591460943 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.591478109 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.593760967 CEST	49708	80	192.168.2.7	162.255.119.21
Oct 1, 2024 00:40:45.594729900 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.594778061 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.594789982 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.598900080 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.598982096 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.598992109 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.600478888 CEST	80	49708	162.255.119.21	192.168.2.7
Oct 1, 2024 00:40:45.604760885 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.604809046 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.604819059 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.607173920 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.607249975 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.607258081 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.609837055 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.609889984 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.609898090 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.613488913 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.613559008 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.613569021 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.615777016 CEST	443	49728	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:45.615856886 CEST	49728	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:45.618185997 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.618232965 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.618261099 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.618283987 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.618294954 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.618309975 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.620425940 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.620471954 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.620479107 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.623085976 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.623131037 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.623140097 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.625940084 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.625987053 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.625994921 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.628068924 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.628110886 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.628118992 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.628339052 CEST	49728	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:45.628356934 CEST	443	49728	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:45.628688097 CEST	443	49728	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:45.630230904 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.630317926 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.630325079 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.631227016 CEST	49728	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:45.632596016 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.632661104 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.632668018 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.636009932 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.636065006 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.636073112 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.636091948 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.636140108 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.636876106 CEST	49727	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.636890888 CEST	443	49727	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.675400019 CEST	443	49728	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:45.708411932 CEST	49730	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.708447933 CEST	443	49730	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.708547115 CEST	49730	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.709026098 CEST	49730	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:45.709038019 CEST	443	49730	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:45.777823925 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:45.777861118 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:45.778060913 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:45.778968096 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:45.778985023 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:45.939749956 CEST	443	49728	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:45.939817905 CEST	443	49728	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:45.939913034 CEST	49728	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:45.985038042 CEST	49728	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:45.985064030 CEST	443	49728	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:45.985091925 CEST	49728	443	192.168.2.7	184.28.90.27
Oct 1, 2024 00:40:45.985097885 CEST	443	49728	184.28.90.27	192.168.2.7
Oct 1, 2024 00:40:46.371195078 CEST	443	49730	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:46.371596098 CEST	49730	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:46.371608019 CEST	443	49730	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:46.372684002 CEST	443	49730	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:46.373569965 CEST	49730	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:46.373720884 CEST	443	49730	142.250.184.206	192.168.2.7
Oct 1, 2024 00:40:46.421247959 CEST	49730	443	192.168.2.7	142.250.184.206
Oct 1, 2024 00:40:46.454704046 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.461117983 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.461143017 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.462702036 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.462779045 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.463347912 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.463444948 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.463870049 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.463885069 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.516359091 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.736181021 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.736229897 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.736255884 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.736294031 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.736332893 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.736382961 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.736824036 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.742309093 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.742337942 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.742364883 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.742394924 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.742404938 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.742424011 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.745724916 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:46.748734951 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.748866081 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.748924017 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.752376080 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:46.755033016 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.755134106 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.755176067 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.759316921 CEST	49734	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:46.759360075 CEST	443	49734	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:46.759464025 CEST	49734	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:46.759588957 CEST	49735	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:46.759618998 CEST	443	49735	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:46.759685040 CEST	49735	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:46.764631033 CEST	49734	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:46.764648914 CEST	443	49734	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:46.766881943 CEST	49735	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:46.766895056 CEST	443	49735	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:46.825988054 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.827054977 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.827792883 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.827825069 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.827848911 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.827864885 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.827935934 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.831690073 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.838097095 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.838155985 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.838172913 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.838182926 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.838232040 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.848006010 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.862633944 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:46.862648010 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:46.862658978 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:46.862674952 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:46.862685919 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:46.862696886 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:46.862708092 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:46.862719059 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:46.862720013 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:46.862730026 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:46.862741947 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:46.862755060 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:46.862766981 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:46.862777948 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:46.862798929 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:46.862859011 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:46.863188982 CEST	80	49714	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:46.863339901 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.863393068 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.863424063 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.863424063 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.863455057 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.863475084 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.864866972 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.864902020 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.864914894 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.864923000 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.864960909 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.872473001 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.876707077 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.876744986 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.876760006 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.876769066 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.876810074 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.883357048 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.886472940 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.886511087 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.886538982 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.886548996 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.886609077 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.886643887 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.923949957 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.923995018 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.924022913 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.924055099 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.924099922 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.924108028 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.924402952 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.924433947 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.924447060 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.924453020 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.924494028 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.924500942 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.925411940 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.925461054 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.925470114 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.929608107 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.929661036 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.929682016 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.935236931 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.935302019 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.935326099 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.942697048 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.942753077 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.942780018 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.946314096 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.946376085 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.946392059 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.955096006 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.955157995 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.955194950 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.956851959 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.956906080 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.956924915 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.959549904 CEST	49714	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:46.962114096 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.962177038 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.962193966 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.967144966 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.967195034 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.967215061 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.971782923 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.971859932 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.971893072 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.976113081 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.976172924 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.976183891 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.980319023 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.980376005 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.980384111 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.988631964 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.988691092 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.988722086 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.991580963 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.991633892 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.991641998 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.997278929 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.997323990 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.997333050 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.999497890 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:46.999547958 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:46.999555111 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.001110077 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.001163006 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.001171112 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.003868103 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.003918886 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.003931999 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.007915020 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.007977962 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.007986069 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.020930052 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.020962954 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.021014929 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.021024942 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.021070957 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.021586895 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.023614883 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.023673058 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.023680925 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.026055098 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.026849031 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.026874065 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.026899099 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.028469086 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.028501987 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.030380011 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.030937910 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.030951023 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.031014919 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.031372070 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.033433914 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.033485889 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.033493996 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.034447908 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.034496069 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.034507036 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.038570881 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.038615942 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.038631916 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.038640976 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.038655043 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.038685083 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.043581963 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.043608904 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.043634892 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.043673038 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.043730021 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.044207096 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.044258118 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.044357061 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.044416904 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.044467926 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.044554949 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.044573069 CEST	443	49732	142.250.186.78	192.168.2.7
Oct 1, 2024 00:40:47.044588089 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.044691086 CEST	49732	443	192.168.2.7	142.250.186.78
Oct 1, 2024 00:40:47.404295921 CEST	443	49734	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.454567909 CEST	49734	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.454607010 CEST	443	49734	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.455249071 CEST	443	49734	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.455267906 CEST	443	49734	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.455321074 CEST	49734	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.455329895 CEST	443	49734	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.455369949 CEST	49734	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.455425024 CEST	49734	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.456032038 CEST	443	49734	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.462142944 CEST	49734	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.462219954 CEST	443	49734	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.462893963 CEST	49734	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.462903976 CEST	443	49734	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.499286890 CEST	443	49735	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.518196106 CEST	49735	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.518218994 CEST	443	49735	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.519460917 CEST	443	49735	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.519480944 CEST	443	49735	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.519526005 CEST	49735	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.519532919 CEST	443	49735	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.519587040 CEST	49735	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.520967960 CEST	443	49735	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.527595997 CEST	49735	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.527765989 CEST	443	49735	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.527976036 CEST	49735	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.527990103 CEST	443	49735	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.544404984 CEST	49734	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.558809042 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:47.565320015 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.660640955 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.660722971 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.660733938 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.660866976 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:47.661026955 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.661039114 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.661048889 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.661062002 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.661088943 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:47.661137104 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:47.661658049 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.661669970 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.661699057 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:47.661894083 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.661906004 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.661932945 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:47.662250996 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.662261963 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.662280083 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.662288904 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:47.662318945 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:47.662722111 CEST	80	49723	205.234.175.175	192.168.2.7
Oct 1, 2024 00:40:47.673350096 CEST	443	49734	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.673434019 CEST	443	49734	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.673491001 CEST	49734	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.716738939 CEST	49723	80	192.168.2.7	205.234.175.175
Oct 1, 2024 00:40:47.732611895 CEST	49735	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.780580997 CEST	443	49735	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.780673027 CEST	443	49735	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.780760050 CEST	49735	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.782147884 CEST	49734	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.782180071 CEST	443	49734	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.798855066 CEST	49735	443	192.168.2.7	172.217.18.1
Oct 1, 2024 00:40:47.798877954 CEST	443	49735	172.217.18.1	192.168.2.7
Oct 1, 2024 00:40:47.949116945 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:47.949666023 CEST	49709	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:47.962224007 CEST	49709	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:47.968971014 CEST	80	49709	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:48.146270990 CEST	49716	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:48.146867990 CEST	49737	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:48.146913052 CEST	443	49737	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:48.147052050 CEST	49737	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:48.147403955 CEST	49737	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:48.147416115 CEST	443	49737	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:48.184293032 CEST	49738	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:48.184387922 CEST	443	49738	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:48.184484005 CEST	49738	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:48.184860945 CEST	49739	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:48.184885979 CEST	443	49739	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:48.185048103 CEST	49739	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:48.187400103 CEST	443	49716	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:48.194427967 CEST	49738	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:48.194454908 CEST	443	49738	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:48.195018053 CEST	49739	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:48.195031881 CEST	443	49739	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:48.371612072 CEST	443	49716	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:48.371761084 CEST	443	49716	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:48.371831894 CEST	49716	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:48.732548952 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 1, 2024 00:40:48.795727015 CEST	443	49737	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:48.909322977 CEST	443	49738	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:48.926559925 CEST	443	49739	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.007416010 CEST	443	49737	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.007631063 CEST	49737	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:49.045026064 CEST	49738	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.045583010 CEST	49739	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.072395086 CEST	49739	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.072408915 CEST	443	49739	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.072779894 CEST	49738	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.072808981 CEST	443	49738	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.072913885 CEST	49737	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:49.072925091 CEST	443	49737	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.073026896 CEST	443	49739	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.073041916 CEST	443	49739	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.073077917 CEST	443	49739	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.073087931 CEST	49739	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.073095083 CEST	443	49739	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.073148012 CEST	49739	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.073327065 CEST	443	49738	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.073339939 CEST	443	49738	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.073364019 CEST	443	49738	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.073381901 CEST	49738	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.073398113 CEST	443	49738	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.073400974 CEST	443	49737	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.073451042 CEST	49738	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.073451042 CEST	49738	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.073780060 CEST	443	49739	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.074074030 CEST	443	49738	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.076106071 CEST	49739	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.076185942 CEST	443	49739	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.123528957 CEST	49737	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:49.123739004 CEST	443	49737	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.124680042 CEST	49738	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.124815941 CEST	443	49738	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.125972033 CEST	49739	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.125987053 CEST	443	49739	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.126039982 CEST	49737	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:49.126296043 CEST	49738	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.126308918 CEST	443	49738	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.171395063 CEST	443	49737	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.178880930 CEST	49739	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.178909063 CEST	49738	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.280806065 CEST	80	49726	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:49.280873060 CEST	49726	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:49.304455996 CEST	49726	80	192.168.2.7	91.195.240.19
Oct 1, 2024 00:40:49.305294991 CEST	49740	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:49.305346012 CEST	443	49740	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.305419922 CEST	49740	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:49.306005955 CEST	49740	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:49.306020021 CEST	443	49740	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.309305906 CEST	80	49726	91.195.240.19	192.168.2.7
Oct 1, 2024 00:40:49.309978962 CEST	49716	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:49.309988022 CEST	443	49716	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.310292959 CEST	443	49738	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.310440063 CEST	443	49738	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.310508966 CEST	49738	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.312474012 CEST	443	49739	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.312547922 CEST	443	49739	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.312596083 CEST	49739	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.319641113 CEST	49738	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.319669962 CEST	443	49738	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.321454048 CEST	49739	443	192.168.2.7	142.250.186.161
Oct 1, 2024 00:40:49.321474075 CEST	443	49739	142.250.186.161	192.168.2.7
Oct 1, 2024 00:40:49.323122978 CEST	443	49737	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.323210001 CEST	443	49737	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.323256016 CEST	49737	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:49.352727890 CEST	49737	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:49.352745056 CEST	443	49737	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.942770958 CEST	443	49740	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.943248987 CEST	49740	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:49.943274021 CEST	443	49740	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.943602085 CEST	443	49740	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.944495916 CEST	49740	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:49.944555044 CEST	443	49740	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:49.944739103 CEST	49740	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:49.987404108 CEST	443	49740	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:50.031858921 CEST	49740	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:50.031879902 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 1, 2024 00:40:50.233134031 CEST	443	49740	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:50.233216047 CEST	443	49740	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:50.233982086 CEST	49740	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:50.234005928 CEST	443	49740	142.250.185.110	192.168.2.7
Oct 1, 2024 00:40:50.234018087 CEST	49740	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:50.234040022 CEST	49740	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:50.234066010 CEST	49740	443	192.168.2.7	142.250.185.110
Oct 1, 2024 00:40:51.808506012 CEST	49743	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:51.808554888 CEST	443	49743	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:51.808706999 CEST	49743	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:51.809206963 CEST	49743	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:51.809211969 CEST	49744	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:51.809217930 CEST	443	49743	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:51.809262991 CEST	443	49744	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:51.809508085 CEST	49744	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:51.809508085 CEST	49744	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:51.809551954 CEST	443	49744	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.282979965 CEST	443	49744	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.283047915 CEST	443	49743	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.284791946 CEST	49743	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:52.284804106 CEST	443	49743	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.284976959 CEST	49744	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:52.285000086 CEST	443	49744	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.285896063 CEST	443	49743	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.286109924 CEST	443	49744	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.286170959 CEST	49743	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:52.286170959 CEST	49744	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:52.289536953 CEST	49743	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:52.289632082 CEST	443	49743	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.289908886 CEST	49743	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:52.290298939 CEST	49744	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:52.290396929 CEST	443	49744	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.335407019 CEST	443	49743	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.341249943 CEST	49744	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:52.341275930 CEST	443	49744	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.389713049 CEST	49744	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:52.392359018 CEST	443	49715	172.217.18.4	192.168.2.7
Oct 1, 2024 00:40:52.392436981 CEST	443	49715	172.217.18.4	192.168.2.7
Oct 1, 2024 00:40:52.393404007 CEST	49715	443	192.168.2.7	172.217.18.4
Oct 1, 2024 00:40:52.495475054 CEST	443	49743	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.498131037 CEST	49743	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:52.700584888 CEST	443	49743	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.700685978 CEST	443	49743	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.701423883 CEST	49743	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:52.701441050 CEST	443	49743	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:52.701467991 CEST	49743	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:52.701613903 CEST	49743	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:52.707686901 CEST	49715	443	192.168.2.7	172.217.18.4
Oct 1, 2024 00:40:52.707711935 CEST	443	49715	172.217.18.4	192.168.2.7
Oct 1, 2024 00:40:52.718874931 CEST	49745	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:52.718907118 CEST	443	49745	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:52.719021082 CEST	49745	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:52.721359015 CEST	49745	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:52.721369982 CEST	443	49745	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:53.177089930 CEST	443	49745	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:53.177650928 CEST	49745	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:53.177670002 CEST	443	49745	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:53.178668976 CEST	443	49745	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:53.178745031 CEST	49745	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:53.181720972 CEST	49745	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:53.181787968 CEST	443	49745	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:53.182259083 CEST	49745	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:53.182271957 CEST	443	49745	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:53.231590033 CEST	49745	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:53.608948946 CEST	443	49745	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:53.609054089 CEST	443	49745	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:53.609141111 CEST	49745	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:53.861310005 CEST	49745	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:53.861346006 CEST	443	49745	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:53.971724033 CEST	49701	443	192.168.2.7	104.98.116.138
Oct 1, 2024 00:40:53.972243071 CEST	49747	443	192.168.2.7	104.98.116.138
Oct 1, 2024 00:40:53.972270966 CEST	443	49747	104.98.116.138	192.168.2.7
Oct 1, 2024 00:40:53.972407103 CEST	49747	443	192.168.2.7	104.98.116.138
Oct 1, 2024 00:40:53.973115921 CEST	49747	443	192.168.2.7	104.98.116.138
Oct 1, 2024 00:40:53.973124027 CEST	443	49747	104.98.116.138	192.168.2.7
Oct 1, 2024 00:40:53.978084087 CEST	443	49701	104.98.116.138	192.168.2.7
Oct 1, 2024 00:40:54.371165991 CEST	49748	80	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:54.378501892 CEST	80	49748	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:54.378575087 CEST	49748	80	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:54.381336927 CEST	49748	80	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:54.387634039 CEST	80	49748	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:55.902901888 CEST	80	49748	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:55.920572042 CEST	80	49748	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:55.920655012 CEST	49748	80	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:55.920705080 CEST	80	49707	162.255.119.21	192.168.2.7
Oct 1, 2024 00:40:55.920726061 CEST	80	49748	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:55.920747042 CEST	80	49707	162.255.119.21	192.168.2.7
Oct 1, 2024 00:40:55.920778990 CEST	49748	80	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:55.920803070 CEST	49707	80	192.168.2.7	162.255.119.21
Oct 1, 2024 00:40:55.920847893 CEST	49707	80	192.168.2.7	162.255.119.21
Oct 1, 2024 00:40:55.921394110 CEST	80	49707	162.255.119.21	192.168.2.7
Oct 1, 2024 00:40:55.921441078 CEST	80	49748	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:55.921463013 CEST	49707	80	192.168.2.7	162.255.119.21
Oct 1, 2024 00:40:55.921483040 CEST	49748	80	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:56.042392969 CEST	49707	80	192.168.2.7	162.255.119.21
Oct 1, 2024 00:40:56.042781115 CEST	49751	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:56.042819977 CEST	443	49751	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:56.042941093 CEST	49751	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:56.045306921 CEST	49751	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:56.045324087 CEST	443	49751	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:56.047338963 CEST	80	49707	162.255.119.21	192.168.2.7
Oct 1, 2024 00:40:56.499772072 CEST	443	49751	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:56.500912905 CEST	49751	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:56.500927925 CEST	443	49751	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:56.501291990 CEST	443	49751	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:56.502069950 CEST	49751	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:56.502142906 CEST	443	49751	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:56.502703905 CEST	49751	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:56.547399998 CEST	443	49751	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:56.963417053 CEST	443	49751	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:56.963491917 CEST	443	49751	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:56.963624001 CEST	49751	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:56.966312885 CEST	49751	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:56.966336966 CEST	443	49751	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:56.974185944 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:56.974227905 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:56.974405050 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:56.974849939 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:56.974864960 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.444344044 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.445511103 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.445529938 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.445880890 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.449229956 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.449439049 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.451816082 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.499411106 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.892651081 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.892697096 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.892724037 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.892751932 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.892776012 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.892776966 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.892801046 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.892841101 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.892904997 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.892906904 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.892920971 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.892966986 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.892970085 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.892983913 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.893040895 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.893558979 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.897403002 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.897475004 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.897485018 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.979484081 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.979511023 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.979532003 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.979579926 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.979599953 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.979630947 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.979760885 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.979792118 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.979820013 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.979857922 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.979857922 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.979868889 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.980643988 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.980678082 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.980703115 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.980710030 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.980762959 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.980777979 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.980787039 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.980808020 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.980834007 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.980842113 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.980879068 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.981573105 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.981631041 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.981700897 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.981707096 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.981730938 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.982042074 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.982049942 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.987570047 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.987638950 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.987646103 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.987816095 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:57.987879992 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:57.987888098 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.066181898 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.066241980 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.066267014 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:58.066283941 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.066318035 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.066361904 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.066370964 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.066390991 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:58.066397905 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.066417933 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:58.066437960 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:58.067048073 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.067084074 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.067090988 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.067174911 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:58.067174911 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:58.067183971 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.067631006 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.067687035 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:58.067697048 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.067775965 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:58.067821980 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.067898989 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:58.068428993 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.068465948 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.068527937 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:58.068533897 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.068581104 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.068597078 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:58.068706989 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:58.089859009 CEST	49753	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:58.089878082 CEST	443	49753	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:58.111991882 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.112042904 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.112139940 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.112533092 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.112572908 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.112726927 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.113087893 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.113116026 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.113413095 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.113723993 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.113760948 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.113826036 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.114224911 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.114248037 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.114394903 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.114425898 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.115036964 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.115061998 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.115653038 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.115673065 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.657597065 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.658492088 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.661262989 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.661787987 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.724951029 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.724981070 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.725292921 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.725310087 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.725543976 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.725610971 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.725747108 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.725759983 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.726887941 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.726902008 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.726952076 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.727147102 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.727164984 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.727216005 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.728792906 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.728827953 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.728863001 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.729070902 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.729105949 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.729171038 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.729720116 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.729815960 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.730290890 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.730362892 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.730843067 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.731021881 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.731662035 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.731837034 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.737322092 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.737343073 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.737618923 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.737627029 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.737797976 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.737807035 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.737993002 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.738023996 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.849649906 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.849694014 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.849730968 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.849767923 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.849864960 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.849879980 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.849905014 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.849919081 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.849921942 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.849950075 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.849951029 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.849986076 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.850018024 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.850038052 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.850045919 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.850364923 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.850433111 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.850465059 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.850497007 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.850509882 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.850516081 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.850545883 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.850558043 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.850624084 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.850647926 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.850853920 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.850862980 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.851089001 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.851156950 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.851377964 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.853379965 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.853410959 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.853436947 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.853466034 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.853477001 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.853493929 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.853503942 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.853528976 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.853544950 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.853549004 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.853553057 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.853590965 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.854070902 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.854120970 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.854130983 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.855736971 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.855804920 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.855813980 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.856307030 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.858870983 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.858891964 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.859700918 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.859756947 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.859764099 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.863198042 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.863226891 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.863256931 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.863286018 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.863312960 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.863329887 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.863357067 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.863379002 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.863671064 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.863745928 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.864526987 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.864581108 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.864588022 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.864631891 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.869842052 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.869899035 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.869947910 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.869960070 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.938458920 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.938508987 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.938544035 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.938575029 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.938635111 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.938668013 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.938699961 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.938741922 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.938752890 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.938765049 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.938817024 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.939335108 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.939404964 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.939436913 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.939457893 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.939471960 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.939877987 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.939888954 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.940180063 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.940212965 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.940246105 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.940273046 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.940275908 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.940289021 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.940311909 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.940335035 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.940963030 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.940999031 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.941060066 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.941071033 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.941071033 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.941109896 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.941143990 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.941150904 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.941191912 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.941196918 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.941209078 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.941253901 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.941263914 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.941302061 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.941457987 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.941472054 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.941768885 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.941800117 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.941900015 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.941911936 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.942017078 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.942024946 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.942051888 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.942102909 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.942114115 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.942171097 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.942286968 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.942348003 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.942400932 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.942425013 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.942459106 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.942466974 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.942480087 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.943191051 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.943224907 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.943238020 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.943255901 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.943312883 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.944016933 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.944118977 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.944127083 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.944246054 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.944319010 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.945420980 CEST	49756	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.945436954 CEST	443	49756	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.950124979 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.950160027 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.950198889 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.950213909 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.950254917 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.950531006 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.950577974 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.950690985 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.950697899 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.950994968 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.951024055 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.951050997 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.951055050 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.951060057 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.951100111 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.951106071 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.951174021 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.951570034 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.951639891 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.951656103 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.951730013 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.951781988 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.951788902 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.951839924 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.951891899 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.951920986 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.951939106 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.951946974 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.952172995 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.952229023 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.952265978 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.952303886 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.952312946 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.952518940 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.952528954 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.952584028 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.952653885 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.952682018 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.952733040 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.952739954 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.952826023 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.952891111 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.952981949 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.952990055 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.953063965 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.953155041 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.953202963 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.953211069 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.953252077 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.953366041 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.953416109 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.953470945 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.953496933 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.953516960 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.953524113 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.953548908 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.953895092 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.954039097 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.954114914 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.954125881 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.954143047 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.954195976 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.954466105 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.954646111 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.954721928 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.954783916 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.954791069 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.954900026 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.955305099 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.955487013 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.955539942 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.955548048 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.969444036 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.969516039 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.969681978 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.973634005 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.973668098 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.989408970 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.989444017 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:58.989553928 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.989803076 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:58.989820004 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.029014111 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.029104948 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.029145956 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.029184103 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.029217958 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.029231071 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.029263020 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.029272079 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.029282093 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.029303074 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.029320955 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.029345989 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.029350996 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.029373884 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.030072927 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.030128002 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.030133963 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.030143976 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.030194998 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.030200958 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.030946970 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.031028986 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.031034946 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.031076908 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.031131029 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.031137943 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.031805038 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.031851053 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.031857967 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.031893015 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.031951904 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.031956911 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.032651901 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.032702923 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.032708883 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.032749891 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.032778978 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.032819986 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.032834053 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.032838106 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.032875061 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.033679962 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.033714056 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.033744097 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.033750057 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.033776045 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.033798933 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.034492970 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.034549952 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.037652016 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.037739038 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.037796021 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.037811041 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.037831068 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.037879944 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.037887096 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.037921906 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.037990093 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.037997961 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038183928 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038230896 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.038237095 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038314104 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038327932 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038369894 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.038377047 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038424969 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.038547039 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038595915 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038628101 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038645983 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.038656950 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038685083 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038696051 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.038698912 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038743973 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.038752079 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038870096 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038886070 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.038927078 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.039118052 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039166927 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.039170027 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039172888 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039182901 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039223909 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.039251089 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.039252996 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.039256096 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039283991 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039319992 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.039391994 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039433002 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039465904 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.039474964 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039484978 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.039521933 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039552927 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039617062 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.039623976 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039668083 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.039799929 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039843082 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039854050 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.039859056 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.039891958 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.039913893 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.039968967 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.040035009 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.040071011 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.040122032 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.040128946 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.040157080 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.040179968 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.040186882 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.040219069 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.040267944 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.040318012 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.040324926 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.040412903 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.040815115 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.040843964 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.040865898 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.040874958 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.040879011 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.040926933 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.040960073 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.040977955 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.040982008 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.041071892 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.041074038 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.045298100 CEST	49754	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.045312881 CEST	443	49754	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.115025997 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.115078926 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.115124941 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.115150928 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.115180969 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.115205050 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.115212917 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.115261078 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.115778923 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.115830898 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.115888119 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.115942955 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.116389990 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.116422892 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.116452932 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.116458893 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.116482973 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.117039919 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.117074966 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.117101908 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.117110014 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.117140055 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.117194891 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.117247105 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.123770952 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.123817921 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.123853922 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.123872995 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.123927116 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.123948097 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.123995066 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.124062061 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.124063015 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.124074936 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.124133110 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.124155045 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.124208927 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.124269009 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.124324083 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.124967098 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.125019073 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.125169039 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.125216007 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.125296116 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.125344992 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.125389099 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.125438929 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.125878096 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.125941992 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.125991106 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.126041889 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.126082897 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.126128912 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.126184940 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.126240015 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.126866102 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.126931906 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.126996040 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.127063990 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.127079010 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.127127886 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.127170086 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.127218008 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.127825975 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.127856016 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.127886057 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.127896070 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.127922058 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.127933025 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.127940893 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.127945900 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.128006935 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.128057003 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.128107071 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.128704071 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.128760099 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.128803968 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.128854990 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.128952026 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.128983021 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.129003048 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.129010916 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.129036903 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.129070044 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.129811049 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.129849911 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.129878044 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.129884958 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.129918098 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.196119070 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.198885918 CEST	49757	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.198934078 CEST	443	49757	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.212143898 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.212155104 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.212193012 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.212223053 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.212230921 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.212251902 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.212306976 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.212713003 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.212728024 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.212832928 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.212841988 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.213419914 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.213440895 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.213491917 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.213499069 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.213543892 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.213876009 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.213888884 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.213943958 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.213951111 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.218909025 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.218926907 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.218970060 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.218982935 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.219062090 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.219347954 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.219362020 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.219435930 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.219444036 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.220221043 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.220237970 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.220298052 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.220305920 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.260068893 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.270616055 CEST	49760	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.270653963 CEST	443	49760	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.270872116 CEST	49760	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.271604061 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.271651030 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.271950006 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.272155046 CEST	49762	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:59.272180080 CEST	443	49762	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:59.272602081 CEST	49762	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:59.273021936 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.273039103 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.273113966 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.273533106 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.273541927 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.273878098 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.275068045 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.275090933 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.275121927 CEST	49760	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.275141001 CEST	443	49760	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.275456905 CEST	49762	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:59.275470018 CEST	443	49762	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:59.275645971 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.275667906 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.275796890 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.275814056 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.287513971 CEST	49765	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:40:59.287538052 CEST	443	49765	52.222.236.60	192.168.2.7
Oct 1, 2024 00:40:59.287630081 CEST	49765	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:40:59.288535118 CEST	49765	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:40:59.288551092 CEST	443	49765	52.222.236.60	192.168.2.7
Oct 1, 2024 00:40:59.298168898 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.298197031 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.298245907 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.298260927 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.298324108 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.298573017 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.298588991 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.298630953 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.298635960 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.298676014 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.298926115 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.298943996 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.299010038 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.299016953 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.299144983 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.299251080 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.299267054 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.299321890 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.299328089 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.299412966 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.299642086 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.299658060 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.299716949 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.299722910 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.299825907 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.300002098 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.300017118 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.300096989 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.300110102 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.300115108 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.300158024 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.300446987 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.300463915 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.300529957 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.300535917 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.300604105 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.300885916 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.300900936 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.301004887 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.301011086 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.301067114 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.346863031 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.346910954 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.347156048 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.347963095 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.347973108 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.384588957 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.384614944 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.384701014 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.384721041 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.384850025 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.384877920 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.384917021 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.384924889 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.384954929 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.384995937 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.385312080 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.385332108 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.385386944 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.385395050 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.385629892 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.385663986 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.385709047 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.385715961 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.385766029 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.385791063 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.438011885 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.438462019 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.438491106 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.438957930 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.439589024 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.439690113 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.439958096 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.461539984 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.469330072 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.469353914 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.470491886 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.470705032 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.473311901 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.473373890 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.473530054 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.477761030 CEST	49755	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.477777004 CEST	443	49755	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.487409115 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.519407034 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.519895077 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.519905090 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.526483059 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.526515007 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.526684046 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.527002096 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.527015924 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.575645924 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.575690031 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.575839996 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.577600002 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.577719927 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.577778101 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.577805996 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.577896118 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.577941895 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.577950954 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.578063011 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.578103065 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.578114986 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.578118086 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.578126907 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.578219891 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.578267097 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.578273058 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.583651066 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.583688021 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.583734035 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.583760023 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.583803892 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.593837023 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.593894005 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.593933105 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.593966007 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.593975067 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.593988895 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.594022036 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.594041109 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.594089985 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.594098091 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.594194889 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.594717979 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.600378990 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.600413084 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.600440979 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.600481987 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.600493908 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.600526094 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.664005995 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.664102077 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.664145947 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.664181948 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.664208889 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.664267063 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.664273977 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.664350986 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.664398909 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.664405107 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.665182114 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.665247917 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.665255070 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.665538073 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.665579081 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.665584087 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.665594101 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.665642023 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.665647030 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.666397095 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.666449070 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.666466951 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.666997910 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.667037010 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.667062044 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.667073011 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.667118073 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.667124033 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.667886019 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.667939901 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.667939901 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.667953968 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.667988062 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.668584108 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.668711901 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.668757915 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.668766975 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.668781996 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.668844938 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.681952953 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.682024002 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.682035923 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.682157040 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.682204008 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.682210922 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.682605028 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.682641029 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.682662964 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.682683945 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.682692051 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.682719946 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.683412075 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.683438063 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.683468103 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.683485985 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.683495045 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.683527946 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.684231997 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.684273005 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.684293032 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.684304953 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.684329987 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.684350967 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.684356928 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.684417009 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.684994936 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.685045958 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.685100079 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.685107946 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.685120106 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.685157061 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.687072992 CEST	49759	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.687087059 CEST	443	49759	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.734898090 CEST	443	49760	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.735166073 CEST	49760	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.735177040 CEST	443	49760	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.735593081 CEST	443	49760	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.735990047 CEST	49760	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.736109018 CEST	443	49760	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.736247063 CEST	49760	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.737001896 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.737210989 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.737226009 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.738703966 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.738780975 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.739098072 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.739105940 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.739171028 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.739444017 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.739470959 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.739551067 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.739556074 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.743072033 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.743140936 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.743575096 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.743680954 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.743680954 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.744340897 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.744606972 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.744612932 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.745558023 CEST	443	49762	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:59.745640039 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.745702028 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.745810032 CEST	49762	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:59.745817900 CEST	443	49762	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:59.746151924 CEST	443	49762	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:59.746287107 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.746335030 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.746531010 CEST	49762	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:59.746581078 CEST	443	49762	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:59.746651888 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.746658087 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.746706963 CEST	49762	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:59.750653982 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.750778913 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.750917912 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.752460003 CEST	49758	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.752486944 CEST	443	49758	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.779402971 CEST	443	49760	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.787400961 CEST	443	49762	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:59.787406921 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.796411037 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.796437979 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.815530062 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.822123051 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.822170019 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.823308945 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.823350906 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.823435068 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.823570967 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.823586941 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.824572086 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.824635029 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.824668884 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.824683905 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.825007915 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.825078011 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.825144053 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.825153112 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.834144115 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.834161997 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.834242105 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.834454060 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.834469080 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.872899055 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.872961998 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.872997046 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.873029947 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.873040915 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.873054028 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.873097897 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.873459101 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.873506069 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.873531103 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.874404907 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.874455929 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.874461889 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.874500990 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.874542952 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.874547958 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.874553919 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.874607086 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.874619007 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.874667883 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.874680996 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.874708891 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.874751091 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.874764919 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.874901056 CEST	443	49760	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.874995947 CEST	443	49760	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.875045061 CEST	49760	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.875649929 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.875700951 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.875741959 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.875756025 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.875808001 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.875993967 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.876074076 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.876111984 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.876120090 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.878904104 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.880759001 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.880836964 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.880862951 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.882494926 CEST	49760	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.882513046 CEST	443	49760	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.889369011 CEST	443	49762	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:59.890280008 CEST	443	49762	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:59.890341997 CEST	49762	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:59.906594992 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.906641006 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.906671047 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.906694889 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.906698942 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.906713963 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.906760931 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.906920910 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.906964064 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.907033920 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.907258034 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.907330990 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.907432079 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.907501936 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.907510996 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.908252954 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.908282995 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.908302069 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.908313036 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.908363104 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.908369064 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.909713984 CEST	49762	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:40:59.909733057 CEST	443	49762	104.16.141.114	192.168.2.7
Oct 1, 2024 00:40:59.912856102 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.913053036 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.913064003 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.922173023 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.934500933 CEST	49772	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.934541941 CEST	443	49772	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.934607983 CEST	49772	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.935211897 CEST	49772	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.935221910 CEST	443	49772	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.955790997 CEST	49773	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.955821991 CEST	443	49773	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.955920935 CEST	49773	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.956615925 CEST	49773	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.956628084 CEST	443	49773	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.957784891 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.957875967 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.958043098 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.958095074 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.958132982 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.958139896 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.958151102 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.958193064 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.958205938 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.958249092 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.958281994 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.958287001 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.958295107 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.958336115 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.958343029 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.959434986 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.959546089 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.959592104 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.959604979 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.959999084 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.960046053 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.960052967 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.960095882 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.960139036 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.960143089 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.960189104 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.960232973 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.960238934 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.960906029 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.960980892 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.961021900 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.961045980 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.961050987 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.961090088 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.961093903 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.961153984 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.961189032 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.961196899 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.961225033 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.961272001 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.961533070 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.961623907 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.961661100 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.961663961 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.961675882 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.961738110 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.961744070 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.961925983 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.961972952 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.961977005 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.961988926 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.962043047 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.962048054 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.962099075 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.962137938 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.962146044 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.962151051 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.962188959 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.962738037 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.962773085 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.962785006 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.962795973 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.962820053 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.962827921 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.962838888 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.962846041 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.962908030 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.962914944 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.962914944 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.962965012 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.962970018 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.963493109 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.963517904 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.963536024 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.963543892 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.963579893 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.963588953 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.964529037 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.964564085 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.964570045 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.964581013 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.964621067 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.964631081 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.964689970 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.964734077 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.964881897 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.964919090 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.964930058 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.964937925 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.964983940 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.964991093 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.971694946 CEST	49761	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.971724033 CEST	443	49761	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.979289055 CEST	49774	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.979305983 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.979377985 CEST	49774	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.980350971 CEST	49774	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.980365992 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.992885113 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.992913008 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.992971897 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.993535995 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.993654966 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.993665934 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.994158983 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.994175911 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.994575977 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.995023012 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.995078087 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.995095968 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.995285988 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.995338917 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.995348930 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.995388985 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.995434999 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.995443106 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.995646000 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.995719910 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.995848894 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.996177912 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.996212006 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.996222019 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.996232033 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.996278048 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.996284962 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.996977091 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.997009993 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.997031927 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.997039080 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.997072935 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.997101068 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.997107983 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.997150898 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.997824907 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.997936964 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.997967958 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.997989893 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.997997046 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.998064995 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.998750925 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.998809099 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.998842001 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.998851061 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:40:59.998857975 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:40:59.998902082 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.002437115 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.002490997 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.002500057 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.013242960 CEST	443	49765	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:00.013484001 CEST	49765	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:00.013501883 CEST	443	49765	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:00.014566898 CEST	443	49765	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:00.014636040 CEST	49765	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:00.020339012 CEST	49765	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:00.020430088 CEST	443	49765	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:00.020919085 CEST	49765	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:00.020939112 CEST	443	49765	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:00.036309004 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.039292097 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.039598942 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.039617062 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.040227890 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.040683031 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.040745020 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.040992975 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.043400049 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.044589996 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.044648886 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.044662952 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.044888020 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.044935942 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.044944048 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.045438051 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.045469999 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.045476913 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.045499086 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.045536995 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.046231031 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.046273947 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.046298981 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.046322107 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.046334028 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.046376944 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.046382904 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.046447039 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.046483994 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.046515942 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.046525002 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.046570063 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.047019005 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.047072887 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.047075033 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.047085047 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.047166109 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.047172070 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.047178030 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.047220945 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.047238111 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.047262907 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.047282934 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.047291994 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.047337055 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.047720909 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.047780037 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.047780991 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.047790051 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.047832012 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.047851086 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.047885895 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.047961950 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.048062086 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.048069000 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.048609018 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.048667908 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.048702955 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.048753023 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.048774004 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.048820019 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.048820972 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.048834085 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.048871040 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.048882008 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.049457073 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.049518108 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.049560070 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.049613953 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.049698114 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.049750090 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.049757957 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.050329924 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.050391912 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.050405979 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.050457001 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.051198006 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.051258087 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.051275969 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.051327944 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.083406925 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.083513021 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.083551884 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.083590984 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.083606005 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.083657980 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.083664894 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.083794117 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.083806992 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.083893061 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.083893061 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.083904982 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.084604979 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.084649086 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.084664106 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.084670067 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.084716082 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.085390091 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.085464001 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.085500956 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.085558891 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.086335897 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.086395979 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.086402893 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.086458921 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.087161064 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.087230921 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.088022947 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.088092089 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.088118076 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.088175058 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.088865042 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.088944912 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.088996887 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.089066029 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.089314938 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.089389086 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.089765072 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.089857101 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.089860916 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.089880943 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.089907885 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.089929104 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.124800920 CEST	49765	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:00.130561113 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.130738020 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.133053064 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.133141994 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.133161068 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.133219004 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.133624077 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.133671045 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.133672953 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.133690119 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.133718014 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.133730888 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.133743048 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.133749962 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.133769989 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.133819103 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.133829117 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.133856058 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.133869886 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.133915901 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.133960009 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.133966923 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.133970976 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.134008884 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.134119034 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.134128094 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.134160995 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.134191036 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.134191036 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.134202003 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.134219885 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.134244919 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.134705067 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.134747028 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.134790897 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.134798050 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.134862900 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.134955883 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.135027885 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.135268927 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.135394096 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.135432005 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.135494947 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.135512114 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.135516882 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.135550022 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.135576010 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.135580063 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.135610104 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.135627985 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.135672092 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.135752916 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.135776997 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.135783911 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.135812044 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.135859013 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.136218071 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.136274099 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.136342049 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.136382103 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.136406898 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.136413097 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.136445999 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.136471033 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.136545897 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.136564016 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.136631012 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.137171030 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.137212038 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.137228966 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.137238026 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.137293100 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.137305975 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.137335062 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.137362957 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.137367964 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.137413025 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.137418032 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.137424946 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.137439013 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.137506008 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.138031960 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.138087034 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.138098001 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.138113976 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.138140917 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.138176918 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.142594099 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.142641068 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.142676115 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.142704010 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.142714977 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.142734051 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.142776012 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.142786980 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.142807007 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.142811060 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.142818928 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.142863989 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.143413067 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.148808002 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.148853064 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.148881912 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.148884058 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.148906946 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.148937941 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.171427965 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.171471119 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.171497107 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.171525955 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.171541929 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.171550989 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.171561956 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.171610117 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.171622038 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.171658039 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.171669960 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.171714067 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.171919107 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.172048092 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.172130108 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.172139883 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.172152996 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.172190905 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.172347069 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.172399044 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.172657967 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.172708988 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.172719955 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.172794104 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.172842979 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.177556038 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.177588940 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.177623987 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.177633047 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.177675009 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.177784920 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.229520082 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.229599953 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.229629993 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.229751110 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.229800940 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.229810953 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.229907036 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.229952097 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.229959965 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.230448008 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.230513096 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.230520010 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.230600119 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.230654001 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.230662107 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.230743885 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.230796099 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.230803013 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.231518984 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.231578112 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.231585026 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.231667042 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.231718063 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.231724977 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.232208014 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.232265949 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.232273102 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.232441902 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.232496977 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.232503891 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.232976913 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.233038902 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.233046055 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.234491110 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.237570047 CEST	49763	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.237591028 CEST	443	49763	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.258234024 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.258270025 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.258318901 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.258337021 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.258364916 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.258451939 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.258790970 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.258861065 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.258866072 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.258897066 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.258934021 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.258939981 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.259521961 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.259551048 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.259571075 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.259574890 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.259618044 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.259620905 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.259630919 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.259668112 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.260242939 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.260298967 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.260348082 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.260353088 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.261137009 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.261179924 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.261184931 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.261213064 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.261250973 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.261255026 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.261482000 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.261522055 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.261527061 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.262065887 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.262099981 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.262109041 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.262114048 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.262159109 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.270426989 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.270518064 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.270535946 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.293288946 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.301387072 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.315850973 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.315938950 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.315941095 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.315963030 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.316036940 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.316044092 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.316101074 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.316152096 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.316159010 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.316200972 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.316613913 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.316622972 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.316673040 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.317338943 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.317346096 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.317394018 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.317843914 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.317899942 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.317975044 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.318023920 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.318839073 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.318892002 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.318937063 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.318994045 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.319001913 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.319745064 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.319804907 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.319812059 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.319854021 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.319892883 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.319941998 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.320743084 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.320801020 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.320832014 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.320909977 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.321674109 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.321727037 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.321794987 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.321846962 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.336440086 CEST	443	49765	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:00.336466074 CEST	443	49765	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:00.336473942 CEST	443	49765	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:00.336498022 CEST	443	49765	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:00.336558104 CEST	49765	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:00.336579084 CEST	443	49765	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:00.336636066 CEST	49765	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:00.338108063 CEST	443	49765	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:00.338165045 CEST	49765	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:00.355257034 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.355340958 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.355374098 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.355405092 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.355417967 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.355490923 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.355896950 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.355957985 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.356389999 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.356445074 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.356462002 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.356525898 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.356574059 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.356580019 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.356627941 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.357278109 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.357338905 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.357378960 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.357444048 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.358156919 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.358217001 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.358259916 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.358316898 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.358968973 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.359005928 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.359016895 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.359069109 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.359142065 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.359194994 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.359863043 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.359922886 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.367719889 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.367743969 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.369045973 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.372437000 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.378688097 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.378698111 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.379291058 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.382790089 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.382801056 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.383085012 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.383220911 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.383261919 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.386934042 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.387013912 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.402734995 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.402829885 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.402892113 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.402981043 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.403649092 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.403704882 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.403876066 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.403928041 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.403966904 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.404021978 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.404836893 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.404891968 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.404962063 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.405013084 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.405416012 CEST	443	49772	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.405774117 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.405822992 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.405833006 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.405881882 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.406697035 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.406747103 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.406841040 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.406896114 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.407618046 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.407672882 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.407742023 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.407790899 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.408597946 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.408652067 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.408705950 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.408751965 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.409564018 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.409614086 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.409682035 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.409734011 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.410490990 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.410542011 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.410588026 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.410634995 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.411443949 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.411497116 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.411535025 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.411535978 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.411583900 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.411637068 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.411734104 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.411861897 CEST	49772	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.411883116 CEST	443	49772	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.411967993 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.412020922 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.412251949 CEST	443	49772	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.412388086 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.412456036 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.412513971 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.412568092 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.414233923 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.414285898 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.414287090 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.414302111 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.414361954 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.414370060 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.414414883 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.418143988 CEST	443	49773	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.442066908 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.442137957 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.442157984 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.442168951 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.442244053 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.442588091 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.442651987 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.442867041 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.442928076 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.443017960 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.443073034 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.443763971 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.443802118 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.443820953 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.443825006 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.443845034 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.443851948 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.443881989 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.443907976 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.443913937 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.443963051 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.444890976 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.444940090 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.444947004 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.444952011 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.444977045 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.445002079 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.445007086 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.445031881 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.445054054 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.445684910 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.445724010 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.445736885 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.445740938 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.445771933 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.445795059 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.446588993 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.446624994 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.446640968 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.446645021 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.446660995 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.446681976 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.446686029 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.446693897 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.446707010 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.446732044 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.446737051 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.446790934 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.447669029 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.447705030 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.447720051 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.447725058 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.447757959 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.447777987 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.448225975 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.448280096 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.448498011 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.448537111 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.448553085 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.448556900 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.448571920 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.448584080 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.448637009 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.448642015 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.448688030 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.449372053 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.449443102 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.451064110 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.455394030 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.459405899 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.459419012 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.461114883 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.482348919 CEST	49772	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.482445955 CEST	49773	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.522798061 CEST	49772	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.522969007 CEST	443	49772	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.523315907 CEST	49773	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.523330927 CEST	443	49773	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.523422003 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.523432970 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.523595095 CEST	49774	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.523602962 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.523874998 CEST	49772	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.524564028 CEST	443	49773	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.524578094 CEST	443	49773	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.524660110 CEST	49773	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.524835110 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.524847031 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.524919033 CEST	49774	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.525151014 CEST	49773	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.525214911 CEST	443	49773	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.525859118 CEST	49774	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.525921106 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526102066 CEST	49773	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.526108980 CEST	443	49773	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526112080 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526174068 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526202917 CEST	49774	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.526207924 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526211023 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526226997 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.526253939 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526298046 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.526299000 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526314974 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526371002 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.526472092 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526496887 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526504040 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526534081 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.526556015 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526611090 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.526614904 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526628017 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526669979 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.526675940 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526726961 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526761055 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.526766062 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.526773930 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.527029991 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.527060986 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.527127981 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.527147055 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.527153969 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.527174950 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.527175903 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.527196884 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.527200937 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.527251005 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.527538061 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.527544975 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.527681112 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.527725935 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.527733088 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.528192043 CEST	49766	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.528214931 CEST	443	49766	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.532186985 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.532248974 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.532255888 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.532828093 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.532836914 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.532908916 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.532912970 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.532927036 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.532932043 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.532974005 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.533025980 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.533052921 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.533056974 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.533077955 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.533142090 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.533188105 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.533659935 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.533706903 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.533724070 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.533732891 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.533756971 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.533781052 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.534590006 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.534607887 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.534684896 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.534689903 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.534728050 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.534809113 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.534825087 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.534883022 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.534888029 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.534925938 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.535752058 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.535778046 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.535855055 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.535862923 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.535904884 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.539670944 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.539689064 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.539777994 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.539784908 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.539855957 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.540440083 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.540456057 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.540518999 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.540525913 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.540606976 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.541505098 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.541533947 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.541605949 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.543128014 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.543143034 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.543359995 CEST	49764	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.543392897 CEST	443	49764	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.546608925 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.549007893 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.551290989 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.551356077 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.551403999 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.551408052 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.551434040 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.551480055 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.551496029 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.551955938 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.552000046 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.552010059 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.552779913 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.552829981 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.552843094 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.552901983 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.552954912 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.552958012 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.552969933 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.553015947 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.554828882 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.554857016 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.554924965 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.555860043 CEST	49765	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:00.555870056 CEST	443	49765	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:00.558811903 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.559205055 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.559221983 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.561117887 CEST	49767	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.561131001 CEST	443	49767	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.567404985 CEST	443	49772	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.568322897 CEST	49778	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.568356037 CEST	443	49778	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.568443060 CEST	49778	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.569324017 CEST	49778	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.569339037 CEST	443	49778	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.574314117 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.574337959 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.574405909 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.574417114 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.574469090 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.588459015 CEST	49779	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:00.588485956 CEST	443	49779	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:00.588561058 CEST	49779	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:00.588977098 CEST	49779	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:00.588994026 CEST	443	49779	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:00.592010021 CEST	49773	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.592019081 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.598217964 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.598262072 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.598332882 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.598546028 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.598557949 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.609901905 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.609914064 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.609983921 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.611052036 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.611062050 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.612783909 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.612833977 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.612840891 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.612875938 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.612920046 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.612926960 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.613431931 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.613476992 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.613478899 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.613492966 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.613543034 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.613550901 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.613800049 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.613987923 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614033937 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.614039898 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614049911 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614095926 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.614104033 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614168882 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614197016 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614214897 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.614229918 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614259005 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614273071 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.614279032 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614331961 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.614842892 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614898920 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614900112 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614939928 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614962101 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.614964962 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.614967108 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614969015 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.614978075 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.615022898 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.615072966 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.615112066 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.615118980 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.615125895 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.615175962 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.615184069 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.615195990 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.615250111 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.615756989 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.615803003 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.615808010 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.615859032 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.615895987 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.615900993 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.615906000 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.615940094 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.615942001 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.615946054 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.616008043 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.616048098 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.616053104 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.616060972 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.616125107 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.616131067 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.616709948 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.616759062 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.616763115 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.616786957 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.616818905 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.616827011 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.616830111 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.616866112 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.617620945 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.617676973 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.617716074 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.617721081 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.619652987 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.619682074 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.619730949 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.619738102 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.619801998 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.619930029 CEST	49782	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:00.619955063 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.619973898 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:00.619976997 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.620019913 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.620026112 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.620095968 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.620096922 CEST	49782	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:00.620121002 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.620285988 CEST	49782	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:00.620301008 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:00.620347023 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.620364904 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.620423079 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.620429039 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.620474100 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.620855093 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.620871067 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.620928049 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.620934010 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.620980024 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.621165991 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.621181011 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.621234894 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.621241093 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.621294022 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.621422052 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.621438026 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.621500969 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.621506929 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.621556997 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.621803045 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.621823072 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.621871948 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.621877909 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.621918917 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.622735023 CEST	49774	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.622769117 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.624762058 CEST	443	49773	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.624857903 CEST	443	49773	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.624917984 CEST	49773	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.627962112 CEST	49773	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.627989054 CEST	443	49773	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.639338017 CEST	443	49772	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.639458895 CEST	443	49772	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.639503956 CEST	49772	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.639836073 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.639868021 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.639889002 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.639915943 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.639956951 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.639964104 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.640147924 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.640193939 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.640224934 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.640252113 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.640279055 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.640304089 CEST	49774	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.640304089 CEST	49774	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.640305042 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.640317917 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.640352964 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.640384912 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.640393019 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.640396118 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.640403032 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.640436888 CEST	49774	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.640436888 CEST	49774	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.640449047 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.640459061 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.640469074 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.640527010 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.641302109 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.641360044 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.641388893 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.641402006 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.641410112 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.641446114 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.642270088 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.642332077 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.642371893 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.642373085 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.642385960 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.642429113 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.642435074 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.642980099 CEST	49772	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.642997980 CEST	443	49772	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.643287897 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.643295050 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.643326044 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.643328905 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.643336058 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.643342972 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.643419027 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.643591881 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.643599033 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.644073009 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.644113064 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.644149065 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.644155025 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.644162893 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.644207001 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.644213915 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.644216061 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.644222021 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.644263029 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.644268036 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.644289970 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.644299030 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.644804001 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.644830942 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.644851923 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.644857883 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.644902945 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.645172119 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.645195007 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.645517111 CEST	49774	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.645524979 CEST	443	49774	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.650029898 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.650094032 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.650136948 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.650142908 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.650547981 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.650566101 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.650695086 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.651225090 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.651235104 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.661207914 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.661230087 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.661308050 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.661315918 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.661377907 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.699414968 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.699471951 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.699482918 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.699513912 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.699554920 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.699561119 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.699575901 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.699634075 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.699692011 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.699702978 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.699752092 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.700001001 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.700014114 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.700059891 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.700069904 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.700109005 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.700153112 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.700161934 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.700207949 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.700577974 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.700625896 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.700634956 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.700640917 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.700673103 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.700695038 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.700695038 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.700710058 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.700758934 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.701417923 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.701462030 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.701478958 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.701486111 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.701591015 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.701605082 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.701694965 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.701699972 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.701769114 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.701781988 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.701811075 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.701832056 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.701848984 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.701925039 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.701975107 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.701987982 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.702059984 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.702065945 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.702095032 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.702101946 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.702112913 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.702126980 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.702188015 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.702310085 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.702379942 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.702383995 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.702438116 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.702442884 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.702568054 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.702662945 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.702713966 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.702718973 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.702728987 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.702768087 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.702769995 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.702881098 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.702888012 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.702912092 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.702938080 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.702967882 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.703111887 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.703162909 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.703166008 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.703216076 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.703294039 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.703344107 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.703820944 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.703870058 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.703921080 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.703969002 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.704376936 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.704425097 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.704478979 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.704534054 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.704624891 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.704664946 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.704674959 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.704679966 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.704715967 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.706399918 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.706420898 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.706468105 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.706475973 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.706542015 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.706712961 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.706732988 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.706801891 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.706809044 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.706847906 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.707114935 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.707130909 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.707189083 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.707195997 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.707231998 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.707499027 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.707528114 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.707551003 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.707556963 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.707591057 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.707823992 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.707839012 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.707887888 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.707901955 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.707912922 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.707942963 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.707983971 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.708520889 CEST	49768	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.708534002 CEST	443	49768	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.709172964 CEST	49785	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.709202051 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.709264040 CEST	49785	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.710138083 CEST	49785	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.710146904 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.711199999 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.826598883 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.889511108 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.976449013 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976495028 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976530075 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976568937 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976588011 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.976604939 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976614952 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976624012 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976639032 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976641893 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.976659060 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976677895 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.976701975 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.976708889 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976742983 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976762056 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.976767063 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976814985 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.976819992 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976856947 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976893902 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976927042 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976938963 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.976944923 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.976990938 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.976994991 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977088928 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.977092028 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977138042 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977171898 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977207899 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977212906 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.977219105 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977257967 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.977262020 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977296114 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977319956 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.977324963 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977369070 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977370977 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.977379084 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977416039 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.977421999 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977432966 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977473021 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.977545977 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977611065 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.977617979 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977632046 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977665901 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.977785110 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977838993 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977840900 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.977850914 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977891922 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.977921009 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977972984 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.977981091 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.977981091 CEST	49770	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.977993011 CEST	443	49770	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978034973 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978049040 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.978055000 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978080034 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.978091955 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978136063 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978137970 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.978148937 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978198051 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978256941 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978290081 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.978290081 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.978296995 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978308916 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978313923 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.978358030 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.978769064 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978812933 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978842974 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.978852034 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978900909 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.978907108 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978919983 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.978924990 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978946924 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.978955984 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.978960037 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979034901 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.979060888 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979074001 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979115009 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979131937 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.979131937 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.979139090 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979151011 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979157925 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979188919 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.979193926 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979202032 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979239941 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.979259014 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.979262114 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979301929 CEST	49775	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.979314089 CEST	443	49775	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979331017 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.979722977 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979729891 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979743004 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979789972 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979809046 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.979862928 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979871035 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.979876995 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979887009 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.979909897 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.979912043 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979932070 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.979937077 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979938030 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.979974985 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.979978085 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980016947 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980052948 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.980052948 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.980060101 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980098009 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.980098009 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.980722904 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980734110 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980783939 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980794907 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.980812073 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.980818033 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980830908 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980854034 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980861902 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980871916 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.980915070 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980961084 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.980967045 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980967999 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.980978012 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.980979919 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980983019 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980989933 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.980997086 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.981026888 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.981030941 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.981097937 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.981103897 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.981147051 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.981158972 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.981712103 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.981774092 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.981818914 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.981859922 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.981869936 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.981874943 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.981908083 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.982327938 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982359886 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982372999 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.982381105 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982383966 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982409954 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.982414961 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982423067 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982459068 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.982465029 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982486010 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982489109 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.982492924 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.982498884 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982517958 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.982546091 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982556105 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.982559919 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982594013 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982601881 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.982608080 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982629061 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982642889 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.982647896 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.982680082 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.983306885 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.983375072 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.983381033 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.983422041 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.983992100 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.984014034 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.984112978 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.984118938 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.984179020 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.984432936 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.984457970 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.984497070 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.984504938 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.984536886 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.984971046 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.984987020 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.984992981 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.985014915 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.985044003 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.985050917 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.985099077 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.985135078 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.985141039 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.985167980 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.985171080 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.985394001 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.985418081 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.985481024 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.985486984 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.985542059 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.985743046 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.986165047 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.986181021 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.986242056 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.986251116 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.986510038 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.986530066 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.986572981 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.986578941 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.986605883 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.986810923 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.986834049 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.986876011 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.986884117 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.986916065 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.987306118 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.987329960 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.987370968 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.987376928 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.987413883 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.987651110 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.987994909 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.988008976 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.988132954 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.988147020 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.988353014 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.988423109 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.988446951 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.988485098 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.988491058 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.988535881 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.988542080 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.988584995 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.988704920 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.988718987 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.988805056 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.988811016 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.989202023 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.989221096 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.989270926 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.989276886 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.989341021 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.989456892 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.989480972 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.989509106 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.989516973 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.989547968 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.990066051 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.990096092 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.990132093 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.990139961 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.990190983 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.990196943 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.990420103 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.990433931 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.990489006 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.990499973 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.990526915 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.990901947 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.990925074 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.990956068 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.990962029 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.990998030 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.991247892 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.991266966 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.991301060 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.991307974 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.991337061 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.991945982 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.991965055 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.992011070 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.992018938 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.992050886 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.992222071 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.992237091 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.992274046 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.992286921 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.992312908 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.993140936 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.993165016 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.993201971 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.993207932 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.993243933 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.993336916 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.993366957 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.993398905 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.993405104 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.993437052 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.993539095 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.993590117 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.993592024 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.993604898 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.993638992 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.993640900 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.993741035 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.994182110 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.994199991 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.994244099 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.994251013 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.994306087 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.994807959 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.994833946 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.994877100 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.994889021 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.994911909 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.994982004 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:00.995029926 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.995296955 CEST	49771	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:00.995316982 CEST	443	49771	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.003602028 CEST	49786	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.003626108 CEST	443	49786	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.003737926 CEST	49769	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.003743887 CEST	443	49769	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.003781080 CEST	49786	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.004585981 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.004586935 CEST	49786	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.004595041 CEST	443	49786	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.005057096 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.005067110 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.005419016 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.006475925 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.006475925 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.006491899 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.006541967 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.008887053 CEST	49787	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.008920908 CEST	443	49787	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.008985043 CEST	49787	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.009453058 CEST	49787	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.009464025 CEST	443	49787	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.030026913 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.030667067 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.030683994 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.031060934 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.031568050 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.031584978 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.031655073 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.032084942 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.032093048 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.032351971 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.032452106 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.032469988 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.037851095 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.037893057 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.037960052 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.039114952 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.039133072 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.047033072 CEST	443	49778	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.047271967 CEST	49778	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.047282934 CEST	443	49778	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.048449993 CEST	443	49778	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.048507929 CEST	49778	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.048823118 CEST	49778	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.048907042 CEST	443	49778	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.048976898 CEST	49778	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.048983097 CEST	443	49778	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.049704075 CEST	443	49779	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:01.049949884 CEST	49779	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:01.049962044 CEST	443	49779	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:01.050316095 CEST	443	49779	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:01.050709009 CEST	49779	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:01.050769091 CEST	443	49779	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:01.050911903 CEST	49779	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:01.054181099 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.054203033 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.054295063 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.054543018 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.054552078 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.066768885 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.067004919 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.067034006 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.067393064 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.067727089 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.067794085 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.067854881 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.069752932 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.069926023 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.069936037 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.070296049 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.070599079 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.070656061 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.070692062 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.079405069 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.095412970 CEST	443	49779	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:01.111409903 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.111440897 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.124707937 CEST	49778	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.124723911 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.124742031 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.125221014 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.125627995 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.125650883 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.126821041 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.126898050 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.126981020 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.127258062 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.127342939 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.127412081 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.127429008 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.127577066 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.127593040 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.128506899 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.128609896 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.128835917 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.128918886 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.128937960 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.144114017 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.144270897 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.156546116 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.156670094 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.156732082 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.156747103 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.156868935 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.156960964 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.156960964 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.156990051 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.157093048 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.157099962 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.157577991 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.157665014 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.157669067 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.157691002 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.157748938 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.157776117 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.162693024 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.162776947 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.162784100 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.171436071 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.186059952 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.186106920 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.186144114 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.186163902 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.186184883 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.186232090 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.186285019 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.186291933 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.186340094 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.186542034 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.187191010 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.187248945 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.187256098 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.187598944 CEST	443	49778	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.187686920 CEST	443	49778	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.187745094 CEST	49778	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.188868046 CEST	49778	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.188884974 CEST	443	49778	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.192620993 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.192683935 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.192692995 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.192735910 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.192858934 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.192867994 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.195543051 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.195590019 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.195676088 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.196244001 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.196259022 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.212804079 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.212874889 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.212934971 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.212955952 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.213124037 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.213169098 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.213193893 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.213207960 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.213412046 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.213661909 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.214168072 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.214236021 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.214243889 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.219237089 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.219311953 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.219320059 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.219471931 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.219527960 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.219536066 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.222495079 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.222541094 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.222574949 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.222610950 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.222613096 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.222657919 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.222687006 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.222704887 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.222763062 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.222778082 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.223324060 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.223354101 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.223376989 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.223434925 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.223434925 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.223453999 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.229291916 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.229360104 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.229376078 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.242944956 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.243123055 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.243134022 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.243325949 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.243402004 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.243407011 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.243963003 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.244040012 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.244132042 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.244213104 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.244271994 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.244271994 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.244278908 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.244410038 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.244833946 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.244955063 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.245352030 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.245357990 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.245845079 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.245923996 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.245996952 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.246063948 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.246071100 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.246119022 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.246561050 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.246699095 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.246754885 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.246761084 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.246876955 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.247431993 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.247580051 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.247661114 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.247761965 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.247767925 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.247961044 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.274493933 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.274533987 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.274554968 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.274573088 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.274604082 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.274626970 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.274635077 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.274693966 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.274749041 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.275186062 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.275438070 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.275471926 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.275484085 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.275490046 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.275526047 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.275543928 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.275549889 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.275607109 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.275612116 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.275630951 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.275680065 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.276084900 CEST	49777	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.276099920 CEST	443	49777	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.280100107 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.280142069 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.280178070 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.280205011 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.280379057 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.280379057 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.280395031 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.280492067 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.280828953 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.280921936 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.280982971 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.280991077 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.281740904 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.281802893 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.281810999 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.283371925 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.283473015 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.283499956 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.283529997 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.283530951 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.283543110 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.283572912 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.284255981 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.284286022 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.284321070 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.284328938 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.284375906 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.285094023 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.285147905 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.285200119 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.285247087 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.285254002 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.285321951 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.286269903 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.286488056 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.286494970 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.286526918 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.289504051 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.299535036 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.299601078 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.299611092 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.299823046 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.299874067 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.299880028 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.299890995 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.300102949 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.300108910 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.300160885 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.300204992 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.300254107 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.300261021 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.300302982 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.300745964 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.301002979 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.301048994 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.301052094 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.301067114 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.301127911 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.301134109 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.301888943 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.301938057 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.301983118 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.301986933 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.301997900 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.302026987 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.302069902 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.302112103 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.302119017 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.302701950 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.302733898 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.302762985 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.302767992 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.302773952 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.302815914 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.302823067 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.302861929 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.309920073 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.310039997 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.310060978 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.310832977 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.310983896 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.311029911 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.311038017 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.311048031 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.311080933 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.311506033 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.311532021 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.311566114 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.311573982 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.311635971 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.312285900 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.312391043 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.312418938 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.312458038 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.312465906 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.312514067 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.313117981 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.313220024 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.313242912 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.313286066 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.313294888 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.313343048 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.313997030 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.314045906 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.314104080 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.314116955 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.316186905 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.316261053 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.316273928 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.329226017 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.329651117 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.329731941 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.329819918 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.329871893 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.329881907 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.329927921 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.330399036 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.330419064 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.330463886 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.330468893 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.330523968 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.330959082 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.331057072 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.331115961 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.331123114 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.331157923 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.331229925 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.331229925 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.331238031 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.331319094 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.331870079 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.331984997 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.332479000 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.332587957 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.332617044 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.332636118 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.332776070 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.333410025 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.333496094 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.333502054 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.333653927 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.334264040 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.334371090 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.334395885 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.334461927 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.335153103 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.335235119 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.335278988 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.335283995 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.335305929 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.335380077 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.336087942 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.336201906 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.336812019 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:01.337119102 CEST	49782	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:01.337141991 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:01.338222027 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:01.338299036 CEST	49782	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:01.338809967 CEST	49782	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:01.338876963 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:01.339003086 CEST	49782	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:01.368299007 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.368449926 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.368510962 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.368520975 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.368531942 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.368594885 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.368989944 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.369039059 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.369092941 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.369157076 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.369168997 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.369225025 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.369834900 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.369924068 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.370080948 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.370088100 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.370719910 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.370748043 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.370773077 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.370795012 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.370801926 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.370841026 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.370850086 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.370867968 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.370891094 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.370899916 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.370912075 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.370940924 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.371247053 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.371272087 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.371300936 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.371308088 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.371364117 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.371541023 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.371660948 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.371831894 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.371865988 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.371889114 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.371907949 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.371917963 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.371932030 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.371958971 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.372174025 CEST	49784	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.372189045 CEST	443	49784	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.372685909 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.372709990 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.372736931 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.372744083 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.372801065 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.372807980 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.373404980 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.373500109 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.373506069 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.373531103 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.373558044 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.373578072 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.373579979 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.373589993 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.373605013 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.373631001 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.374295950 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.374386072 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.374409914 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.374443054 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.374449968 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.374556065 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.375137091 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.379405975 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:01.386264086 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.386337042 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.386370897 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.386389017 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.386400938 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.386544943 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.386578083 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.386585951 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.386611938 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.387105942 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.387150049 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.387166977 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.387175083 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.387206078 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.387553930 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.387595892 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.387602091 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.387626886 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.387653112 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.387659073 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.387685061 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.388377905 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.388432026 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.388438940 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.388468981 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.388494015 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.388499975 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.388506889 CEST	49782	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:01.388519049 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:01.388537884 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.388571978 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.388632059 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.388639927 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.388689041 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.389292002 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.389362097 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.389455080 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.389489889 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.389503956 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.389509916 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.389565945 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.390224934 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.390289068 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.390351057 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.390403032 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.391187906 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.391244888 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.391269922 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.391325951 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.398632050 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.398669958 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.398699045 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.398742914 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.398752928 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.398791075 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.399319887 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.399348021 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.399405003 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.399410963 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.399457932 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.399693966 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.399703026 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.399777889 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.399975061 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.399985075 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.400068998 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.400075912 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.400427103 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.400477886 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.400485039 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.400528908 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.400722980 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.400785923 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.400865078 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.400902987 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.400937080 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.400943041 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.400954008 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.401654959 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.401732922 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.401746035 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.401752949 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.401792049 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.402410984 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.402470112 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.402477980 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.402534962 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.402904034 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.402965069 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.403033972 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.403086901 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.403096914 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.403107882 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.403152943 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.416342020 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.416448116 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.416486979 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.416568995 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.416666985 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.416764021 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.416961908 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.417022943 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.417643070 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.417679071 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.417699099 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.417704105 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.417741060 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.417788982 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.418155909 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.418212891 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.418237925 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.418276072 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.418292999 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.418298006 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.418329000 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.419372082 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.419435978 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.419444084 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.419487000 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.419512987 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.419517040 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.419534922 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.419552088 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.419572115 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.419586897 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.419590950 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.419645071 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.420125008 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.420162916 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.420245886 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.420245886 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.420257092 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.420898914 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.420960903 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.420965910 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.421004057 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.421080112 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.421086073 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.421145916 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.421336889 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.421343088 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.421390057 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.421793938 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.421863079 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.421947956 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.421983957 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.422027111 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.422033072 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.422158003 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.423358917 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.423441887 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.423448086 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.423569918 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.423698902 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.423774958 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.423787117 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.423858881 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.424359083 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.424433947 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.424446106 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.424451113 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.424490929 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.427905083 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.428136110 CEST	49785	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.428163052 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.429173946 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.429239035 CEST	49785	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.429558039 CEST	49785	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.429621935 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.429714918 CEST	49785	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.458347082 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.458436966 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.458442926 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.458471060 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.458532095 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.458744049 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.458755016 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.458816051 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.458849907 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.458878040 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.458930016 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.459630013 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.459638119 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.459692955 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.459732056 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.459739923 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.459789038 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.460264921 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.460318089 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.460361004 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.460382938 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.460427999 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.460475922 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.460484028 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.460530043 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.460593939 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.460652113 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.460659027 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.461474895 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.461507082 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.461540937 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.461549044 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.461601019 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.462385893 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.462420940 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.462452888 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.462459087 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.462490082 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.463186979 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.463279963 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.463283062 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.463300943 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.463340044 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.464113951 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.464173079 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.464179993 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.464263916 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.473222971 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.473288059 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.473316908 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.473330021 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.473364115 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.473529100 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.473578930 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.473587990 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.473637104 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.473665953 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.473716974 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.473906994 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.473968983 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.474204063 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.474261045 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.474262953 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.474272013 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.474307060 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.474328995 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.474328995 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.474340916 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.474383116 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.474946976 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.474992037 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.475004911 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.475012064 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.475043058 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.475121021 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.475169897 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.475178003 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.475222111 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.475395918 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.475719929 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.475816965 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.475847006 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.475853920 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.475889921 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.475913048 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.475939035 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.475997925 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.476417065 CEST	443	49786	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.476558924 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.476615906 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.476658106 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.476680994 CEST	49786	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.476706982 CEST	443	49786	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.476737976 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.476807117 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.476852894 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.476859093 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.476877928 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.476912975 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.477473021 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.477530956 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.477538109 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.477550983 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.477588892 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.477628946 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.477754116 CEST	49781	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.477765083 CEST	443	49786	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.477766991 CEST	443	49781	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.477845907 CEST	49786	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.478179932 CEST	49792	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.478204012 CEST	443	49792	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.478281021 CEST	49792	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.478925943 CEST	49786	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.478988886 CEST	443	49786	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.479600906 CEST	49792	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.479617119 CEST	443	49792	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.480338097 CEST	49786	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.480346918 CEST	443	49786	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.484580040 CEST	443	49787	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.484813929 CEST	49787	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.484836102 CEST	443	49787	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.486171007 CEST	443	49787	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.486850023 CEST	49787	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.487019062 CEST	49787	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.487024069 CEST	443	49787	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.487041950 CEST	443	49787	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.487128973 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.487210989 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.487792015 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.487878084 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.487893105 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.487951040 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.488234997 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.488312960 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.488415003 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.488471985 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.488481045 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.488550901 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.488600016 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.488904953 CEST	49780	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.488918066 CEST	443	49780	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.489521027 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.489543915 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.489630938 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.490864992 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.490878105 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.491960049 CEST	49782	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:01.503767014 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.503793001 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.503854990 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.503865957 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.503954887 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.503999949 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.504035950 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.504076958 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.504086971 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.504097939 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.504100084 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.504149914 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.504390001 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.506918907 CEST	443	49779	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:01.507035971 CEST	443	49779	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:01.507088900 CEST	49779	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:01.507170916 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.507198095 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.508402109 CEST	49779	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:01.508418083 CEST	443	49779	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:01.509356976 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.510812998 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.510904074 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.518627882 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.518815041 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.521163940 CEST	49785	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.521173954 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.524746895 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.526231050 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.526249886 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.527096987 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.527122021 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.527337074 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.527419090 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.527523994 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.527532101 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.528028965 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.528090000 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.528418064 CEST	49776	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.528429031 CEST	443	49776	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.528537989 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.528601885 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.530742884 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.530750036 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.531255007 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.531318903 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.531682014 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.531689882 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.547286034 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.547379017 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.547382116 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.547415018 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.547431946 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.547444105 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.547458887 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.547465086 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.547497988 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.547771931 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.547806978 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.547831059 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.547841072 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.547869921 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.548281908 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.548340082 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.548350096 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.548384905 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.548391104 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.548397064 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.548429012 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.548696041 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.548755884 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.548774004 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.548785925 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.548841000 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.548856020 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.549225092 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.549278021 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.549285889 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.549305916 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.549354076 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.549360991 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.549455881 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.549488068 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.549499035 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.549504995 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.549546957 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.550156116 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.550214052 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.550221920 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.550230980 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.550278902 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.550349951 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.550381899 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.550396919 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.550405025 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.550427914 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.551059008 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.551122904 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.551125050 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.551135063 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.551177025 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.551246881 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.551276922 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.551316023 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.551323891 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.551359892 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.552054882 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.552084923 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.552113056 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.552122116 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.552154064 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.552205086 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.552233934 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.552264929 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.552272081 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.552303076 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.552324057 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.552328110 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.552375078 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.554013968 CEST	49783	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.554032087 CEST	443	49783	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.554828882 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.554858923 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.554927111 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.556459904 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.556479931 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.584774971 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.584810972 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.584846973 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.584880114 CEST	49785	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.584881067 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.584892988 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.584944963 CEST	49785	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.585079908 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.585160971 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.585218906 CEST	49785	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.591979980 CEST	49795	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:01.592005014 CEST	443	49795	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:01.592072964 CEST	49795	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:01.592313051 CEST	49786	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.592334032 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.592334986 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.592360020 CEST	49787	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.594325066 CEST	49795	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:01.594337940 CEST	443	49795	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:01.596463919 CEST	49785	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.596477032 CEST	443	49785	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.607199907 CEST	49796	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:01.607242107 CEST	443	49796	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:01.607373953 CEST	49796	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:01.609458923 CEST	49796	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:01.609471083 CEST	443	49796	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:01.614223003 CEST	443	49786	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.614279985 CEST	443	49786	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.614322901 CEST	443	49786	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.614376068 CEST	49786	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.614386082 CEST	443	49786	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.614394903 CEST	443	49786	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.614439011 CEST	49786	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.614516973 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.614528894 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.614710093 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.616174936 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.616184950 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.619731903 CEST	49786	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.619739056 CEST	443	49786	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.623867989 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.624521017 CEST	49798	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.624531031 CEST	443	49798	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.624736071 CEST	49798	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.625248909 CEST	49798	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.625260115 CEST	443	49798	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.628602982 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.628657103 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.628705978 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.628730059 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.628736973 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.628776073 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.628782988 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.628787994 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.628839016 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.628846884 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.628851891 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.628905058 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.629139900 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.629187107 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.629237890 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.629933119 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.629966021 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.630027056 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.630321980 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.630336046 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.630973101 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.631000996 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.631103039 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.631689072 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.631701946 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.634005070 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.634011030 CEST	443	49790	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.634087086 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.634125948 CEST	49790	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.634506941 CEST	443	49787	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.634735107 CEST	443	49787	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.634850979 CEST	49787	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.642313957 CEST	49787	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.642328978 CEST	443	49787	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.645251989 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.645286083 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.645358086 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.645699024 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.645710945 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.649941921 CEST	49802	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.649951935 CEST	443	49802	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.650022030 CEST	49802	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.650474072 CEST	49802	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.650482893 CEST	443	49802	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.651525974 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.651545048 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.651871920 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.652240038 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.652249098 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.652409077 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.652466059 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.652507067 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.652560949 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.652570963 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.652623892 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.652628899 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.652668953 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.652719975 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.652726889 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.653458118 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.653503895 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.653537989 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.653558016 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.653564930 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.653613091 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.656013012 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.657030106 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.657278061 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.657286882 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.657685041 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.657691956 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.658961058 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.659024954 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.659843922 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.660007954 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.660012007 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.660118103 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.665036917 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.665088892 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.665121078 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.665162086 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.665241957 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.665273905 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.665275097 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.665302992 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.665321112 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.665349007 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.665354013 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.665422916 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.666018963 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.669666052 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.669703007 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.669724941 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.669730902 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.669781923 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.669785976 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.677898884 CEST	49805	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.677926064 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.678184986 CEST	49805	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.678379059 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.678388119 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.678498030 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.678884983 CEST	49805	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.678895950 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.679665089 CEST	49807	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.679677963 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.679862022 CEST	49807	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.680053949 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.680072069 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.680201054 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.680954933 CEST	49807	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.680962086 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.681266069 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.681269884 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.681277990 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.681278944 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.688610077 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.688637018 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.688760996 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.689740896 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.689753056 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.733251095 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:01.733278990 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:01.733287096 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:01.733309031 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:01.733349085 CEST	49782	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:01.733362913 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:01.733372927 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:01.733402967 CEST	49782	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:01.733433008 CEST	49782	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:01.735857010 CEST	49810	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.735878944 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.735979080 CEST	49810	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.736768961 CEST	49810	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:01.736780882 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:01.738301992 CEST	49782	443	192.168.2.7	52.222.236.60
Oct 1, 2024 00:41:01.738316059 CEST	443	49782	52.222.236.60	192.168.2.7
Oct 1, 2024 00:41:01.740876913 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.740937948 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.740961075 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.740979910 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.741036892 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.741100073 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.741193056 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.741228104 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.741242886 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.741250038 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.741457939 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.741465092 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.741831064 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.741869926 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.741885900 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.741893053 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.741935015 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.741942883 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.741990089 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.742031097 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.742043018 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.742048979 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.742095947 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.742754936 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.742842913 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.742877960 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.742893934 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.742901087 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.742945910 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.742949963 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.742957115 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.742995024 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.743000984 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.752664089 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.752701998 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.752736092 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.752760887 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.752768993 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.752803087 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.752805948 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.752871037 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.752876043 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.753384113 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.753525972 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.753530025 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.753700972 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.753730059 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.753741026 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.753745079 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.753784895 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.753789902 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.753848076 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.753912926 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.753916979 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.754575968 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.754609108 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.754652023 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.754656076 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.754698038 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.754710913 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.754714966 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.754772902 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.754777908 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.755487919 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.755523920 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.755556107 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.755563974 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.755568981 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.755605936 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.755609035 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.755665064 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.785224915 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.785271883 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.785300970 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.785322905 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.785393000 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.802805901 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.802850962 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.802887917 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.802913904 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.802926064 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.802937984 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.802962065 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.802992105 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.803003073 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.803575039 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.803620100 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.803633928 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.803642035 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.803694010 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.808903933 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.808967113 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.809051991 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.809058905 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.829296112 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.829375982 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.829407930 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.829437971 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.829463959 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.829750061 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.829890013 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.829948902 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.830002069 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.830068111 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.830075979 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.830605984 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.830707073 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.830713034 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.830724955 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.830776930 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.831481934 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.831552029 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.831629038 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.831685066 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.832346916 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.832405090 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.832484007 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.832549095 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.832554102 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.832568884 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.832602024 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.832645893 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.833267927 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.833353996 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.833358049 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.833365917 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.833410025 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.834165096 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.834208965 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.834227085 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.834233046 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.834254980 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.834276915 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.840261936 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.840337992 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.840493917 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.840521097 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.840675116 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.840727091 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.840734959 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.841264963 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.841305017 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.841319084 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.841322899 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.841355085 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.841726065 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.841790915 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.841793060 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.841803074 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.841850996 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.842616081 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.842681885 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.842729092 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.842772961 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.842791080 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.842803001 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.842828989 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.842852116 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.843552113 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.843636990 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.843645096 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.843707085 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.844403028 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.844465971 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.844556093 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.844595909 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.844614983 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.844619989 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.844645977 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.845393896 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.845448971 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.845453978 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.845516920 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.888650894 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.888781071 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.888936996 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.888955116 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.889003038 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.889081955 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.889086962 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.889128923 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.889147043 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.889817953 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.889899015 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.889947891 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.889955044 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.889971972 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.889996052 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.890038967 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.903065920 CEST	49791	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.903080940 CEST	443	49791	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.917949915 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.918005943 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.918065071 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.918075085 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.918148994 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.918203115 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.918251991 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.918494940 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.918545961 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.918551922 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.918602943 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.918941021 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.919002056 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.919045925 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.919092894 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.919102907 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.919143915 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.919891119 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.919960976 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.919965982 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.920012951 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.920072079 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.920141935 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.920823097 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.920905113 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.920908928 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.920969009 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.920970917 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.920984983 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.921026945 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.921763897 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.921828985 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.921858072 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.921912909 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.921950102 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.921998978 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.922656059 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.922744036 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.922750950 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.922764063 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.922816038 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.922867060 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.922913074 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.923676968 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.923744917 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.923751116 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.923782110 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.923816919 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.923823118 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.923841000 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.923842907 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.923863888 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.923868895 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.923922062 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.927429914 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.927501917 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.927634954 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.927707911 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.927819014 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.927872896 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.928076982 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.928128004 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.928704023 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.928740978 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.928760052 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.928771019 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.928823948 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.928831100 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.928836107 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.928875923 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.928880930 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.928935051 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.929260969 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.929299116 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.929325104 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.929328918 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.929351091 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.929768085 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.929824114 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.929828882 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.929874897 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.929913998 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.929919004 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.929996967 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.930054903 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.930088043 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.930104017 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.930109978 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.930143118 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.930768013 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.930805922 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.930836916 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.930844069 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.930871010 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.930912971 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.930943012 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.931030035 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.931035995 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.931759119 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.931817055 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.931880951 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.931885958 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.931935072 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.931983948 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.931989908 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.931996107 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.932041883 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.932770014 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.932811022 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.932876110 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.932879925 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.932895899 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.932900906 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.932954073 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.932957888 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.933000088 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.933706999 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.933743954 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.933785915 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.933800936 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.933837891 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.933856964 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.934360981 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.934393883 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.934418917 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.934431076 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.934467077 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.938669920 CEST	443	49792	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.938956976 CEST	49792	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.938971043 CEST	443	49792	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.939330101 CEST	443	49792	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.939853907 CEST	49792	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.939920902 CEST	443	49792	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.940184116 CEST	49792	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.953794956 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.954438925 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.954464912 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.954819918 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.955318928 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.955395937 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.955502987 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.962256908 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.962341070 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.962348938 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.962402105 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:01.987390995 CEST	443	49792	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:01.999404907 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.006869078 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.006927967 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.006967068 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.006973982 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.007034063 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.007714987 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.007745028 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.007800102 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.007805109 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.007848978 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.007920027 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.007970095 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.007977009 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.007996082 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.008014917 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.008263111 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.008332968 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.008338928 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.008447886 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.008510113 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.008514881 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.008615017 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.008657932 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.008681059 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.008694887 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.008723021 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.024370909 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.024399996 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.024440050 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.024449110 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.024503946 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.024674892 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.024691105 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.024750948 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.024759054 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.025276899 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.025295973 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.025350094 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.025377989 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.025751114 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.025804043 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.025819063 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.025831938 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.026896954 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.026949883 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.026957035 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027085066 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027285099 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027292967 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027307987 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027324915 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027342081 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.027350903 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027414083 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.027442932 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027455091 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027468920 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027477026 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027498960 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.027503967 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027534962 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.027648926 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027663946 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027681112 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027712107 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.027719021 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027754068 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.027770042 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027785063 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027825117 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.027831078 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.027867079 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.028371096 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.028390884 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.028434038 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.028441906 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.028470993 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.028548956 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.028573990 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.029086113 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.029593945 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.029675007 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.029740095 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.030261040 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.061923981 CEST	443	49795	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.062280893 CEST	49795	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.062294960 CEST	443	49795	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.062655926 CEST	443	49795	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.063107967 CEST	49795	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.063174009 CEST	443	49795	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.063298941 CEST	49795	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.069458008 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.069803953 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.069813013 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.070235968 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.070640087 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.070734024 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.070868015 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.071413994 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.078366995 CEST	443	49792	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.078460932 CEST	443	49792	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.078730106 CEST	49792	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.079790115 CEST	443	49796	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.082309961 CEST	443	49798	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.083206892 CEST	49796	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.083235979 CEST	443	49796	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.083364964 CEST	49798	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.083378077 CEST	443	49798	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.083600998 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.083678007 CEST	443	49796	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.083772898 CEST	443	49798	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.084266901 CEST	49796	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.084348917 CEST	443	49796	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.084666014 CEST	49798	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.084734917 CEST	443	49798	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.084893942 CEST	49796	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.085197926 CEST	49798	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.085650921 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.087094069 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.087110996 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.088192940 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.088285923 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.088836908 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.088895082 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.089508057 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.089514971 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.090174913 CEST	49792	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.090193987 CEST	443	49792	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.090682030 CEST	49811	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.090718031 CEST	443	49811	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.090848923 CEST	49811	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.092467070 CEST	49811	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.092478037 CEST	443	49811	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.092803001 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.093589067 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.093605995 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.094662905 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.094786882 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.094805002 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.094809055 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.094913006 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.094928026 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.095040083 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.095086098 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.095146894 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.095309019 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.095315933 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.095392942 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.095407963 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.095503092 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.095514059 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.095568895 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.095696926 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.095710993 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.095765114 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.095772028 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.095782995 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.095832109 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.095844030 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.095851898 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.095880985 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.095912933 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.095959902 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.096199036 CEST	49788	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.096213102 CEST	443	49788	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.096628904 CEST	49812	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.096664906 CEST	443	49812	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.096776962 CEST	49812	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.097414017 CEST	49812	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.097429991 CEST	443	49812	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.102159977 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.102555037 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.102565050 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.103064060 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.103095055 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.103146076 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.103152037 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.103215933 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.103687048 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.103710890 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.103754997 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.103760004 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.103806019 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.103908062 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.103925943 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.103986979 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.103991985 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.104036093 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.104039907 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.104336023 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.104361057 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.104393005 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.104398012 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.104434967 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.104649067 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.104859114 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.105627060 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.105673075 CEST	49789	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.105684996 CEST	443	49789	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.105709076 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.106319904 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.106355906 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.106390953 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.106410980 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.106431961 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.106451988 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.106900930 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.106985092 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.107023001 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.107069969 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.107070923 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.107083082 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.107135057 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.107141018 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.107392073 CEST	443	49795	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.107527971 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.107534885 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.107788086 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.107839108 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.107845068 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.112804890 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.112869978 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.112884045 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.115396023 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.121474981 CEST	443	49802	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.121762037 CEST	49802	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.121772051 CEST	443	49802	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.122143984 CEST	443	49802	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.124068022 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 1, 2024 00:41:02.126211882 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.127789021 CEST	49802	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.127866030 CEST	443	49802	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.128269911 CEST	49802	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.128607035 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.128618956 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.129133940 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.129434109 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.129523993 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.129782915 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.131397963 CEST	443	49798	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.131409883 CEST	443	49796	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.155606985 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.156202078 CEST	49805	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.156217098 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.156956911 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.157033920 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.157397032 CEST	49805	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.157550097 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.157623053 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.157635927 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.157783985 CEST	49805	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.158510923 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.158775091 CEST	49807	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.158801079 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.158840895 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.159014940 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.159271955 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.159352064 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.159367085 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.159403086 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.159579039 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.159588099 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.160111904 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.160180092 CEST	49807	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.160439968 CEST	49807	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.160506964 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.160568953 CEST	49807	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.160696030 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.160773993 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.161093950 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.161161900 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.161168098 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.162061930 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.162331104 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.162345886 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.165632010 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.165718079 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.166030884 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.166111946 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.166413069 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.166420937 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.172748089 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.172806025 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.172849894 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.172889948 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.172907114 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.172933102 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.172961950 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.172992945 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.173032045 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.173033953 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.173042059 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.173084974 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.173090935 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.173532963 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.173571110 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.173594952 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.173603058 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.173652887 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.175399065 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.175409079 CEST	443	49802	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.188049078 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.188056946 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.193151951 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.193196058 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.193212032 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.193228006 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.193272114 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.193320990 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.193329096 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.193371058 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.193682909 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.193789959 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.193821907 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.193866014 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.193875074 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.193923950 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.194528103 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.194668055 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.198935986 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.199445963 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.203418970 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.203440905 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.207398891 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.207710028 CEST	443	49796	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.207779884 CEST	443	49796	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.210064888 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.210144043 CEST	49796	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.212515116 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.212579012 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.212616920 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.212665081 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.212682009 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.212692022 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.212733984 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.212744951 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.212774038 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.212810040 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.212831974 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.212838888 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.212899923 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.213221073 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.213280916 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.213294029 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.219147921 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.219347000 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.219362020 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.220067024 CEST	49810	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.220079899 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.221158981 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.221234083 CEST	49810	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.222112894 CEST	49810	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.222181082 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.222820044 CEST	49810	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.222836971 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.223459959 CEST	49793	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.223483086 CEST	443	49793	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.225308895 CEST	49796	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.225322008 CEST	443	49796	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.225382090 CEST	443	49798	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.225429058 CEST	443	49798	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.225466013 CEST	443	49798	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.225507021 CEST	49798	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.225516081 CEST	443	49798	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.225554943 CEST	443	49798	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.225600004 CEST	49798	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.225615025 CEST	49798	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.230606079 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.230664015 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.230700970 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.230730057 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.230734110 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.230745077 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.230801105 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.230808973 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.230875015 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.230882883 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.231307983 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.231343031 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.231365919 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.231372118 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.231426001 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.231431961 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.235749006 CEST	49813	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.235781908 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.235868931 CEST	49813	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.236500978 CEST	49813	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.236514091 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.237386942 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.237597942 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.237610102 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.238897085 CEST	49798	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.238907099 CEST	443	49798	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.248594046 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.248732090 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.248791933 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.248812914 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.248900890 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.248974085 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.248981953 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.249088049 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.249135971 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.249142885 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.249219894 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.249248981 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.249258041 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.249293089 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.249316931 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.249317884 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.249324083 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.249336004 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.249361038 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.249370098 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.249398947 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.249428034 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.249444008 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.249449968 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.249470949 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.249711990 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.250051022 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.250056982 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.254749060 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.254847050 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.254851103 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.254878044 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.254980087 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.254987955 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.255708933 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.255778074 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.255790949 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.258747101 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.258821011 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.258852005 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.258913994 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.258935928 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.259021997 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.259607077 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.259674072 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.259706020 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.259723902 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.259735107 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.259778976 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.259922981 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.259990931 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.260025024 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.260066986 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.260075092 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.260416985 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.260724068 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.260778904 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.260813951 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.260849953 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.260859966 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.260868073 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.260895014 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.260940075 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.260999918 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.261260033 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.261324883 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.261362076 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.261365891 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.261377096 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.261425018 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.261442900 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.261507034 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.261516094 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.261800051 CEST	49794	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.261816978 CEST	443	49794	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.262151957 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.262186050 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.262239933 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.262248039 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.262334108 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.262650013 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.267373085 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.267402887 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.267510891 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.267519951 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.267770052 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.273472071 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.273612976 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.273665905 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.273710966 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.273729086 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.273744106 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.273781061 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.273809910 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.273859978 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.273888111 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.273893118 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.273940086 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.274146080 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.274274111 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.274317980 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.274338961 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.274344921 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.274446011 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.279515028 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.286940098 CEST	49814	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.286973953 CEST	443	49814	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.287141085 CEST	49814	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.287394047 CEST	49814	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.287405968 CEST	443	49814	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.296011925 CEST	49807	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.296030998 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.296031952 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.296034098 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.296047926 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.296051979 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.296065092 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.296076059 CEST	49810	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.297530890 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.297583103 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.297617912 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.297652006 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.297696114 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.297698021 CEST	49805	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.297708035 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.297724962 CEST	49805	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.297771931 CEST	49805	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.297780037 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.297821999 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.297856092 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.297857046 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.297879934 CEST	49807	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.297887087 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.297931910 CEST	49805	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.297940016 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.297940969 CEST	49807	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.297946930 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.297986031 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.298024893 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.298072100 CEST	49807	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.298079014 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.298141956 CEST	49807	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.298156023 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.298300982 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.298355103 CEST	49805	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.298382998 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.298450947 CEST	49807	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.298690081 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.298759937 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.298794031 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.298811913 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.298820972 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.298871040 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.299061060 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.299129963 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.299206972 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.299288034 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.299325943 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.299376965 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.299381018 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.299401045 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.299505949 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.299515009 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.299659967 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.299746037 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.299753904 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.300127029 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.300184011 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.300190926 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.300198078 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.300245047 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.300251007 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.300263882 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.300345898 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.302937984 CEST	49805	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.302957058 CEST	443	49805	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.303468943 CEST	49797	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.303479910 CEST	443	49797	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.312799931 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.312884092 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.312966108 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.312978029 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.312989950 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.313047886 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.313082933 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.313152075 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.313168049 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.313400030 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.313445091 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.313455105 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.313465118 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.313546896 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.317220926 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.317403078 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.317437887 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.317460060 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.317468882 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.317516088 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.317826033 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.317902088 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.317938089 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.317951918 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.317956924 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.318013906 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.318610907 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.318679094 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.318747997 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.318814993 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.318861961 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.318948030 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.319089890 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.319098949 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.320888042 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.320919037 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.324875116 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.324928045 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.324964046 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.325052023 CEST	49810	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.325062990 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.325330019 CEST	49810	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.325531006 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.325601101 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.325640917 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.325664043 CEST	49810	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.325675011 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.325834990 CEST	49810	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.326267004 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.326309919 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.326493025 CEST	49810	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.334631920 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.334832907 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.334913969 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.334928036 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.335011959 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.335092068 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.335099936 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.335140944 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.335202932 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.335225105 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.335258007 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.335306883 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.335340023 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.335360050 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.335376024 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.335423946 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.335478067 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.335530996 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.335608959 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.336534023 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.336570978 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.336605072 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.336627960 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.336628914 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.336637974 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.336698055 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.336698055 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.336831093 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.336899996 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.336930037 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.336956978 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.336977005 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.336983919 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.337024927 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.337694883 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.337743044 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.337748051 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.337785006 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.337862015 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.337867022 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.338520050 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.338556051 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.338574886 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.338579893 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.338629961 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.338634014 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.338651896 CEST	49806	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.338666916 CEST	443	49806	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.339118004 CEST	49807	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.339144945 CEST	443	49807	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.340528965 CEST	49801	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.340545893 CEST	443	49801	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.342408895 CEST	49800	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.342427015 CEST	443	49800	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.349677086 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.349760056 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.349800110 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.349848032 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.349859953 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.349917889 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.350357056 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.350418091 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.350572109 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.350579977 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.351068974 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.351110935 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.351155996 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.351162910 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.351172924 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.351186037 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.351241112 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.351402998 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.352014065 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.352087021 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.352122068 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.352216959 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.352227926 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.352356911 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.353084087 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.353250980 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.353283882 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.353306055 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.353315115 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.353429079 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.353921890 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.353996038 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.354032993 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.354078054 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.354099989 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.354110956 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.354135990 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.356055975 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.356192112 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.356199980 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.356894970 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.356945992 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.357018948 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.358763933 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.358786106 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.361551046 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.361618996 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.361653090 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.361716986 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.361726046 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.361784935 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.361923933 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.362056971 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.362096071 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.362112045 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.362117052 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.362157106 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.362163067 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.362988949 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.363023996 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.363053083 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.363059998 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.363104105 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.363586903 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.363689899 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.363727093 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.363739014 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.363744974 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.363787889 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.363830090 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.363835096 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.363895893 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.364470959 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.364643097 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.364681005 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.364715099 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.364718914 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.364729881 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.364775896 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.365458965 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.365516901 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.367693901 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.377438068 CEST	49810	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.377465010 CEST	443	49810	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.381737947 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.381787062 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.381804943 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.400279999 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.400331974 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.400650978 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.400928020 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.400948048 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.403011084 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.403064966 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.403148890 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.403429985 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.403440952 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.407381058 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.407432079 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.407475948 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.407516956 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.407516003 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.407531977 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.407583952 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.407583952 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.407596111 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.408327103 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.408374071 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.408390999 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.408404112 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.408530951 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.408647060 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.409240007 CEST	49808	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.409250021 CEST	443	49808	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.421286106 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.421307087 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.422035933 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.422075033 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.422096968 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.422118902 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.422158957 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.422168016 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.422238111 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.422244072 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.422298908 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.422638893 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.422646999 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.422709942 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.422714949 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.422760963 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.423146963 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.423154116 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.423230886 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.423235893 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.423290968 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.425543070 CEST	49799	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.425559998 CEST	443	49799	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.438246012 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.438307047 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.438373089 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.438450098 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.438465118 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.438509941 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.438546896 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.438575029 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.438608885 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.438617945 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.438673973 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.438838005 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.438872099 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.438901901 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.438934088 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.438957930 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.438957930 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.438963890 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.438976049 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.439027071 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.439399958 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.439445972 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.439483881 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.439511061 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.439518929 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.439531088 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.439559937 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.439599991 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.439657927 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.439672947 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.439682007 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.439737082 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.439748049 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.439754963 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.439795971 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.440341949 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.440403938 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.440440893 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.440476894 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.440478086 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.440488100 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.440515995 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.440561056 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.440562963 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.440581083 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.440623045 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.440629005 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.440663099 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.440706968 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.440742970 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.440763950 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.440773010 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.440812111 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.441308022 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.441354036 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.441382885 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.441427946 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.441427946 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.441440105 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.441452980 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.441498041 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.441515923 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.441525936 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.441562891 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.441581011 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.441590071 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.441643000 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.450341940 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.450407982 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.450486898 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.450500965 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.450647116 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.450654984 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.450684071 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.450690985 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.450697899 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.450721979 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.450743914 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.450752974 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.450767994 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.450773001 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.450813055 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.451266050 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.451319933 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.451370955 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.451414108 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.451472998 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.451524973 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.451530933 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.451584101 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.452218056 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.452292919 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.452575922 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.452636003 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.452724934 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.452776909 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.452785015 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.452846050 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.453448057 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.453511000 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.453558922 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.453609943 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.453633070 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.453686953 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.526839972 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.526933908 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.527025938 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.527026892 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.527040958 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.527122974 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.527247906 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.528373957 CEST	443	49795	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.528477907 CEST	443	49795	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.528503895 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.528531075 CEST	49795	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.534444094 CEST	49795	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.534459114 CEST	443	49795	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.537826061 CEST	49809	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.537842035 CEST	443	49809	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.538742065 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.538786888 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.538798094 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.538811922 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.538842916 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.538861990 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.538872004 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.538928986 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.538964987 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.539030075 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.539037943 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.539088964 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.539297104 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.539345026 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.539446115 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.539504051 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.539504051 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.539513111 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.539544106 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.539563894 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.539607048 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.539680004 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.539736986 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.539794922 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.539937973 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.539973974 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.539992094 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.539997101 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.540009022 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.540024042 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.540044069 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.540047884 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.540075064 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.540312052 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.540363073 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.540368080 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.540410042 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.540451050 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.540482998 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.540501118 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.540504932 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.540570021 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.540570021 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.545130968 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.545205116 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.545269012 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.545304060 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.545325041 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.545329094 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.545346022 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.545463085 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.545511961 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.545519114 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.545562029 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.545825005 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.545875072 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.545919895 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.545977116 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.546010017 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.546060085 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.546080112 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.546108961 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.546132088 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.546142101 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.546152115 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.546340942 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.546406031 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.546411037 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.546452045 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.565769911 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.576297998 CEST	443	49802	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.576431036 CEST	443	49802	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.576493979 CEST	49802	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.577120066 CEST	443	49811	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.577764988 CEST	49802	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.577781916 CEST	443	49802	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.578305960 CEST	49811	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.578315973 CEST	443	49811	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.578675032 CEST	443	49811	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.579493999 CEST	49818	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:02.579525948 CEST	443	49818	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:02.579608917 CEST	49818	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:02.579946041 CEST	49811	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.579952955 CEST	443	49812	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.580009937 CEST	443	49811	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.580147028 CEST	49818	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:02.580168009 CEST	443	49818	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:02.580296993 CEST	49812	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.580327034 CEST	443	49812	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.580432892 CEST	49811	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.580715895 CEST	443	49812	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.581053019 CEST	49812	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.581163883 CEST	49812	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.582679033 CEST	443	49812	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.586429119 CEST	49819	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.586441040 CEST	443	49819	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.586709023 CEST	49819	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.587022066 CEST	49819	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.587035894 CEST	443	49819	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.627330065 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.627404928 CEST	443	49811	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.627413034 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.627433062 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.627494097 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.627506018 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.627536058 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.627566099 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.627573967 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.627607107 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.627640963 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.627645969 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.627665997 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.627713919 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.628333092 CEST	49803	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.628345013 CEST	443	49803	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.629025936 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.629067898 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.629141092 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.631004095 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.631017923 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.643562078 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.643596888 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.643686056 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.643953085 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:02.643961906 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:02.686412096 CEST	49812	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.705415010 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.705744028 CEST	49813	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.705754042 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.706115007 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.706746101 CEST	49813	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.706810951 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.706923962 CEST	49813	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.714529991 CEST	443	49811	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.714579105 CEST	443	49811	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.714622021 CEST	443	49811	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.714673042 CEST	49811	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.714679956 CEST	443	49811	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.714720964 CEST	443	49811	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.714756012 CEST	49811	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.714931965 CEST	49811	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.717946053 CEST	443	49812	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.718039989 CEST	443	49812	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.718379974 CEST	49812	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.736598969 CEST	49811	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.736623049 CEST	443	49811	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.737198114 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.737236977 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.737301111 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.737912893 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.737925053 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.738955021 CEST	49812	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.738975048 CEST	443	49812	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.751152992 CEST	443	49814	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.751396894 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.751621962 CEST	49814	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.751636982 CEST	443	49814	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.752007961 CEST	443	49814	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.752706051 CEST	49814	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.752772093 CEST	443	49814	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.753437996 CEST	49814	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.799401045 CEST	443	49814	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.823112965 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.832231998 CEST	49813	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.848747015 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.848807096 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.848854065 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.848901033 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.848929882 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.848973989 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.848999977 CEST	49813	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.849009991 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.849113941 CEST	49813	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.849299908 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:02.849390984 CEST	49813	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:02.860336065 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.871638060 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.882102966 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.882117033 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.882277966 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.882308006 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.883372068 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.883434057 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.885153055 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.885377884 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.885986090 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.886066914 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.887828112 CEST	443	49814	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.887887001 CEST	443	49814	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.887916088 CEST	443	49814	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.887953997 CEST	49814	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.887964964 CEST	443	49814	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.887984991 CEST	443	49814	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.888005018 CEST	49814	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.888040066 CEST	49814	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.947483063 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.947498083 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.948055983 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.958334923 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.958733082 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.960648060 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.960802078 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.961308956 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.961330891 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.961548090 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:02.961565018 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:02.961962938 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.007404089 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.046499014 CEST	443	49818	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:03.049323082 CEST	443	49819	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073184967 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073259115 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073297024 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073357105 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073386908 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.073390961 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073393106 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073404074 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073447943 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.073447943 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.073462009 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073498011 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.073508024 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073561907 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.073570013 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073654890 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073751926 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073833942 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073894024 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.073901892 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.073915005 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.073928118 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.076359034 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.076416016 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.076422930 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.076456070 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.076462984 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.076476097 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.076528072 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.076535940 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.076545000 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.076585054 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.076913118 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.076991081 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.077035904 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.077044010 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.077789068 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.077842951 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.077886105 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.077914953 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.077919960 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.077923059 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.077927113 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.078008890 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.078016996 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.078274012 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.078306913 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.078330994 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.078365088 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.078372955 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.078397989 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.081147909 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.081202030 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.081208944 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.099970102 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.101927042 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.159987926 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160021067 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160048962 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160103083 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.160129070 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160144091 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.160216093 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160250902 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160258055 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.160263062 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160303116 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.160307884 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160564899 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160643101 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160718918 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160726070 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.160746098 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160777092 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160813093 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160818100 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.160829067 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.160830975 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160835028 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160891056 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.160896063 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.160897017 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.160904884 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.161118031 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.161324024 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.161365986 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.161380053 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.161386013 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.161398888 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.161475897 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.161511898 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.161524057 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.161529064 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.161577940 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.162287951 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.162338972 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.162343025 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.162350893 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.162377119 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.162396908 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.162400961 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.162439108 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.162493944 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.162499905 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.162545919 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.162847996 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.162879944 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.162894964 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.162903070 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.162936926 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.162942886 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.162950039 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.162987947 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.162993908 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.163017988 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.163091898 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.172035933 CEST	49818	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:03.172045946 CEST	443	49818	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:03.173300982 CEST	443	49818	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:03.173311949 CEST	443	49818	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:03.173372984 CEST	49818	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:03.195663929 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.205142021 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.223134041 CEST	49819	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.223151922 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.223151922 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.247035027 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.247067928 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.247096062 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.247138023 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.247138977 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.247181892 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.247193098 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.247220993 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.248198032 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.248245955 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.248256922 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.248270035 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.248306036 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.248311996 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.248322964 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.248358011 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.248552084 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.248595953 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.248604059 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.248610973 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.248641014 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.249330997 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.249380112 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.249387026 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.249429941 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.249434948 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.249447107 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.249481916 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.249644041 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.249675989 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.249695063 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.249701977 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.249727964 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.250310898 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.250368118 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.250376940 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.250415087 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.250418901 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.250426054 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.250462055 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.251156092 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.251214027 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.254491091 CEST	49818	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:03.254679918 CEST	443	49818	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:03.254746914 CEST	49819	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.254754066 CEST	443	49819	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.255310059 CEST	443	49819	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.255996943 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.260934114 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.260947943 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.261501074 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.267206907 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.267219067 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.267791033 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.276539087 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.276640892 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.277164936 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.277185917 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.277719975 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.278168917 CEST	49819	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.278310061 CEST	443	49819	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.278723001 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.278830051 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.279285908 CEST	49818	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:03.279300928 CEST	443	49818	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:03.279874086 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.279947042 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.280402899 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.280530930 CEST	49819	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.280575991 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.280623913 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.297996044 CEST	49813	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:03.298013926 CEST	443	49813	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:03.298521996 CEST	49814	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.298544884 CEST	443	49814	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.306446075 CEST	49817	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.306466103 CEST	443	49817	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.308480978 CEST	49816	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.308502913 CEST	443	49816	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.323404074 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.323405981 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.323406935 CEST	443	49819	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.323421955 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.331901073 CEST	49818	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:03.336560011 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.336628914 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.336658001 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.336708069 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.336719990 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.336788893 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.336795092 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.336846113 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.337049961 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.337090969 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.337116957 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.337126970 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.337143898 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.337176085 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.337347031 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.337395906 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.337426901 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.337474108 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.337523937 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.337574005 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.338351965 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.338406086 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.338413000 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.338462114 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.338466883 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.338517904 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.339232922 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.339283943 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.339322090 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.339379072 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.339410067 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.339466095 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.340198040 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.340246916 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.340274096 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.340281010 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.340306997 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.340317011 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.340326071 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.340331078 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.340363979 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.341218948 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.341331959 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.341339111 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.341391087 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.341415882 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.341423035 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.341432095 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.341437101 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.341476917 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.341483116 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.341537952 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.342196941 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.342255116 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.342365980 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.342423916 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.342432976 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.342447996 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.342478991 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.343004942 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.343050957 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.343056917 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.343101978 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.351377010 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.377561092 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.377623081 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.377664089 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.377669096 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.377687931 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.377722979 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.377729893 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.377767086 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.377801895 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.377829075 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.377834082 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.377845049 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.377880096 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.378106117 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.378154993 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.378160954 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.382118940 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.382148027 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.382170916 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.382179022 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.382220030 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.391521931 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.391568899 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.391607046 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.391642094 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.391663074 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.391675949 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.391711950 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.391736984 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.391751051 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.391752958 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.391762018 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.391792059 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.392107964 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.392174006 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.392429113 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.392436028 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.396150112 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.396203041 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.396209002 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.399503946 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.399552107 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.399584055 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.399610996 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.399633884 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.399635077 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.399652004 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.399681091 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.399883032 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.400176048 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.400249958 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.400274038 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.400320053 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.400326967 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.400469065 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.400981903 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.404298067 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.404376984 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.404383898 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.421725988 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.421818972 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.421834946 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.421854973 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.421947002 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.424232006 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.424252987 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.424298048 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.424304008 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.424316883 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.424340010 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.424345970 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.424393892 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.424401999 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.424427986 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.424443960 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.424447060 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.424458981 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.424482107 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.424496889 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.424504042 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.424529076 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.424546003 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.424554110 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.424645901 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.429264069 CEST	49823	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:03.429296970 CEST	443	49823	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:03.429411888 CEST	49823	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:03.429924965 CEST	49823	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:03.429935932 CEST	443	49823	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:03.453448057 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.462085009 CEST	49815	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.462102890 CEST	443	49815	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.464732885 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.464797974 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.464852095 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.464864016 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.465073109 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.465137005 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.465143919 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.465356112 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.465393066 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.465413094 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.465420961 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.465617895 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.465816975 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.466025114 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.466053963 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.466074944 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.466082096 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.466120005 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.466150999 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.466165066 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.466173887 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.466216087 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.466717958 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.466830969 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.466872931 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.466876984 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.466885090 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.466916084 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.466949940 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.466995955 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.467005014 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.468107939 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.468184948 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.468194008 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.469598055 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.469679117 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.469762087 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.469768047 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.469824076 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.469827890 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.476473093 CEST	49824	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.476506948 CEST	443	49824	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.476738930 CEST	49824	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.477174044 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.477209091 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.477363110 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.477654934 CEST	49824	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.477669001 CEST	443	49824	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.477830887 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.477843046 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.478306055 CEST	443	49818	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:03.479444981 CEST	49818	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:03.479489088 CEST	443	49818	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:03.479604006 CEST	49818	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:03.479794025 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.479837894 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.479851007 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.479856968 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.479896069 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.479898930 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.479906082 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.479945898 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.480087996 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.480349064 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.480395079 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.480427027 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.480456114 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.480460882 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.480470896 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.480530024 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.480573893 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.481682062 CEST	49826	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:03.481690884 CEST	443	49826	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:03.481755972 CEST	49820	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.481765032 CEST	443	49820	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.481794119 CEST	49826	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:03.482436895 CEST	49826	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:03.482449055 CEST	443	49826	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:03.486346960 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.486376047 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.486406088 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.486424923 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.486433029 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.486464977 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.486629009 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.486654043 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.486699104 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.486705065 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.486751080 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.486774921 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.486803055 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.486809015 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.486820936 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.487574100 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.487601042 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.487627029 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.487631083 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.487678051 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.487682104 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.488231897 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.488256931 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.488289118 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.488293886 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.488321066 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.488336086 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.488341093 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.488365889 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.488383055 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.488387108 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.488428116 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.531816006 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.552414894 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.552597046 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.552649975 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.552660942 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.552743912 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.552824020 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.552871943 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.552876949 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.552918911 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.552922964 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.553034067 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.553083897 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.553087950 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.553177118 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.553261042 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.553272963 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.553277969 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.553317070 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.553342104 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.553478956 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.553529024 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.553533077 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.553612947 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.553694963 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.553709984 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.553714991 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.553780079 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.553783894 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.553896904 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.553945065 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.553950071 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.554058075 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.554105043 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.554110050 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.554229021 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.554310083 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.554362059 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.554367065 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.554409981 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.554414034 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.554518938 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.554608107 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.554651976 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.554657936 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.554707050 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.554711103 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.554811954 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.554882050 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.554886103 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.554958105 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.555016041 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.555020094 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.555111885 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.555192947 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.555236101 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.555243015 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.555282116 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.555285931 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.555422068 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.555502892 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.555547953 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.555553913 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.555589914 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.555598021 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.555721045 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.555784941 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.555824041 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.555830002 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.555862904 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.573242903 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.573292017 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.573340893 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.573379993 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.573407888 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.573458910 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.573465109 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.573510885 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.573546886 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.573597908 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.573610067 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.573663950 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.574055910 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.574119091 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.574182987 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.574227095 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.574232101 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.574765921 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.574824095 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.574831009 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.574852943 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.574877024 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.574904919 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.575572014 CEST	49822	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.575586081 CEST	443	49822	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.639983892 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.640055895 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.640125036 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.640137911 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.640156984 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.640217066 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.640245914 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.640278101 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.643516064 CEST	49821	443	192.168.2.7	35.190.14.188
Oct 1, 2024 00:41:03.643534899 CEST	443	49821	35.190.14.188	192.168.2.7
Oct 1, 2024 00:41:03.655196905 CEST	49827	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.655225039 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.655411959 CEST	49827	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.656162024 CEST	49827	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.656179905 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.706638098 CEST	443	49819	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.706744909 CEST	443	49819	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.706805944 CEST	49819	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.708710909 CEST	49819	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:03.708724976 CEST	443	49819	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.893763065 CEST	443	49823	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:03.898276091 CEST	49823	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:03.898313046 CEST	443	49823	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:03.898746967 CEST	443	49823	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:03.899698019 CEST	49823	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:03.899776936 CEST	443	49823	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:03.900387049 CEST	49823	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:03.900542021 CEST	49823	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:03.900577068 CEST	443	49823	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:03.900758028 CEST	49823	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:03.943429947 CEST	443	49823	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:03.973761082 CEST	443	49826	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:03.975050926 CEST	443	49824	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:03.979557991 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.006710052 CEST	49826	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.006735086 CEST	443	49826	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.006930113 CEST	49824	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.006938934 CEST	443	49824	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.007102013 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.007153034 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.007970095 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.007987022 CEST	443	49826	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.008068085 CEST	49826	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.008306980 CEST	443	49824	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.030255079 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.030376911 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.030786037 CEST	49826	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.030992031 CEST	443	49826	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.031220913 CEST	49824	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.031308889 CEST	443	49824	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.031646013 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.031697989 CEST	49826	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.031711102 CEST	443	49826	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.031757116 CEST	49824	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.075407982 CEST	443	49824	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.075412989 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.091659069 CEST	443	49823	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:04.091727018 CEST	443	49823	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:04.092024088 CEST	49823	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:04.092565060 CEST	49826	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.100935936 CEST	49823	443	192.168.2.7	104.16.141.114
Oct 1, 2024 00:41:04.100958109 CEST	443	49823	104.16.141.114	192.168.2.7
Oct 1, 2024 00:41:04.135976076 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.136492014 CEST	49827	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.136518002 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.136856079 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.137665987 CEST	49827	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.137721062 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.138021946 CEST	49827	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.145854950 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.145906925 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.145934105 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.145962000 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.145979881 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.145987988 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.146001101 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.146013975 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.146030903 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.146040916 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.146071911 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.146106958 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.146112919 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.146629095 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.146656990 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.146682024 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.146698952 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.146706104 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.146729946 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.146765947 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.146800995 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.148037910 CEST	49825	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.148049116 CEST	443	49825	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.179399014 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.243400097 CEST	443	49826	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.246939898 CEST	49828	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.246978998 CEST	443	49828	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.247075081 CEST	49828	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.247787952 CEST	49828	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.247792959 CEST	443	49826	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.247803926 CEST	443	49828	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.247870922 CEST	49826	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.248656034 CEST	49826	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.248671055 CEST	443	49826	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.258367062 CEST	49829	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.258390903 CEST	443	49829	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.258547068 CEST	49829	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.259316921 CEST	49829	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.259334087 CEST	443	49829	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.269582987 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.269639015 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.269676924 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.269680023 CEST	49827	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.269705057 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.269747972 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.269781113 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.269787073 CEST	49827	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.269797087 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.269817114 CEST	49827	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.269871950 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.269917011 CEST	49827	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.308384895 CEST	49830	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.308418036 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.308556080 CEST	49830	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.309361935 CEST	49830	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.309375048 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.311507940 CEST	49827	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.311536074 CEST	443	49827	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.342713118 CEST	49831	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.342741013 CEST	443	49831	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.342931986 CEST	49831	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.345905066 CEST	49831	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.345915079 CEST	443	49831	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.435973883 CEST	443	49824	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.436254025 CEST	443	49824	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.436460972 CEST	49824	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.438812017 CEST	49824	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.438832998 CEST	443	49824	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.707840919 CEST	443	49828	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.708070040 CEST	49828	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.708085060 CEST	443	49828	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.708930016 CEST	443	49828	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.709702015 CEST	49828	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.709863901 CEST	49828	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.709871054 CEST	443	49828	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.710053921 CEST	443	49828	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.722055912 CEST	443	49829	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.722244978 CEST	49829	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.722251892 CEST	443	49829	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.722577095 CEST	443	49829	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.723155022 CEST	49829	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.723202944 CEST	443	49829	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.723375082 CEST	49829	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.763395071 CEST	443	49829	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.787178993 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.787575006 CEST	49830	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.787590027 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.788048983 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.788394928 CEST	49830	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.788470984 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.788543940 CEST	49830	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.794828892 CEST	49828	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.806266069 CEST	443	49831	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.806457996 CEST	49831	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.806466103 CEST	443	49831	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.807499886 CEST	443	49831	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.807569027 CEST	49831	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.808048010 CEST	49831	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.808161020 CEST	49831	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.809077024 CEST	443	49831	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.831393003 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.843064070 CEST	443	49828	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.843130112 CEST	443	49828	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.843373060 CEST	49828	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.843843937 CEST	49828	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.843874931 CEST	443	49828	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.843885899 CEST	49828	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.843928099 CEST	49828	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.938441038 CEST	443	49829	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.938757896 CEST	443	49829	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.938941002 CEST	49829	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.938957930 CEST	443	49829	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.938968897 CEST	49829	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.939012051 CEST	49829	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.939776897 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.939841986 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.939879894 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.939951897 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.939956903 CEST	49830	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.939980030 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.940001011 CEST	49830	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.940402985 CEST	49832	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.940438986 CEST	443	49832	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.940855980 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.940882921 CEST	49832	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.940900087 CEST	49830	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.940911055 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.941158056 CEST	49832	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:04.941173077 CEST	443	49832	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:04.941947937 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.941992998 CEST	49830	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.941998005 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.942945004 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.942982912 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.942995071 CEST	49830	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.943001032 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.943109035 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:04.943159103 CEST	49830	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.943303108 CEST	49830	443	192.168.2.7	104.16.140.114
Oct 1, 2024 00:41:04.943314075 CEST	443	49830	104.16.140.114	192.168.2.7
Oct 1, 2024 00:41:05.015408039 CEST	443	49831	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:05.015470982 CEST	49831	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:05.030102968 CEST	443	49831	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:05.030940056 CEST	443	49831	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:05.030993938 CEST	49831	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:05.032107115 CEST	49831	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:05.032118082 CEST	443	49831	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:05.410135984 CEST	443	49832	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:05.492384911 CEST	49832	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:05.492403030 CEST	443	49832	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:05.492953062 CEST	443	49832	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:05.493688107 CEST	49832	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:05.493760109 CEST	443	49832	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:05.493822098 CEST	49832	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:05.539407015 CEST	443	49832	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:05.591718912 CEST	49832	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:05.721120119 CEST	443	49832	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:05.721929073 CEST	443	49832	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:05.722007990 CEST	49832	443	192.168.2.7	35.241.3.184
Oct 1, 2024 00:41:05.722022057 CEST	443	49832	35.241.3.184	192.168.2.7
Oct 1, 2024 00:41:05.726346016 CEST	443	49832	35.241.3.184	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 1, 2024 00:40:39.634392977 CEST	192.168.2.7	1.1.1.1	0xb024	Standard query (0)	bankwir.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:39.636604071 CEST	192.168.2.7	1.1.1.1	0x34b3	Standard query (0)	bankwir.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:40.150624037 CEST	192.168.2.7	1.1.1.1	0xa84d	Standard query (0)	www.bankwir.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:40.150918007 CEST	192.168.2.7	1.1.1.1	0x81e0	Standard query (0)	www.bankwir.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:40.944683075 CEST	192.168.2.7	1.1.1.1	0x8c87	Standard query (0)	img.sedoparking.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:40.944848061 CEST	192.168.2.7	1.1.1.1	0x534c	Standard query (0)	img.sedoparking.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:40.949081898 CEST	192.168.2.7	1.1.1.1	0x1df1	Standard query (0)	img.sedoparking.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:40.949246883 CEST	192.168.2.7	1.1.1.1	0x1854	Standard query (0)	img.sedoparking.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:40.965743065 CEST	192.168.2.7	1.1.1.1	0x51e6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:40.965912104 CEST	192.168.2.7	1.1.1.1	0x57ea	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:41.802120924 CEST	192.168.2.7	1.1.1.1	0x679f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:41.838687897 CEST	192.168.2.7	1.1.1.1	0xf2a1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:42.084239960 CEST	192.168.2.7	1.1.1.1	0x69fc	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:42.084789991 CEST	192.168.2.7	1.1.1.1	0xf789	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 1, 2024 00:40:42.731127024 CEST	192.168.2.7	1.1.1.1	0x2247	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:42.732465982 CEST	192.168.2.7	1.1.1.1	0xb029	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 1, 2024 00:40:43.552865028 CEST	192.168.2.7	1.1.1.1	0xd19b	Standard query (0)	img.sedoparking.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:43.553653002 CEST	192.168.2.7	1.1.1.1	0x2e4f	Standard query (0)	img.sedoparking.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:43.554594994 CEST	192.168.2.7	1.1.1.1	0x5ca4	Standard query (0)	img.sedoparking.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:43.554594994 CEST	192.168.2.7	1.1.1.1	0xcef2	Standard query (0)	img.sedoparking.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:43.555609941 CEST	192.168.2.7	1.1.1.1	0x9329	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:43.555609941 CEST	192.168.2.7	1.1.1.1	0x2af5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:43.556360960 CEST	192.168.2.7	1.1.1.1	0x80ae	Standard query (0)	www.bankwir.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:43.556905985 CEST	192.168.2.7	1.1.1.1	0x5841	Standard query (0)	www.bankwir.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:45.736848116 CEST	192.168.2.7	1.1.1.1	0x9687	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:45.737210035 CEST	192.168.2.7	1.1.1.1	0xd800	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 1, 2024 00:40:46.747453928 CEST	192.168.2.7	1.1.1.1	0x8775	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:46.747605085 CEST	192.168.2.7	1.1.1.1	0xd26b	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:48.166305065 CEST	192.168.2.7	1.1.1.1	0x9179	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:48.166541100 CEST	192.168.2.7	1.1.1.1	0x3c25	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:51.791733980 CEST	192.168.2.7	1.1.1.1	0xacb6	Standard query (0)	www.sedo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:51.792138100 CEST	192.168.2.7	1.1.1.1	0x431a	Standard query (0)	www.sedo.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:52.707684040 CEST	192.168.2.7	1.1.1.1	0xb7fa	Standard query (0)	sedo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:52.708466053 CEST	192.168.2.7	1.1.1.1	0x4895	Standard query (0)	sedo.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:54.358191013 CEST	192.168.2.7	1.1.1.1	0x1d4d	Standard query (0)	sedo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:54.358894110 CEST	192.168.2.7	1.1.1.1	0xca82	Standard query (0)	sedo.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:58.102567911 CEST	192.168.2.7	1.1.1.1	0x47f6	Standard query (0)	cdn.sedo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:58.103034973 CEST	192.168.2.7	1.1.1.1	0xefbb	Standard query (0)	cdn.sedo.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:58.976850033 CEST	192.168.2.7	1.1.1.1	0x1e34	Standard query (0)	cdn.sedo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:58.977142096 CEST	192.168.2.7	1.1.1.1	0x1f74	Standard query (0)	cdn.sedo.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:59.274048090 CEST	192.168.2.7	1.1.1.1	0x1270	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:59.274185896 CEST	192.168.2.7	1.1.1.1	0xe325	Standard query (0)	widget.trustpilot.com	65	IN (0x0001)	false
Oct 1, 2024 00:40:59.942679882 CEST	192.168.2.7	1.1.1.1	0xe8ef	Standard query (0)	sedo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:59.942858934 CEST	192.168.2.7	1.1.1.1	0xa26b	Standard query (0)	sedo.com	65	IN (0x0001)	false
Oct 1, 2024 00:41:00.610554934 CEST	192.168.2.7	1.1.1.1	0x9ee5	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:00.610836983 CEST	192.168.2.7	1.1.1.1	0x46e7	Standard query (0)	widget.trustpilot.com	65	IN (0x0001)	false
Oct 1, 2024 00:41:01.044631004 CEST	192.168.2.7	1.1.1.1	0xb01	Standard query (0)	app.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:01.045286894 CEST	192.168.2.7	1.1.1.1	0x6aaf	Standard query (0)	app.usercentrics.eu	65	IN (0x0001)	false
Oct 1, 2024 00:41:01.724261999 CEST	192.168.2.7	1.1.1.1	0x7d31	Standard query (0)	app.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:01.724494934 CEST	192.168.2.7	1.1.1.1	0x2a52	Standard query (0)	app.usercentrics.eu	65	IN (0x0001)	false
Oct 1, 2024 00:41:02.568691969 CEST	192.168.2.7	1.1.1.1	0xc7ac	Standard query (0)	api.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:02.569092989 CEST	192.168.2.7	1.1.1.1	0x4bf9	Standard query (0)	api.usercentrics.eu	65	IN (0x0001)	false
Oct 1, 2024 00:41:04.317774057 CEST	192.168.2.7	1.1.1.1	0xf693	Standard query (0)	api.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:04.318372965 CEST	192.168.2.7	1.1.1.1	0xfd51	Standard query (0)	api.usercentrics.eu	65	IN (0x0001)	false
Oct 1, 2024 00:41:06.128774881 CEST	192.168.2.7	1.1.1.1	0x2709	Standard query (0)	app.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:06.129442930 CEST	192.168.2.7	1.1.1.1	0xe6e9	Standard query (0)	app.usercentrics.eu	65	IN (0x0001)	false
Oct 1, 2024 00:41:11.079781055 CEST	192.168.2.7	1.1.1.1	0x2d55	Standard query (0)	consent-api.service.consent.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:11.080173969 CEST	192.168.2.7	1.1.1.1	0x571e	Standard query (0)	consent-api.service.consent.usercentrics.eu	65	IN (0x0001)	false
Oct 1, 2024 00:41:11.146286964 CEST	192.168.2.7	1.1.1.1	0xf5a0	Standard query (0)	uct.service.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:11.146435976 CEST	192.168.2.7	1.1.1.1	0x901d	Standard query (0)	uct.service.usercentrics.eu	65	IN (0x0001)	false
Oct 1, 2024 00:41:11.935365915 CEST	192.168.2.7	1.1.1.1	0xbcb	Standard query (0)	uct.service.usercentrics.eu	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:11.935509920 CEST	192.168.2.7	1.1.1.1	0x1306	Standard query (0)	uct.service.usercentrics.eu	65	IN (0x0001)	false
Oct 1, 2024 00:41:27.064723969 CEST	192.168.2.7	1.1.1.1	0xe1ec	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:27.064882040 CEST	192.168.2.7	1.1.1.1	0x2318	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 00:41:44.412004948 CEST	192.168.2.7	1.1.1.1	0xc3fd	Standard query (0)	www.bankwir.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:44.412516117 CEST	192.168.2.7	1.1.1.1	0xceeb	Standard query (0)	www.bankwir.com	65	IN (0x0001)	false
Oct 1, 2024 00:41:45.241705894 CEST	192.168.2.7	1.1.1.1	0x9c8d	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:45.241940022 CEST	192.168.2.7	1.1.1.1	0x7aa8	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 1, 2024 00:41:45.328567028 CEST	192.168.2.7	1.1.1.1	0xd6a6	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:45.328785896 CEST	192.168.2.7	1.1.1.1	0x4bdb	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 1, 2024 00:41:53.785082102 CEST	192.168.2.7	1.1.1.1	0xddce	Standard query (0)	www.bankwir.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:53.785208941 CEST	192.168.2.7	1.1.1.1	0x5c5f	Standard query (0)	www.bankwir.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 1, 2024 00:40:39.662945032 CEST	1.1.1.1	192.168.2.7	0xb024	No error (0)	bankwir.com		162.255.119.21	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:40.179007053 CEST	1.1.1.1	192.168.2.7	0x81e0	No error (0)	www.bankwir.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:40.207900047 CEST	1.1.1.1	192.168.2.7	0xa84d	No error (0)	www.bankwir.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:40.207900047 CEST	1.1.1.1	192.168.2.7	0xa84d	No error (0)	parkingpage.namecheap.com		91.195.240.19	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:40.952198982 CEST	1.1.1.1	192.168.2.7	0x534c	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:40.952198982 CEST	1.1.1.1	192.168.2.7	0x534c	No error (0)	sedo.cachefly.net	vip1.g5.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:40.952630043 CEST	1.1.1.1	192.168.2.7	0x8c87	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:40.952630043 CEST	1.1.1.1	192.168.2.7	0x8c87	No error (0)	sedo.cachefly.net	vip1.g5.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:40.952630043 CEST	1.1.1.1	192.168.2.7	0x8c87	No error (0)	vip1.g5.cachefly.net		205.234.175.175	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:40.956245899 CEST	1.1.1.1	192.168.2.7	0x1df1	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:40.956245899 CEST	1.1.1.1	192.168.2.7	0x1df1	No error (0)	sedo.cachefly.net	vip1.g5.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:40.956245899 CEST	1.1.1.1	192.168.2.7	0x1df1	No error (0)	vip1.g5.cachefly.net		205.234.175.175	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:40.956265926 CEST	1.1.1.1	192.168.2.7	0x1854	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:40.956265926 CEST	1.1.1.1	192.168.2.7	0x1854	No error (0)	sedo.cachefly.net	vip1.g5.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:40.972721100 CEST	1.1.1.1	192.168.2.7	0x51e6	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:40.972754002 CEST	1.1.1.1	192.168.2.7	0x57ea	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 00:40:41.809211969 CEST	1.1.1.1	192.168.2.7	0x679f	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:41.845432997 CEST	1.1.1.1	192.168.2.7	0xf2a1	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 00:40:42.093800068 CEST	1.1.1.1	192.168.2.7	0x69fc	No error (0)	syndicatedsearch.goog		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:42.737718105 CEST	1.1.1.1	192.168.2.7	0x2247	No error (0)	syndicatedsearch.goog		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:43.560518026 CEST	1.1.1.1	192.168.2.7	0xd19b	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:43.560518026 CEST	1.1.1.1	192.168.2.7	0xd19b	No error (0)	sedo.cachefly.net	vip1.g5.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:43.560518026 CEST	1.1.1.1	192.168.2.7	0xd19b	No error (0)	vip1.g5.cachefly.net		205.234.175.175	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:43.561935902 CEST	1.1.1.1	192.168.2.7	0xcef2	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:43.561935902 CEST	1.1.1.1	192.168.2.7	0xcef2	No error (0)	sedo.cachefly.net	vip1.g5.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:43.562124014 CEST	1.1.1.1	192.168.2.7	0x9329	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:43.562323093 CEST	1.1.1.1	192.168.2.7	0x2af5	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 00:40:43.564950943 CEST	1.1.1.1	192.168.2.7	0x5ca4	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:43.564950943 CEST	1.1.1.1	192.168.2.7	0x5ca4	No error (0)	sedo.cachefly.net		205.234.175.175	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:43.567094088 CEST	1.1.1.1	192.168.2.7	0x2e4f	No error (0)	img.sedoparking.com	sedo.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:43.567094088 CEST	1.1.1.1	192.168.2.7	0x2e4f	No error (0)	sedo.cachefly.net	vip1.g5.cachefly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:43.593518972 CEST	1.1.1.1	192.168.2.7	0x5841	No error (0)	www.bankwir.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:43.597758055 CEST	1.1.1.1	192.168.2.7	0x80ae	No error (0)	www.bankwir.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:43.597758055 CEST	1.1.1.1	192.168.2.7	0x80ae	No error (0)	parkingpage.namecheap.com		91.195.240.19	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:45.744379044 CEST	1.1.1.1	192.168.2.7	0x9687	No error (0)	syndicatedsearch.goog		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:46.756320000 CEST	1.1.1.1	192.168.2.7	0xd26b	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:46.756812096 CEST	1.1.1.1	192.168.2.7	0x8775	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:46.756812096 CEST	1.1.1.1	192.168.2.7	0x8775	No error (0)	googlehosted.l.googleusercontent.com		172.217.18.1	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:48.174721003 CEST	1.1.1.1	192.168.2.7	0x3c25	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:48.175079107 CEST	1.1.1.1	192.168.2.7	0x9179	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:40:48.175079107 CEST	1.1.1.1	192.168.2.7	0x9179	No error (0)	googlehosted.l.googleusercontent.com		142.250.186.161	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:51.800488949 CEST	1.1.1.1	192.168.2.7	0xacb6	No error (0)	www.sedo.com		104.16.140.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:51.800488949 CEST	1.1.1.1	192.168.2.7	0xacb6	No error (0)	www.sedo.com		104.16.141.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:52.714790106 CEST	1.1.1.1	192.168.2.7	0xb7fa	No error (0)	sedo.com		104.16.141.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:52.714790106 CEST	1.1.1.1	192.168.2.7	0xb7fa	No error (0)	sedo.com		104.16.140.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:54.366873980 CEST	1.1.1.1	192.168.2.7	0x1d4d	No error (0)	sedo.com		104.16.140.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:54.366873980 CEST	1.1.1.1	192.168.2.7	0x1d4d	No error (0)	sedo.com		104.16.141.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:58.110657930 CEST	1.1.1.1	192.168.2.7	0x47f6	No error (0)	cdn.sedo.com		104.16.140.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:58.110657930 CEST	1.1.1.1	192.168.2.7	0x47f6	No error (0)	cdn.sedo.com		104.16.141.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:58.986345053 CEST	1.1.1.1	192.168.2.7	0x1e34	No error (0)	cdn.sedo.com		104.16.140.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:58.986345053 CEST	1.1.1.1	192.168.2.7	0x1e34	No error (0)	cdn.sedo.com		104.16.141.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:59.282593012 CEST	1.1.1.1	192.168.2.7	0x1270	No error (0)	widget.trustpilot.com		52.222.236.60	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:59.282593012 CEST	1.1.1.1	192.168.2.7	0x1270	No error (0)	widget.trustpilot.com		52.222.236.94	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:59.282593012 CEST	1.1.1.1	192.168.2.7	0x1270	No error (0)	widget.trustpilot.com		52.222.236.107	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:59.282593012 CEST	1.1.1.1	192.168.2.7	0x1270	No error (0)	widget.trustpilot.com		52.222.236.71	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:59.950627089 CEST	1.1.1.1	192.168.2.7	0xe8ef	No error (0)	sedo.com		104.16.140.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:40:59.950627089 CEST	1.1.1.1	192.168.2.7	0xe8ef	No error (0)	sedo.com		104.16.141.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:00.618730068 CEST	1.1.1.1	192.168.2.7	0x9ee5	No error (0)	widget.trustpilot.com		52.222.236.60	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:00.618730068 CEST	1.1.1.1	192.168.2.7	0x9ee5	No error (0)	widget.trustpilot.com		52.222.236.71	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:00.618730068 CEST	1.1.1.1	192.168.2.7	0x9ee5	No error (0)	widget.trustpilot.com		52.222.236.94	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:00.618730068 CEST	1.1.1.1	192.168.2.7	0x9ee5	No error (0)	widget.trustpilot.com		52.222.236.107	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:01.052854061 CEST	1.1.1.1	192.168.2.7	0xb01	No error (0)	app.usercentrics.eu		35.190.14.188	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:01.732275009 CEST	1.1.1.1	192.168.2.7	0x7d31	No error (0)	app.usercentrics.eu		35.190.14.188	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:02.576819897 CEST	1.1.1.1	192.168.2.7	0xc7ac	No error (0)	api.usercentrics.eu		35.241.3.184	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:04.341527939 CEST	1.1.1.1	192.168.2.7	0xf693	No error (0)	api.usercentrics.eu		35.241.3.184	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:06.135984898 CEST	1.1.1.1	192.168.2.7	0x2709	No error (0)	app.usercentrics.eu		35.190.14.188	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:09.643970966 CEST	1.1.1.1	192.168.2.7	0x45ee	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:09.643970966 CEST	1.1.1.1	192.168.2.7	0x45ee	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:11.086647034 CEST	1.1.1.1	192.168.2.7	0x2d55	No error (0)	consent-api.service.consent.usercentrics.eu		35.201.111.240	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:11.153244019 CEST	1.1.1.1	192.168.2.7	0xf5a0	No error (0)	uct.service.usercentrics.eu		34.95.108.180	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:11.942049026 CEST	1.1.1.1	192.168.2.7	0xbcb	No error (0)	uct.service.usercentrics.eu		34.95.108.180	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:27.071381092 CEST	1.1.1.1	192.168.2.7	0xe1ec	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:27.071732998 CEST	1.1.1.1	192.168.2.7	0x2318	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 00:41:30.729588985 CEST	1.1.1.1	192.168.2.7	0xe3ba	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:30.729588985 CEST	1.1.1.1	192.168.2.7	0xe3ba	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:44.443423986 CEST	1.1.1.1	192.168.2.7	0xceeb	No error (0)	www.bankwir.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:41:44.468861103 CEST	1.1.1.1	192.168.2.7	0xc3fd	No error (0)	www.bankwir.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:41:44.468861103 CEST	1.1.1.1	192.168.2.7	0xc3fd	No error (0)	parkingpage.namecheap.com		91.195.240.19	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:45.250425100 CEST	1.1.1.1	192.168.2.7	0x9c8d	No error (0)	syndicatedsearch.goog		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:45.341067076 CEST	1.1.1.1	192.168.2.7	0xd6a6	No error (0)	syndicatedsearch.goog		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:52.376882076 CEST	1.1.1.1	192.168.2.7	0x6bff	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:52.376882076 CEST	1.1.1.1	192.168.2.7	0x6bff	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:41:53.822777987 CEST	1.1.1.1	192.168.2.7	0x5c5f	No error (0)	www.bankwir.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:41:53.965725899 CEST	1.1.1.1	192.168.2.7	0xddce	No error (0)	www.bankwir.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:41:53.965725899 CEST	1.1.1.1	192.168.2.7	0xddce	No error (0)	parkingpage.namecheap.com		91.195.240.19	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49707	162.255.119.21	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:40:39.669157982 CEST	426	OUT	GET / HTTP/1.1 Host: bankwir.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 00:40:40.146595001 CEST	285	IN	HTTP/1.1 302 Found Date: Mon, 30 Sep 2024 22:40:40 GMT Content-Type: text/html; charset=utf-8 Content-Length: 46 Connection: keep-alive Location: http://www.bankwir.com/ X-Served-By: Namecheap URL Forward Server: namecheap-nginx Data Raw: 3c 61 20 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 62 61 6e 6b 77 69 72 2e 63 6f 6d 2f 27 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href='http://www.bankwir.com/'>Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49709	91.195.240.19	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:40:40.213972092 CEST	430	OUT	GET / HTTP/1.1 Host: www.bankwir.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 00:40:40.880218029 CEST	1236	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:40:40 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_UMNYaxwyVXzMtf4Ja6SmOZ7nUzaZo5jU/nybSX9CSfBeBKlrBXaXTCPOWsSTtoCCB9pCGEGcbtYC+VJCtS9h/Q== last-modified: Mon, 30 Sep 2024 22:40:40 GMT x-cache-miss-from: parking-75d9cf65f9-b9tc5 server: Parking/1.0 content-encoding: gzip Data Raw: 38 34 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ac 59 eb 6e db 38 16 fe bf 4f a1 7a 90 45 3b b5 6c d9 89 1d 47 4e 0a 24 69 da e9 bd 9d f4 92 b4 28 0a 4a a2 2c 36 12 a9 15 29 5f e2 35 b0 af b1 af b7 4f b2 87 a4 24 4b b2 ec 26 83 a9 d1 58 22 79 0e cf e5 3b 17 d2 c7 0f 9e be 3b ff 78 fd fe c2 08 44 14 3e 39 96 7f 8d 10 d1 c9 49 0b d3 96 61 78 48 20 13 79 4e c8 dc 9b 1b bc 38 79 f3 6c 36 7b fa e1 fa e5 2b f6 f5 45 30 75 df 9e 7e b8 38 3b fb 70 fa f4 72 76 3a bb 3c 7d 79 76 fa 96 2e c2 2f b3 fe f4 f5 f5 41 f0 89 1e cd ac e1 ed 87 57 4e f0 ea cc 9f fe 7c f6 e9 9c 7b cf 42 67 f8 d1 fb 10 cc 9d a3 3f af be 5c a5 2f 0e c4 7e cf 7d cc 46 fe f5 bb 69 97 8f fe d5 7b fd fc fd 04 ed 3f bd e8 bd ee 8a 3f 3e 1d bc be 78 fb e6 fc 74 76 71 7a fa e1 e4 e4 c7 a7 37 6f af d1 7c b6 f8 7c 75 fb 46 f8 07 2f d1 f0 32 7a f7 f5 90 7e ba 45 5f d9 e0 e7 a7 2e 5d 38 97 57 47 e7 97 fe 19 3e 7b 15 26 67 57 e8 ea e3 f9 fb 77 5f f8 e5 47 c1 ce cf cf 8e e2 f3 e7 17 cf 5d 47 5c 9f 3f fe fc f2 5c 5c 1e 05 5d 60 0c aa 63 e4 3d 39 8e b0 40 [TRUNCATED] Data Ascii: 841Yn8OzE;lGN$i(J,6)_5O$K&X"y;;xD>9IaxH yN8yl6{+E0u~8;prv:<}yv./AWN\|{Bg?\/~}Fi{??>xtvqz7o\|\|uF/2z~E_.]8WG>{&gWw_G]G\?\\]`c=9@cqJoZO!~ z3#Ie?qOYz$B09j=E>iM,-eT`'OM&B('DiTI9N+r`jU0wK1J;T17 %AbCAZI6BnY<'`1q9\|d !)KCB.tR"Wf
Oct 1, 2024 00:40:40.880245924 CEST	224	IN	Data Raw: 73 8c 12 37 c8 e4 78 00 56 08 09 bd f9 87 91 fd 4b 70 78 d2 22 60 80 56 31 24 16 31 18 88 44 68 82 bb 31 9d ac 27 82 04 fb 27 ad 6e 97 44 93 0e c7 1e 8b 51 22 f5 93 f2 74 05 8e e2 10 09 cc bb 21 9b 30 de 95 f3 3f e4 63 47 b1 e8 3e 39 e6 62 01 ae Data Ascii: s7xVKpx"`V1$1Dh1''nDQ"t!0?cG>9b.u`Pi1=XG5ro"QPn%I ^77J)3<rXF(j[+8pgL-(9,lVAo
Oct 1, 2024 00:40:40.880256891 CEST	1236	IN	Data Raw: 14 73 bb 8f a3 71 c6 af 33 3c c4 91 61 ad 7c 32 71 91 42 5f 1b 1e 53 f0 6e 84 48 9d 89 9e c9 45 e9 01 e1 81 15 cf 57 41 b2 74 d8 5c b2 06 e3 db 19 76 4d 18 1a 67 da 5b 63 36 c5 89 1f b2 99 3d 25 9c 00 fa 57 31 f0 51 02 f9 28 22 e1 c2 8e 18 65 3c Data Ascii: sq3<a\|2qB_SnHEWAt\vMg[c6=%W1Q("e<F.?V+t{3IXJ=[$$&!`B\|S!DNd ,)x\a'H7n1<is0:JB<x\^q6GQ\|Ox>*ltWM[8{,ka#OA4.
Oct 1, 2024 00:40:40.880269051 CEST	1236	IN	Data Raw: db 00 70 fd 14 9f 4c 1c f4 b0 6f 59 ed fc 3f 1c 4b 1e 8d a5 f8 d6 38 13 7a 8d 7a 2d e2 fa 66 44 1e 2a 35 77 79 51 d8 d9 e7 63 75 30 6a 18 6f 1a 6a ca 00 1b 0a 54 7b a0 8a 93 7a 03 6b 6f 8d 3d 8d be dd 3c ca c8 cd ee 57 73 06 3d 0d 0a 32 32 41 0d Data Ascii: pLoY?K8zz-fD*5wyQcu0jojT{zko=<Ws=22AkOyQl0~%FId/[Bl>CQc;33Cx!vbW5YdfM0UL,2iV.8/7szNQk2_(kx
Oct 1, 2024 00:40:40.880280018 CEST	1236	IN	Data Raw: 30 f4 91 62 be 5e 7b 2e f3 f7 20 8e 82 1e 82 48 02 0f 3d d1 7d 95 3c 55 34 71 38 fe 76 21 fd 9f 21 89 08 4d 32 1c 7d 9e 38 a5 92 39 fe 03 9b 3c 80 f2 c0 25 8f 40 de 63 92 87 c9 8f d9 e3 11 d0 98 3b 1e 81 bd cd 1c 27 de 3d ef fd 7b 56 1c d8 96 97 Data Ascii: 0b^{. H=}<U4q8v!!M2}89<%@c;'={V:{\|I5]YNz5_U:F:'&;\|IVab)'2Wo"LaZ~?:8(/Mh\Bu,}{LC/+e!nh;unD/P=K{D
Oct 1, 2024 00:40:40.880290031 CEST	1060	IN	Data Raw: c6 f5 a1 31 1f 0d f6 73 68 b8 2c c0 fc 36 08 40 a1 5a 04 dc 89 7c 4c c7 1b 1a 6a 58 53 ea 7e 4e 81 e2 dd 2a ce 81 58 e7 a8 c9 a2 ab b7 46 13 46 58 e4 18 be 52 23 f8 7e 77 c1 f7 3b 3b be d8 35 a7 45 93 9e ec 6b 75 be 63 fd 7e 71 7f 68 cd 9c 05 6b Data Ascii: 1sh,6@Z\|LjXS~N*XFFXR#~w;;5Ekuc~qhkH~/bBs+k)&Zn]K5(C3`g(8EqDc,Er4d>Fb/jz:sz0h-Pcuw"K>8pa2\b)ED_
Oct 1, 2024 00:40:40.880307913 CEST	1236	IN	Data Raw: 38 37 46 0d 0a ac 1c 6b 53 db 38 f0 af b8 be 9b 10 4f 8c 49 c8 f5 15 23 3a 90 c2 1d 33 f4 da 03 3a 73 37 0c c3 38 89 03 6e 4d ec da 0e 90 0b fa ef b7 bb 92 65 f9 91 10 e6 ca 87 36 96 56 eb dd d5 be b4 b2 54 ef 2b 38 49 46 9a 10 aa ac ae 7e 27 6d Data Ascii: 87FkS8OI#:3:s78nMe6VT+8IF~'mm2+T):/(Q,k##uRU{Fq@qT+t_Zg9V=OAL?~Cv} Aj"C\|@ ^ 95PWqO},2x
Oct 1, 2024 00:40:40.880321980 CEST	224	IN	Data Raw: 21 15 45 25 27 f4 67 37 d9 ed 7e d7 5a 56 3a d6 4e 34 2c 20 52 29 7e a6 98 6a 6b ad 16 b7 cb f8 2c 57 c9 59 b4 66 52 fe ec b2 c6 d9 15 ea c6 d8 cb 2a b4 5a dc 87 d4 6f b9 0a 4f 0d 0d e7 ba ed 15 fe 4d 25 0f 8a 35 e9 05 0e c6 63 3f 06 a5 81 f0 ee Data Ascii: !E%'g7~ZV:N4, R)~jk,WYfR*ZoOM%5c?eTOPYC4)g\|N93@$M->DH"UB,IA@B+l5<>I2$!LJ}]K3RhvegQgRP+fs1[7tM^{
Oct 1, 2024 00:40:40.969430923 CEST	1183	IN	Data Raw: 03 66 1f b1 c4 78 7f e1 09 d8 6b 9d 11 c4 59 1a 24 6d 0a b8 ee 3e 3d e5 d1 57 6b cc 59 e7 a8 5e 52 f5 d8 cc 7f 30 fe fe 74 fa 47 96 c5 67 a2 c9 95 5d 62 89 66 fe 7e 74 01 d9 d9 a8 93 23 ec 94 de 69 93 a6 a8 21 b0 ae 00 66 78 a1 ab 78 24 15 4c 66 Data Ascii: fxkY$m>=WkY^R0tGg]bf~t#i!fxx$LfN#2PY3=C8}=&M-wUU.))<:GS0: $b>Pu9N)YF402{]M2uKayQ^obr9W.]b!7
Oct 1, 2024 00:40:42.747816086 CEST	705	OUT	GET /search/tsc.php?ses=ogcVt54d5CL1QzrEa2Fnlup2YwhjFZWtx5ieJ-i5M1BAqpknHMrN-3ZcPQyhBkBhXvtw0sPQcrD3jocC371nD7s_gxJVCVbnDi15G1kxLffDCjC35IADRf6EiBwa1NMoNxPKUpiQM7BPe_s78qN4h25yQOVG_p59c5_09dlcDL7IJ5KN6iqBhGi5LxR1lW9aC8i8pirx54A39C3JeCyRGy6OHn_3BhwHNX8IkCHpzp7bAjWNoMEu4GyWwWwn0WdxBnuPdkE_SU7NbvaSWSDHGyDs9iVUWolf1nf3JqWcEH1EIbOZw5_3XW8PrzkTvc5CvkZVHnh8D05ZvQk33nE-BTgr46Mdvet9Qe_tXJHu4lVTrc-Vfw66UE8o1kC&cv=2 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 00:40:42.948451042 CEST	181	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:40:42 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-fvx6t server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49714	205.234.175.175	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:40:40.983102083 CEST	397	OUT	GET /templates/bg/arrows-curved.png HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 00:40:41.443320990 CEST	540	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:41 GMT Content-Type: image/png Content-Length: 13502 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Expires: Mon, 07 Oct 2024 22:40:41 GMT X-CFHash: "107694ee1e94990d97b7e58651ffd6a0" X-CFF: B Last-Modified: Tue, 12 Oct 2021 05:19:02 GMT X-CF3: H CF4Age: 0 x-cf-tsc: 1724339305 CF4ttl: 31536000.000 X-CF2: H Server: CFS 1124 X-CF-ReqID: 921b81571a903ad0b06087cb368cecfe X-CF1: 11696:fM.iad2:cf:nom:cacheN.iad2-01:H Accept-Ranges: bytes
Oct 1, 2024 00:40:41.443356037 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 9d 00 00 02 52 08 06 00 00 00 18 89 18 5e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 Data Ascii: PNGIHDRR^pHYssRGBgAMAa4SIDATx\yFUbUA#VJ?.wUD&AP&Q#qAd\E[Y';{+_<y9ko-J%C)I37oe
Oct 1, 2024 00:40:41.443367004 CEST	1236	IN	Data Raw: 50 e9 00 f5 d9 bf 64 6e a0 ee 50 fd 00 fb a8 74 80 fa ec 5f 32 47 f5 03 1c a0 d2 01 16 8b ea 07 51 a3 d2 01 16 8b ea 07 51 a3 d2 01 96 8f ea 07 d1 a0 d2 01 96 8f ea 07 d1 a0 d2 01 dc 94 2a ad b7 32 ad 36 a8 7e 10 12 42 07 70 9d 96 ae 4e 74 5b 3e Data Ascii: PdnPt_2GQQ26~BpNt[>u.5uS=Ov&7\|W~h+ov7[__Q%5M65*%}Y~RWZ:Ygou'Zg?t@5t)AHN$Q&u!
Oct 1, 2024 00:40:41.443377018 CEST	448	IN	Data Raw: 76 9e 89 36 42 e7 b0 50 03 88 c1 03 00 55 99 eb 8c 36 42 e7 68 36 80 b6 76 d5 ce 46 28 63 d8 a5 c1 03 5a 6f 00 e6 31 f3 28 35 a1 33 81 fc 9a 06 ad 36 42 d9 07 94 87 8f f9 9e 33 78 00 60 0e 33 8d 52 13 3a 53 2a 36 a2 be fb e3 0b 95 1f 0f b1 0c b4 Data Ascii: v6BPU6Bh6vF(cZo1(536B3x`3R:S*6jQjBgVW3tBY`SR:f)M<N RZo&4B.hNu"Bg1RS}x``c7:c<7<J8AuL/tS\2`!t
Oct 1, 2024 00:40:41.443433046 CEST	1236	IN	Data Raw: f9 d8 7a 6b ad bf b2 2a a7 4e ad d3 7a 03 9c 37 36 70 2c 42 27 52 de ef f9 39 ff fa ba f9 f1 bd ca c8 35 e0 9c 23 03 c7 22 74 22 67 c2 a7 67 5a 6f 1b 01 b4 de ec d4 db aa 00 58 a6 63 03 c7 22 74 50 48 95 34 36 b6 d5 a7 5b 5e b6 de 38 ed 00 58 2e Data Ascii: zkNz76p,B'R95#"t"ggZoXc"tPH46[^8X.-8'NmM4,=QM8Ix7&SE`pTc*5\2?6\|`r3E`^yuk)8A\|?D_UZ
Oct 1, 2024 00:40:41.443444014 CEST	1236	IN	Data Raw: f5 19 42 08 70 06 63 d8 70 ce dc a1 33 aa b9 f6 ca 6a e3 33 8d 35 42 08 70 4a 3a 5c 07 da da d9 d9 ee a6 5d 46 77 b1 1c 95 87 ce a8 22 84 1a 92 ac 9b f5 a0 33 c2 09 b3 c0 d2 15 eb 40 59 26 77 68 c3 61 91 6a 0f 9d 51 b6 1d 37 90 6c 4d 69 39 6b 2a Data Ascii: Bpcp3j35BpJ:\]Fw"3@Y&whajQ7lMi9k*5,<tFohNB:eTAsR43IaOTUPK(Zq]Bp:tA\8 h$NmiD+QkH~tR=aSV[WPJ57C<`
Oct 1, 2024 00:40:41.443454027 CEST	1236	IN	Data Raw: 5f 5a 6f 8c 5c 03 51 32 c1 93 98 e0 39 9f ca 9c 08 1d 77 78 37 78 c0 c8 35 10 05 f3 bb b1 7e f1 67 3f fa d6 86 54 80 d0 71 4f df 7c 8f 3b 5e b6 de 18 b9 06 42 a3 b5 1a 5c 79 ef ad ef b4 a5 22 84 8e cb 94 ee 66 a2 6e f9 72 e2 01 23 d7 40 40 b4 7e Data Ascii: _Zo\Q29wx7x5~g?TqO\|;^B\y"fnr#@@~8/~\|B^X<e8C[>rKoT640)`p^c:[o>m88pm8aW:A7Zohon[DXNiKo},Fi5SwY0B
Oct 1, 2024 00:40:41.443466902 CEST	1236	IN	Data Raw: 07 58 ae 94 00 42 4c 08 1d c0 1d 07 6b 40 9f 0e 76 ba 0c 21 20 44 ea df 3c fb dd 1b 4a ab ab a2 84 c3 fe 00 87 14 53 70 8c 61 23 24 aa 78 e3 cb ad ef b6 cc 3b 67 24 51 6b 5a cb 1a 21 04 38 44 e9 ae 0d a0 ed 44 ee 7c f8 b7 2f 47 71 ad 31 c2 a4 8e Data Ascii: XBLk@v! D<JSpa#$x;g$QkZ!8DD\|/Gq1DB-{pE:\|&5{TApS{l6$[S:K+pJj BgU([igZqZqpA%SVTA\| 1&LwN$]BPy~N*Smhn
Oct 1, 2024 00:40:41.443530083 CEST	328	IN	Data Raw: 63 dd 07 88 cf 70 4f cf 0d 71 44 22 98 9a 09 e9 4b aa 91 dd b5 81 fd a5 67 be e3 45 0b eb 83 de cb ed 7f bc fb d2 57 92 6c f0 bc 69 19 76 05 40 f8 b4 dc cd b2 a4 2d 0e a1 d2 a9 86 77 83 07 ac fb 00 81 d3 d2 fe 58 ef 5c 77 ed 90 50 42 a7 62 be 1d Data Ascii: cpOqD"KgEWliv@-wX\wPBb8Q;@8O>x})KpF:Q;t"?r[F,7FiytviBgkq)-w:9#\|m,ye;W\>Zor,#'!t
Oct 1, 2024 00:40:41.443571091 CEST	1236	IN	Data Raw: 21 74 3c a6 95 f4 ed 25 73 3e b6 de d8 70 0a 9c cc d7 09 b5 e3 10 3a 81 f0 6d e4 da 1a 0e 1e d8 3d 3f 2d 01 30 c2 df 09 b5 e3 10 3a e1 f1 ee a0 51 ce 7a 03 0e 31 0f 61 79 f1 83 77 5e da 90 00 11 3a e1 4a b5 56 9d 5d a5 6e 79 d5 7a 63 f0 00 31 f3 Data Ascii: !t<%s>p:m=?-0:Qz1ayw^:JV]nyzc1Y:zm&:mA~c{.:qnA81G-":g'S[>\[T?RG!t0k~20pBG[mpNDG!tp"O;(pQL
Oct 1, 2024 00:40:41.448380947 CEST	1236	IN	Data Raw: 94 04 95 dc a5 1a 82 4b 66 0a 9d 32 02 08 70 df 70 a3 6a cf bc dc 53 7a c5 54 44 92 12 44 58 86 b9 43 a7 8c 00 02 fc b2 bf 36 24 a9 28 d5 b3 ad b9 bd 47 d2 63 cf 10 ea 54 69 e8 94 1d ac 01 65 72 89 21 04 c0 1f e5 aa 48 92 e4 41 1e 46 26 98 98 9a Data Ascii: Kf2ppjSzTDDXC6$(GcTier!HAF&Cj<tv";=~Hj }ZuBB}@@IGJ6vZCK\|R^h.xS:Pj#RMP*~R\2/TcXjWo)IvCh
Oct 1, 2024 00:40:46.745724916 CEST	396	OUT	GET /templates/logos/sedo_logo.png HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 00:40:46.862633944 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:46 GMT Content-Type: image/png Content-Length: 15086 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Expires: Mon, 07 Oct 2024 22:40:46 GMT X-CFHash: "def00c11b1596db4efee6a9fbe64fc27" X-CFF: B Last-Modified: Mon, 11 Jan 2021 07:44:34 GMT X-CF3: H CF4Age: 0 x-cf-tsc: 1724339300 CF4ttl: 31536000.000 X-CF2: H Server: CFS 1124 X-CF-ReqID: 9184af09402a536ace8d987ade76a265 X-CF1: 11696:fM.iad2:cf:nom:cacheN.iad2-01:H Accept-Ranges: bytes Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 8b 41 07 11 8d 41 04 20 8d 41 04 20 8d 41 04 20 8e 41 03 2e 8d 41 04 20 8d 41 04 20 8b 41 07 11 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 8e 41 03 2e [TRUNCATED] Data Ascii: 00 %6 % h6(0` $@@@@AA A A A.A A A@@@@@@@@A.AU@@@@@@@@@@@@@@@@}AUA @@@@@A.@j@@@@@@@@@@@@@@@@@@@@@@@@}A.@@@A @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49723	205.234.175.175	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:40:43.572984934 CEST	302	OUT	GET /templates/bg/arrows-curved.png HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 00:40:44.030237913 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:43 GMT Content-Type: image/png Content-Length: 13502 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Expires: Mon, 07 Oct 2024 22:40:43 GMT X-CFHash: "107694ee1e94990d97b7e58651ffd6a0" X-CFF: B Last-Modified: Tue, 12 Oct 2021 05:19:02 GMT X-CF3: H CF4Age: 8019 x-cf-tsc: 1722376099 CF4ttl: 31527980.000 X-CF2: H Server: CFS 1124 X-CF-ReqID: 621e2f855b7271a3d7e549ad08f5f656 X-CF1: 11696:fR.iad2:cf:nom:cacheN.iad2-01:H Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 9d 00 00 02 52 08 06 00 00 00 18 89 18 5e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 34 53 49 44 41 54 78 01 ed dd cd 93 5c d7 79 df f1 e7 dc 1e ca 88 94 94 46 91 55 e5 8a 62 b3 55 8e 1c 96 17 41 8b d9 07 23 56 d9 d1 ca 18 a2 ca 89 00 4a c2 cb 3f 00 80 2e 95 77 11 a0 55 44 26 e5 41 fe 01 f6 50 26 c1 8a 17 ec d9 51 d2 82 8d b5 23 a2 b1 71 41 a4 64 5c 96 45 5b 16 a5 a0 59 15 92 98 97 be 27 e7 dc e9 3b b8 d3 e8 99 e9 97 7b bb cf cb f7 a3 1a ce 2b 5f 84 99 ee df 3c cf 79 ce 39 ea 6b e7 6f bf 2d 4a 9a a2 25 15 43 29 49 33 c9 de 37 6f a6 92 65 a9 0c 92 be ec ee a4 bd ce e5 be 00 00 30 87 95 e1 eb 66 1e 3c 86 36 2f 4a 92 fd 8f 26 e6 b5 7d f3 a9 53 f2 b5 17 6e f7 25 93 9e 12 31 e1 a3 df cf 1a c9 03 d9 db bd 27 b2 97 f6 de b8 9c 0a 00 00 27 58 99 f8 2b b5 ac 9a 34 5a d3 f9 3b 4a 54 66 de 4a 56 f2 7f c4 d7 2e dc b6 1f ec 29 53 2d 65 2a bb 27 [TRUNCATED] Data Ascii: PNGIHDRR^pHYssRGBgAMAa4SIDATx\yFUbUA#VJ?.wUD&AP&Q#qAd\E[Y';{+_<y9ko-J%C)I37oe0f<6/J&}Sn%1''X+4Z;JTfJV.)S-e*'ZdOy'a{mMCr1VLK@:HN^}exN\/klP\j:vr_3n.!n?t8pNX5Dwd8`iBQ=L:`bL+Ne7tFVxSe{:H]!`6ooqNixNhz1%T?VlD+Bg9zZNBD-U[%~/DJ?F)5
Oct 1, 2024 00:40:44.030273914 CEST	224	IN	Data Raw: 84 88 4a c7 1f c3 f1 6b b9 49 f5 03 c0 57 84 8e 8f ec 35 0c 89 6e 73 fc 0e 00 df d0 5e f3 91 f9 25 21 6f bf 7d ee d4 83 67 2f dc 7e a5 f5 e7 af b5 04 00 3c 40 a5 13 0e 86 0f 00 38 8f 4a 27 1c 07 c3 07 54 3f 00 5c 45 a5 13 b6 fd 93 0f 58 fb 01 e0 Data Ascii: JkIW5ns^%!o}g/~<@8J'T?\EX\|vS`hY"`h}?J'^y7[@tP5ZQ5F`,&&6`VT:T3A`jy.7z0Tp
Oct 1, 2024 00:40:44.030296087 CEST	1236	IN	Data Raw: 37 00 47 20 74 50 29 a6 de 00 1c 87 f6 1a ea c6 86 53 00 07 a8 74 50 37 36 9c 02 38 40 e8 60 61 0e b5 de ce bf be 2e 00 a2 43 e8 60 f1 4c 3b 57 29 f5 e6 d7 2e dc 7e c0 ba 0f 10 17 d6 74 e0 02 ae 59 00 22 41 a5 03 17 3c be 66 21 5f f7 e1 9a 05 20 Data Ascii: 7G tP)StP768@`a.C`L;W).~tY"A<f!_ T>+o]Zo@xhuvJ 5?kioo:yT:i=uB!`F9pk:]jZpL[\G5ZoZK,h\0,5Av@
Oct 1, 2024 00:40:44.030312061 CEST	224	IN	Data Raw: 9f a6 00 80 7b b4 ce e4 b9 de 1b e7 bb 52 b3 da 42 e7 09 c3 6a 28 11 e9 28 b3 68 77 ff ad f8 76 19 d3 7e 03 e0 b0 87 26 78 9e ad fb 2c bc c5 85 ce a8 88 43 88 f6 1b 00 47 3d d0 9f 3c 7a b6 ce c1 82 e5 85 ce 28 13 42 a2 92 6e 6c ed b8 bc fd a6 f4 Data Ascii: {RBj((hwv~&x,CG=<z(BnlwBIY*bL0t:Xr@$n8KfN)&tFDSQXz\oKK!j$w%<K`8JJE2?#CF@w'
Oct 1, 2024 00:40:44.030322075 CEST	1236	IN	Data Raw: ab 6a a2 2d b8 d0 19 91 b7 e1 1a 2a db 0c 71 1d a8 54 fd 9c 95 fd 23 2e 00 a0 72 26 23 5e 79 e7 f5 f3 57 a4 02 a1 87 4e 59 b0 01 54 ec fb 51 89 7c 4f 68 bd 01 a8 5e 65 13 6d 31 85 4e 59 b8 01 c4 a9 07 00 ea 51 c9 44 5b ac a1 53 16 64 00 0d 5b 6f Data Ascii: j-qT#.r&#^yWNYTQ\|Oh^em1NYQD[Sd[o&\|jhxv6BPU6Bh6vF(cZo1(536B3x`3R:S6jQjBgVW3tBY`SR:f)M<N RZo&4B.
Oct 1, 2024 00:40:44.030333042 CEST	1236	IN	Data Raw: 51 4d 08 9d a6 0a f2 5f dd 57 13 cc 8b d0 01 8e 17 45 f5 53 18 99 86 5b 13 86 11 bc b2 e8 73 d4 66 41 e8 00 13 8a a9 fa 29 e4 55 50 a2 4e 9b 5f 9f d7 69 c5 b9 cd 87 c0 b1 08 1d 60 7a 51 55 3f 65 fb 21 94 ad 89 4e ce 10 42 ce 58 da 39 6a b3 20 74 Data Ascii: QM_WES[sfA)UPN_i`zQU?e!NBX9j t9XTBv=vb={J_'yIW4dIK^c0vK?GmPO=V^^3568v4F6 2/M)x8,FkBk}0zsL>vgU
Oct 1, 2024 00:40:44.030344009 CEST	1236	IN	Data Raw: db f7 d7 82 b6 13 b9 f3 e1 df be 1c c4 86 2e aa 1f 00 8b 64 83 e7 bd 1f bd f0 ac 78 62 b9 a1 73 58 6a fe f8 ba a6 0d b7 19 42 1b 8e ea 07 c0 a2 98 e0 79 c5 04 cf 15 f1 80 4b a1 53 96 da 00 ca 94 da fa a7 9f be d4 11 cf 51 fd 00 a8 9b 2f c1 e3 6a Data Ascii: .dxbsXjByKSQ/j^@T?C:e:<NYW?zPW C,aSTDNn71NYjh!\|Onz0'')K{dkk<cdlQm_OBtr.0'
Oct 1, 2024 00:40:44.030397892 CEST	1236	IN	Data Raw: 10 40 28 b8 7e 4a f4 bc 08 1d 04 40 b7 77 1a 72 eb c3 bf 7d 39 88 be 77 31 05 a7 b4 9c 35 21 b4 26 4a ad 0a e2 10 c0 48 f4 49 08 1d 84 a4 67 aa 9f 0d df 07 0f 46 71 0e 5c 04 02 9b 50 3b 0e a1 83 10 a5 a1 0c 1e 8c b2 27 21 24 89 9c c9 44 af d3 86 Data Ascii: @(~J@wr}9w15!&JHIgFq\P;'!$DFpj!t6O/m5>X@ 'C iOBkAyB8pS$kTAq,)#j"tkX\|<6hwjt>E;f]+]B8~,42f?R-AU
Oct 1, 2024 00:40:44.030410051 CEST	1236	IN	Data Raw: 00 85 b6 16 44 f5 03 a0 26 04 8f cc 11 3a 23 52 ad b3 ad 90 da 70 54 3f 00 6a 10 7d f0 54 15 3a 65 a9 ad 82 b4 34 36 43 09 20 aa 1f 00 55 32 c1 f3 e6 27 d9 ce 95 18 8f f0 a9 23 74 0e d8 75 20 93 eb 1d 95 35 b6 7e fd 6e bb 23 9e b3 d5 cf 4a 92 5d Data Ascii: D&:#RpT?j}T:e46C U2'#tu 5~n#J]H`.Ztr.<NYhdOsnB,~!`6$bD36$p.NY@2hyHsdkS6N\|Z}9W?P\@0
Oct 1, 2024 00:40:44.030421019 CEST	203	IN	Data Raw: e2 29 f6 ff 60 52 66 fd 26 4d 74 76 39 c6 0d 9f d3 20 74 b0 08 5e 9e f5 36 ca 06 d0 8a 64 67 b5 92 4b 04 10 0e d1 d2 1b 68 f5 fc af 7a 3f 48 05 c7 22 74 b0 50 be 0f 1e 14 4a 01 b4 4e 0b 2e 76 ea d6 c7 d9 f6 8d 98 37 7c 4e 83 d0 c1 72 98 df 0c cd Data Ascii: )`Rf&Mtv9 t^6dgKhz?H"tPJN.v7\|Nr{~FLy?xPVJYA*]QZ?:p8;eofCEAU?{2:58-Q4iTAO
Oct 1, 2024 00:40:44.035433054 CEST	1236	IN	Data Raw: fe 0f ef bc dc 16 cc 85 d0 81 2f 82 ac 7e 0a 87 aa 20 51 2d d6 82 dc 61 d7 6f 32 ad be 4e 3b ad 1a 84 0e bc 13 6a f5 53 66 d7 82 b2 24 59 53 5a ce d0 8a 5b 22 2d 9b 1f eb 9d 6b 8c 43 57 87 d0 81 b7 4c 55 d0 b7 d7 6c cb a0 71 eb c3 f7 da c1 4e 11 Data Ascii: /~ Q-ao2N;jSf$YSZ["-kCWLUlqNVFK'+0]BIhUj8_gWP9BoiWA4q:Y)Zr"iIIOw^!86N9R_3(O>$8i-h1Oa[s
Oct 1, 2024 00:40:47.558809042 CEST	301	OUT	GET /templates/logos/sedo_logo.png HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 00:40:47.660640955 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:47 GMT Content-Type: image/png Content-Length: 15086 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Expires: Mon, 07 Oct 2024 22:40:47 GMT X-CFHash: "def00c11b1596db4efee6a9fbe64fc27" X-CFF: B Last-Modified: Mon, 11 Jan 2021 07:44:34 GMT X-CF3: H CF4Age: 0 x-cf-tsc: 1722376094 CF4ttl: 31536000.000 X-CF2: H Server: CFS 1124 X-CF-ReqID: 3f0d7d3f76e97c29b92b1d0893ac26cc X-CF1: 11696:fR.iad2:cf:nom:cacheN.iad2-01:H Accept-Ranges: bytes Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 8b 41 07 11 8d 41 04 20 8d 41 04 20 8d 41 04 20 8e 41 03 2e 8d 41 04 20 8d 41 04 20 8b 41 07 11 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 8e 41 03 2e [TRUNCATED] Data Ascii: 00 %6 % h6(0` $@@@@AA A A A.A A A@@@@@@@@A.AU@@@@@@@@@@@@@@@@}AUA @@@@@A.@j@@@@@@@@@@@@@@@@@@@@@@@@}A.@@@A @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49726	91.195.240.19	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:40:43.630175114 CEST	671	OUT	GET /search/tsc.php?ses=ogcVt54d5CL1QzrEa2Fnlup2YwhjFZWtx5ieJ-i5M1BAqpknHMrN-3ZcPQyhBkBhXvtw0sPQcrD3jocC371nD7s_gxJVCVbnDi15G1kxLffDCjC35IADRf6EiBwa1NMoNxPKUpiQM7BPe_s78qN4h25yQOVG_p59c5_09dlcDL7IJ5KN6iqBhGi5LxR1lW9aC8i8pirx54A39C3JeCyRGy6OHn_3BhwHNX8IkCHpzp7bAjWNoMEu4GyWwWwn0WdxBnuPdkE_SU7NbvaSWSDHGyDs9iVUWolf1nf3JqWcEH1EIbOZw5_3XW8PrzkTvc5CvkZVHnh8D05ZvQk33nE-BTgr46Mdvet9Qe_tXJHu4lVTrc-Vfw66UE8o1kC&cv=2 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 00:40:44.280419111 CEST	181	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:40:44 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-fvx6t server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49748	104.16.140.114	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:40:54.381336927 CEST	441	OUT	GET /redirect.php?id=22 HTTP/1.1 Host: sedo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 00:40:55.902901888 CEST	741	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 30 Sep 2024 22:40:54 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Mon, 30 Sep 2024 23:40:54 GMT Location: https://sedo.com/redirect.php?id=22 Set-Cookie: __cf_bm=cKLvouZcSXRgEFOt9Ufe.gn03_.2VFTlP8MPncLj5RA-1727736054-1.0.1.1-04rrENnIm8fj4p5Jsg.eTzRqfX_mV0uDW98Ru8Im43f48CJ_x9Uw_fSvoD4zNyyTMGxHXJ.EzPJzqvlJqxoE0g; path=/; expires=Mon, 30-Sep-24 23:10:54 GMT; domain=.sedo.com; HttpOnly Vary: Accept-Encoding Server: cloudflare CF-RAY: 8cb7b7a67f45421d-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 1, 2024 00:40:55.920572042 CEST	741	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 30 Sep 2024 22:40:54 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Mon, 30 Sep 2024 23:40:54 GMT Location: https://sedo.com/redirect.php?id=22 Set-Cookie: __cf_bm=cKLvouZcSXRgEFOt9Ufe.gn03_.2VFTlP8MPncLj5RA-1727736054-1.0.1.1-04rrENnIm8fj4p5Jsg.eTzRqfX_mV0uDW98Ru8Im43f48CJ_x9Uw_fSvoD4zNyyTMGxHXJ.EzPJzqvlJqxoE0g; path=/; expires=Mon, 30-Sep-24 23:10:54 GMT; domain=.sedo.com; HttpOnly Vary: Accept-Encoding Server: cloudflare CF-RAY: 8cb7b7a67f45421d-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 1, 2024 00:40:55.920726061 CEST	741	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 30 Sep 2024 22:40:54 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Mon, 30 Sep 2024 23:40:54 GMT Location: https://sedo.com/redirect.php?id=22 Set-Cookie: __cf_bm=cKLvouZcSXRgEFOt9Ufe.gn03_.2VFTlP8MPncLj5RA-1727736054-1.0.1.1-04rrENnIm8fj4p5Jsg.eTzRqfX_mV0uDW98Ru8Im43f48CJ_x9Uw_fSvoD4zNyyTMGxHXJ.EzPJzqvlJqxoE0g; path=/; expires=Mon, 30-Sep-24 23:10:54 GMT; domain=.sedo.com; HttpOnly Vary: Accept-Encoding Server: cloudflare CF-RAY: 8cb7b7a67f45421d-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 1, 2024 00:40:55.921441078 CEST	741	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 30 Sep 2024 22:40:54 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Mon, 30 Sep 2024 23:40:54 GMT Location: https://sedo.com/redirect.php?id=22 Set-Cookie: __cf_bm=cKLvouZcSXRgEFOt9Ufe.gn03_.2VFTlP8MPncLj5RA-1727736054-1.0.1.1-04rrENnIm8fj4p5Jsg.eTzRqfX_mV0uDW98Ru8Im43f48CJ_x9Uw_fSvoD4zNyyTMGxHXJ.EzPJzqvlJqxoE0g; path=/; expires=Mon, 30-Sep-24 23:10:54 GMT; domain=.sedo.com; HttpOnly Vary: Accept-Encoding Server: cloudflare CF-RAY: 8cb7b7a67f45421d-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 1, 2024 00:41:41.003974915 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49862	91.195.240.19	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:41:12.350907087 CEST	940	OUT	GET /caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&nb=0 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:13.028873920 CEST	1236	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:12 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_Z8F7ljnWGH2UNZ1cxXNceSYcWpNPtg1rNrS77vElnbTBgRFlHPE6u9DHbplxx3JlqFuM5xEPvNp2FcdLTqe9cw== last-modified: Mon, 30 Sep 2024 22:41:12 GMT x-cache-miss-from: parking-75d9cf65f9-fvx6t server: Parking/1.0 content-encoding: gzip Data Raw: 32 43 42 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ac 59 fb 73 d3 b8 16 fe fd fe 15 26 3b bd 03 bb 71 e2 a4 4d 9a 3a 0d 33 2d b4 14 28 a5 85 72 79 0d c3 c8 b6 9c 88 da 92 b1 e4 3c c8 e6 7f bf 47 92 ed d8 8e 13 da 9d 25 43 63 eb f1 e9 3c be 73 8e a4 1c 3f 7a fe f6 d9 ed e7 eb 33 63 22 c2 e0 e9 b1 fc 6b 04 88 8e 47 0d 4c 1b 86 e1 21 81 4c e4 39 01 73 ef ee f0 62 f4 e6 7c 36 7b 7e f3 f9 d5 6b f6 e5 e5 64 ea 5e 9d dc 9c 9d 9e de 9c 3c 7f 3f 3b 99 bd 3f 79 75 7a 72 45 17 c1 c7 59 77 7a f9 f9 60 f2 81 1e cd ac fe af 9b d7 ce e4 f5 a9 3f fd 71 fe e1 19 f7 ce 03 a7 7f eb dd 4c e6 ce d1 bb 4f 1f 3f 25 2f 0f c4 7e c7 fd 8b 0d fc cf 6f a7 6d 3e f8 d9 b9 7c 71 3d 46 fb cf cf 3a 97 6d 71 f1 e1 e0 f2 ec ea cd b3 93 d9 d9 c9 c9 cd 68 f4 fd cb e0 fc 30 f8 41 3f be b8 e8 7e b8 fa d2 71 e7 9f ae 5c fc fe b3 fb 31 ba ba 16 e3 4e 7c 15 bf 3f 3c 9c 9e 05 d4 b9 3d 1d bf 3b 0f 2e ae cf fa c9 d1 f3 0b 27 0a e6 f3 fd 57 c1 cf f3 e4 4d 6f 7e 76 3d bd 8a ba e7 ae 77 79 fb 13 1f b9 b3 d1 08 54 c7 c8 7b 7a 1c 62 81 0c 77 82 62 8e c5 [TRUNCATED] Data Ascii: 2CBYs&;qM:3-(ry<G%Cc<s?z3c"kGL!L9sb\|6{~kd^<?;?yuzrEYwz`?qLO?%/~om>\|q=F:mqh0A?~q\1N\|?<=;.'WMo~v=wyT{zbwb4"AnFRGCS1g)#tl%g>C$FQQcJ,bh.SX~F<1yxJ\l&DEuZV3Ds&a%8VQZI$(TP XOb.JdcZ3f$p)XD\n8`.OV7PH-#6&,HjlzC0R=mA
Oct 1, 2024 00:41:13.028889894 CEST	224	IN	Data Raw: 18 e9 3f 58 61 d4 20 a0 68 23 6f 12 8b 08 0c 41 42 34 c6 ed 88 8e d7 1d 93 18 fb a3 46 bb 4d c2 71 8b 63 8f 45 28 56 5a 80 55 da 02 87 11 c8 8a 79 3b 60 63 c6 db b2 ff bb 7c 6c 29 88 f6 d3 63 2e 16 e0 d2 1c ac fd e7 23 83 4a 33 05 e4 17 6e b9 9c Data Ascii: ?Xa h#oAB4FMqcE(VZUy;`c\|l)c.#J3n7/oK)DLG-ByeX.&;Nohx.795L#!J$z,kohsGD}abxLmP,&M1yS\|Q4mrJG/=[<p
Oct 1, 2024 00:41:13.028901100 CEST	1236	IN	Data Raw: fa 87 38 34 ac 95 4f c6 2e 52 2c 6b c2 63 12 63 e0 29 a9 82 e8 9e 4c 94 0e 4c 3c b0 a2 f9 6a 12 2f 1d 36 97 d0 60 7c 3b e5 a8 09 4d c3 54 7b 6b c8 a6 38 f6 03 36 b3 a7 84 13 60 f9 2a 02 1c 25 90 8f 42 12 2c ec 90 51 c6 23 e4 c2 ba d9 d3 70 2d 30 Data Ascii: 84O.R,kcc)LL<j/6`\|;MT{k86`*%B,Q#p-0,BKw%3,E(a=Kn;V+8W@LbB26c=r\R37Q0V./9^0zI<^T+p}k>Z@' iZ{{"a8
Oct 1, 2024 00:41:13.028914928 CEST	224	IN	Data Raw: 8f 1d f4 b8 6b 59 cd ec 3f 1c 4b 9e 0c a5 f8 d6 30 15 7a cd 7a 2d e2 fa 66 44 1e 2a 35 3a 98 cb 68 ed f3 a1 3a 18 d5 b4 d7 35 d5 65 80 0d 05 ca 7b a0 92 93 3a 3d 6b 6f cd 3d cd be dd 18 45 e6 a6 f7 a8 19 40 c7 da d3 7b c5 ac 88 ca 8b a8 52 6c 83 Data Ascii: kY?K0zz-fD*5:h:5e{:=ko=E@{Rl~'fId/[&e!7\|: 'G1p\|"`Cz".7cmqZ`bWmZ[:eM`p}FWSBT6g/
Oct 1, 2024 00:41:13.029253006 CEST	1236	IN	Data Raw: c0 9a de 40 6d 25 a0 69 f2 c4 95 aa d7 e8 da ed 0c 06 fb 83 82 3f 0a 8d eb 80 2e 24 82 b9 a9 52 41 19 d8 9e c8 13 79 0d 7c 07 f5 9d ae 5b 81 4f 1b ef 0f 6f f2 f0 df 10 3d 8d b3 0d ec 7f 4f fa ca 0a e0 34 ea c9 33 ef 26 f4 c0 3d ea 1d 55 a1 d3 c6 Data Ascii: @m%i?.$RAy\|[Oo=O43&=UZkV`6>~]vkHo$#IR5h=/sq SF8h!>ZZ6!z]T*`N(F#QIxNvJR2>GYb
Oct 1, 2024 00:41:13.029323101 CEST	1236	IN	Data Raw: 5e 72 6f 58 64 74 bd d0 b0 21 72 ec 59 93 ad 00 3c 60 01 bc b5 16 a8 c4 27 22 c8 36 7c 91 2d 05 c6 1e 30 f5 b3 57 3d df 50 e0 3b 22 6d 97 23 df 07 8e b2 87 e0 10 46 56 23 2b ac 59 f2 f2 34 a3 17 c1 37 4f 4f db ed f6 f1 0a 9d 13 e8 18 74 bc 23 08 Data Ascii: ^roXdt!rY<`'"6\|-0W=P;"m#FV#+Y47OOt#z8"tNMEu^ Xn(xZ=$?`IijO[\|=7S\39'[Vr#J"i}'-xJO\|Oe;`pszbsnCV7J+E2z
Oct 1, 2024 00:41:13.029335022 CEST	448	IN	Data Raw: d4 ce c3 09 22 4f 3e c8 d1 4e 8e ed 3b df b5 70 f2 81 61 58 ae 40 e5 a9 58 ba c8 08 c7 bf fe 8d 1e 36 b1 b4 86 ff c3 f8 c1 b7 8e 6f 92 ca e6 41 12 52 6e a3 90 32 54 e0 0f d8 56 4e 74 65 2a fa e2 20 b9 15 8b 3f eb e5 2f f1 f4 97 78 fa f3 88 a7 30 Data Ascii: "O>N;paX@X6oARn2TVNte* ?/x08YZ I$SAvGT$sUZ,^s4@P+gFg!bwWcU[i?euIhcuuxVt'{q#*k]Pu)\|;-
Oct 1, 2024 00:41:13.029778004 CEST	1236	IN	Data Raw: 2e 96 19 d7 71 e9 24 42 0b 49 55 ec 4a 33 c1 be 0d ec f3 8f 52 db 9f 7b 47 73 1d 89 3d c5 32 14 53 f4 63 fb 2e 6e c7 a9 cf 4e 92 f9 cc 18 bb 99 de c6 b9 d2 ee 04 00 76 40 89 42 10 23 82 44 f6 8c 1d 40 82 35 1d 6e 7b 49 fc e0 7d 8f a8 83 d8 9f 2d Data Ascii: .q$BIUJ3R{Gs=2Sc.nNv@B#D@5n{I}-hU#5HH(_R/=v}}J>+}UMP_4}\+/+4;pAC.'rXwt,)4PAWy,:zYpR19FE
Oct 1, 2024 00:41:13.029870987 CEST	224	IN	Data Raw: d9 44 51 5d df 80 46 da 4d 59 5d 47 bc f2 f9 db 4e e1 64 44 c9 42 92 43 4c 4c 33 6a a9 73 41 4f 80 64 12 46 f0 9c c3 86 06 db da 71 87 9c 2c 58 53 da 2b 66 43 17 5b 49 9d 07 a5 3c 29 df d0 33 b5 2f ba 80 42 15 fc 6a 35 48 60 2b 4e bb 51 90 1b 5f Data Ascii: DQ]FMY]GNdDBCLL3jsAOdFq,XS+fC[I<)3/Bj5H`+NQ_H&]YVQp bNZ+2H_X4.4j8\]'~Nr~1m#bYl99^!H(;%O#~OJIaP`
Oct 1, 2024 00:41:13.114976883 CEST	1125	IN	Data Raw: 60 9d 08 ea 9a da 23 17 bd 9d ab 39 3b 97 fa 3f 8a d5 d4 b4 c4 7a c5 d8 6e bf d3 a9 4c 46 11 92 cb 60 ac 16 80 24 2d 3a a0 88 3f b4 bc cd e2 2c e7 16 57 5c f9 d3 e9 50 d5 31 60 05 90 e2 8f f4 5d a0 62 cd 49 e0 a2 cb 05 bd c8 ba 4d 29 5a ee bd 9f Data Ascii: `#9;?znLF`$-:?,W\P1`]bIM)Z2(k%i0O9pHLeeP-n_p5;I0+i$_Qq=PTPTr(wG=kUbZ<%gKg#hxju+JkO&AJp
Oct 1, 2024 00:41:13.262020111 CEST	1215	OUT	GET /search/tsc.php?ses=ogcV14EreA4EoIZw_-LU2Q3lXkYfE3OnozKITGjNkP94gIIEhFnsW-etuHLK2aqXRE9BVN0UEIe6ycipmPUznSrFgIWiv0JTOxF7CZWlA3KyYQtP-X7oQadg0fHVdSLPOQ-L6b-5J5fASepmmXUHYW-VWf247ymnouT7pDq17b27lz92olfr-O_xbsN-QbuCTyk5jB5E4mDGn_aQpGtR9TofLtNfafVe60H-ztO89PoEV6V-sm8zifpBmp9arqfQGQLcjNjfZtsLt-8lACY-nt2WnoYdtwbIPGhVoClzq3Qm5GHKyKQe0d3NKpOkX3WXJ00KMNhX8UuvlGfZKXkRwh8SbowBPW4IEXz4EnJMGRhIohsEeXyZcfpRqIv&cv=2 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:13.455200911 CEST	181	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:13 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-lw9z8 server: Parking/1.0
Oct 1, 2024 00:41:16.524044037 CEST	949	OUT	GET /caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:17.190061092 CEST	1236	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:17 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_0ws7GhCHMRoeLyN3G9CH4/P8QtoCzEV2njHNq1jRyJohY+0osBj0Gx1OM3AMmFhMm1vcm5+VifMwcjTW3IwXkA== last-modified: Mon, 30 Sep 2024 22:41:17 GMT x-cache-miss-from: parking-75d9cf65f9-nz24j server: Parking/1.0 content-encoding: gzip Data Raw: 32 32 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 84 50 4b 73 da 30 10 be f7 57 6c 7c e8 25 e5 e1 40 53 32 c5 cc 18 f3 4c 30 c4 e4 41 e8 a5 23 cb 6b 2c 90 25 62 c9 56 c8 af af 80 4e 9b 9e aa c3 6a bf 9d d9 ef b1 dd 8b c1 22 78 5c df 0f 21 d3 39 ef 75 8f 15 38 11 1b cf 41 e1 00 24 44 93 1a 49 62 2e e9 6e 87 07 2f 1c 19 33 88 d6 b7 77 f2 c7 34 ab e8 dc 8f 86 fd 7e e4 0f 1e 8c 6f 1e fc db be 3f 17 07 be 32 57 d5 6c dd ce 9e c4 8d 69 5e bf 47 77 71 76 d7 4f ab ed e8 29 50 c9 88 c7 d7 8f 49 94 bd c5 37 cb 97 d5 4b 39 6d eb 96 4b 2f 65 27 5d 2f aa 86 ea bc ba b3 f1 fd 86 b4 06 43 77 d6 d0 93 a7 f6 6c 38 0f 03 df 0c 7d 3f f2 bc 9f 4d a3 be 8d b3 60 12 2e 25 ce 0e f3 d6 f8 26 98 b4 1b f7 9d 48 cb e0 7d f8 7c 25 b6 93 f9 ab bb 5d 1e 6e 65 b6 be 6c 4a d5 df 36 c7 6f ee 22 6c f9 61 3e ca c2 dc ad 68 fe f5 f2 99 a5 a1 a1 db c7 55 6b 6a 5e 76 be e7 d9 e8 48 92 5e 37 47 4d 80 66 a4 50 a8 3d a7 d4 69 ad e3 f4 ba 9a 69 8e bd 98 88 9d 61 45 9d ca fc b3 88 d5 fe 7b ed fc 05 4c c3 42 70 26 10 1e 48 c5 c4 46 81 4f a9 2c 85 [TRUNCATED] Data Ascii: 222PKs0Wl\|%@S2L0A#k,%bVNj"x\!9u8A$DIb.n/3w4~o?2Wli^GwqvO)PI7K9mK/e']/Cwl8}?M`.%&H}\|%]nelJ6o"la>hUkj^vH^7GMfP=iiaE{LBp&HFO,%`JLEh&E8Susf/B>Kt%X1_r20)'Hb;i:$hG>d`}COc9FRnQx8[=Ol,Ti&Sp+uX!drf:"K;X{6Uf;F837Y[o+jf-;Hm
Oct 1, 2024 00:41:17.190113068 CEST	224	IN	Data Raw: 2d b0 0b ec c3 a2 28 30 08 06 94 44 d9 dc 48 a2 20 4a 8e 3d aa fe 7b 0f 2f 92 28 89 f2 24 8b 45 30 13 9b e4 39 3c 97 ef dc 98 6b 01 16 a1 19 3e 92 75 91 1f 87 8d 53 49 92 bf de ad d7 34 3b ae 38 89 59 81 4b c1 57 98 67 5d 91 ac 48 85 4e eb 94 1d Data Ascii: -(0DH J={/($E09<k>uSI4;8YKWg]HN_JX/o{f^)FVi<s:$'K1_~\@m7.@GTIj;w7,6.4RbNc&]+g
Oct 1, 2024 00:41:17.538786888 CEST	1224	OUT	GET /search/tsc.php?ses=ogc_6KaAP3qvZpm3n9bvdQ8nyOhbuX_2yo7FoIIXRa7JpqLjwWHLQZggjpOY7-ZV4LHVnH6RYuCSEsjYSY1V3OMvx4_tEeHVaQPg2iz3GYXOMI3rMkGzYncYnqC4Gctvus_-6Fo48nzl_m_4CBNeROlXFzQdDIP2d5Ch7oMEYWxfPFogzfV6Fm5L3zkEZUk06dJ0OloHtf92IuWxl_MmLZ0MucVwzhYEWh2Oaeegd_JAdutx7xq6XiU3aWP3VUTd65P2fsUWaFDWsB1VlXm_e8nmnaqx8v3o0UiDiGXM1PMBudspugRhfDImPUkQuj8qhZY7oFrUoLA6mcp5TrBv54G_hkuhwrM8MXNukMmKJmWCPxBNDexAXtQlOLx&cv=2 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:17.732681990 CEST	181	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:17 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-n7q88 server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49873	91.195.240.19	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:41:13.465013981 CEST	771	OUT	GET /search/tsc.php?ses=ogcV14EreA4EoIZw_-LU2Q3lXkYfE3OnozKITGjNkP94gIIEhFnsW-etuHLK2aqXRE9BVN0UEIe6ycipmPUznSrFgIWiv0JTOxF7CZWlA3KyYQtP-X7oQadg0fHVdSLPOQ-L6b-5J5fASepmmXUHYW-VWf247ymnouT7pDq17b27lz92olfr-O_xbsN-QbuCTyk5jB5E4mDGn_aQpGtR9TofLtNfafVe60H-ztO89PoEV6V-sm8zifpBmp9arqfQGQLcjNjfZtsLt-8lACY-nt2WnoYdtwbIPGhVoClzq3Qm5GHKyKQe0d3NKpOkX3WXJ00KMNhX8UuvlGfZKXkRwh8SbowBPW4IEXz4EnJMGRhIohsEeXyZcfpRqIv&cv=2 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:14.105438948 CEST	181	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:14 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-lw9z8 server: Parking/1.0
Oct 1, 2024 00:41:17.750510931 CEST	771	OUT	GET /search/tsc.php?ses=ogc_6KaAP3qvZpm3n9bvdQ8nyOhbuX_2yo7FoIIXRa7JpqLjwWHLQZggjpOY7-ZV4LHVnH6RYuCSEsjYSY1V3OMvx4_tEeHVaQPg2iz3GYXOMI3rMkGzYncYnqC4Gctvus_-6Fo48nzl_m_4CBNeROlXFzQdDIP2d5Ch7oMEYWxfPFogzfV6Fm5L3zkEZUk06dJ0OloHtf92IuWxl_MmLZ0MucVwzhYEWh2Oaeegd_JAdutx7xq6XiU3aWP3VUTd65P2fsUWaFDWsB1VlXm_e8nmnaqx8v3o0UiDiGXM1PMBudspugRhfDImPUkQuj8qhZY7oFrUoLA6mcp5TrBv54G_hkuhwrM8MXNukMmKJmWCPxBNDexAXtQlOLx&cv=2 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:17.946449041 CEST	181	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:17 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-lw9z8 server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49861	91.195.240.19	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:41:17.911036968 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Oct 1, 2024 00:41:22.940248966 CEST	934	OUT	GET /caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Easy+Credit+Online&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ&pcsa=false&nb=0 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49880	91.195.240.19	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:41:22.940669060 CEST	934	OUT	GET /caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Easy+Credit+Online&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ&pcsa=false&nb=0 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:23.631359100 CEST	1236	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:23 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_juqD9Rau98mFcol04vZFoRh4RxZzYGyhgQKc7Cr3oYpY4hMbJQn9bq5w8hBN1Amy1jgOwx2lCHvXpbx6RjMVHQ== last-modified: Mon, 30 Sep 2024 22:41:23 GMT x-cache-miss-from: parking-75d9cf65f9-n7q88 server: Parking/1.0 content-encoding: gzip Data Raw: 32 43 42 0d 0a 1f 8b 08 00 00 00 00 00 00 03 94 57 79 73 9b 38 14 ff 7f 3f 85 ea 9d dd d9 c3 d8 38 a7 03 71 66 9c 6b 7b 24 6d 93 6d b7 4d 3b 99 8e 00 01 8a 41 a2 48 18 bb 5e be fb 3e 09 8c f1 b9 ad 3d 63 23 e9 dd ef f7 de 13 a7 cf 2e df 5c bc 7b 78 7b 85 42 19 47 67 a7 ea 17 45 98 05 83 16 61 2d 84 3c 2c b1 81 3d 27 e2 ee 68 44 a6 83 db eb 3c bf bc 7b 78 f9 8a 7f 7a 11 8e dd d7 c3 bb ab f3 f3 bb e1 e5 df f9 30 ff 7b f8 f2 7c f8 9a 4d a3 0f f9 de f8 e6 e1 20 7c cf 4e 72 f3 e8 db dd 2b 27 7c 75 ee 8f 9f ae df 5f 08 ef 3a 72 8e de 79 77 e1 c4 39 b9 ff f8 e1 63 f6 e2 40 ee f7 dc 3f 79 df 7f 78 33 ee 8a fe d7 de cd 5f 6f 03 bc 7f 79 d5 bb e9 ca e7 ef 0f 6e ae 5e df 5e 0c f3 ab e1 f0 6e 30 f8 f2 94 7d bd 3c b9 c7 d9 49 3f be 76 79 64 1e 8c 3f 5d f3 fb f0 e0 7e f2 e9 db c3 5f d3 30 b8 7b e5 1e 5f a4 fb fc 21 01 0b 6e 9d 97 77 ec c4 f9 7a 98 f7 c3 f3 d7 bd 61 3c ed 3d 05 6f f2 c9 5e 74 f1 7c fc 31 71 26 47 f7 4f b7 ff 3c 07 c1 e0 3a c1 de d9 69 4c 24 46 6e 88 53 41 e4 a0 95 49 df e8 b7 ce 4e 25 95 11 39 73 [TRUNCATED] Data Ascii: 2CBWys8?8qfk{$mmM;AH^>=c#.\{x{BGgEa-<,='hD<{xz0{\|M \|Nr+'\|u_:ryw9c@?yx3_oyn^^n0}<I?vyd?]~_0{_!nwza<=o^t\|1q&GO<:iL$FnSAIN%9s04<9")HG%z"'gKC/KY[+51AkLIT$4#cC/QIqdGdOhLT/;fkIGDQ`7i*6!PD Lu;9IrEGH&yB]RT}FRBvB4bWG08G?->-9M 4&
Oct 1, 2024 00:41:23.631395102 CEST	1236	IN	Data Raw: 2c 58 1c 84 29 f1 07 ad 6e 97 c6 41 47 10 8f 27 38 55 72 55 40 ba 92 c4 09 d8 4a 44 37 e2 01 17 5d 75 fe 45 3d 76 b4 88 ee d9 a9 90 53 c8 66 2d ac fb c7 33 c4 54 84 22 fa 8d 74 5c 21 d0 f8 b8 63 76 4c f4 2f ba 7d f1 0e dd 40 3a 99 20 b0 0a a8 0c Data Ascii: ,X)nAG'8UrU@JD7]uE=vSf-3T"t\!cvL/}@: 3G+aEw*uzC4PBm>eNL3ripo7A1:qPfN%u#zs1o?mA\G`jP=1Y4pXDdnJdR%oU4
Oct 1, 2024 00:41:23.631407976 CEST	1236	IN	Data Raw: dd b2 fb f6 56 a3 f5 93 2b 8d 4c ec b6 7b 41 f7 fd a6 6f e0 59 b3 7e 13 cd 0f 39 00 ce 8f b1 3b 7d cb e1 95 62 ba db 87 25 d2 ef 77 63 33 db 8f 86 99 8f 28 31 62 b8 26 e1 80 cc ea 97 13 9f 4e 88 67 57 3d 0b 6e 57 8b 2b 57 73 e4 1d fa ea bb 5a b6 Data Ascii: V+L{AoY~9;}b%wc3(1b&NgW=nW+WsZU]EEYKo0+R%$$pa&)Hv}c;+yf<N \nz}3mUi`\|\XqlY'gMYQxO@U?+;xcn]>
Oct 1, 2024 00:41:23.631418943 CEST	1236	IN	Data Raw: 5b bf 0f d7 25 7b dd 83 2c 96 ff 28 b2 3e c0 f4 29 51 60 39 68 68 1d 34 12 4c 2f bd 9f d2 3b e0 0e 7f 2c 27 d5 20 d7 60 80 48 98 8b d2 ec 34 71 94 34 6e 24 72 e1 ad 54 48 12 45 05 ec 03 6d fd 09 6a 34 a9 f3 79 cf 6c af bb 64 36 19 02 44 37 b2 6d Data Ascii: [%{,(>)Q`9hh4L/;,' `H4q4n$rTHEmj4yld6D7m-`hX:+@WW%g8T_4A~Pz>uO, ('av^K?$&j?n3yQu$)'9AtLu+~Ydws}GGA
Oct 1, 2024 00:41:23.631431103 CEST	1236	IN	Data Raw: 94 9e cd be 0d 58 53 e8 90 41 60 b7 37 9a 88 c7 1b 75 27 63 9b 5e bc ed 75 de 84 e2 d4 89 b9 37 57 08 08 be a4 b4 27 74 5b ee ca 83 e9 80 13 1b e5 7e 5d c0 e6 45 a7 cf 4f df f8 5e d9 f4 88 96 d7 62 25 22 52 d7 51 a9 a7 6c 8d e5 ba dd ec d3 78 5b Data Ascii: XSA`7u'c^u7W't[~]EO^b%"RQlx[k:afmh]Y$VqFNHpDi+[,3jl_5H6#4*7n(Ui5$I>ZzI:fl^esK_"\|u)^[n#xT
Oct 1, 2024 00:41:23.631443024 CEST	1236	IN	Data Raw: e7 fe e9 00 4e 11 a8 34 de 89 dc 7a 95 12 70 4e fa a1 2f 81 54 1d 34 f3 14 be 7d 35 8b f9 2f c1 c1 b9 17 cf 67 4f 7f af 27 39 b8 71 c7 e3 ba 7a 53 b8 99 cf 3a a7 ea 83 bc 0f 92 9f f6 63 d0 b3 54 32 5c da 7f 00 00 00 ff ff 0d 0a 35 37 31 0d 0a ac Data Ascii: N4zpN/T4}5/gO'9qzS:cT2\571kO8dsRip`OSU4M!&)+73v-Pm'3yyGno\glheFF9qx>YU?P8WVtHbGzqNF~?bp:7_
Oct 1, 2024 00:41:23.631455898 CEST	1021	IN	Data Raw: 5d 5d 0c e3 fb 24 9e 03 87 34 dc 33 99 d9 6b 19 6b 59 21 d4 45 8b 5b ce d7 38 9c 77 cd 8e 69 b9 92 2e cc c1 4a da 31 a1 30 c9 57 d4 6b 1c 3d 55 7b f6 7d aa 3b 83 6a 11 ea c2 90 ca 42 8e 13 05 f3 db fc ee b8 6f ad 6a 03 1b 17 1a 36 10 99 14 3f 53 Data Ascii: ]]$43kkY!E[8wi.J10Wk=U{};jBoj6?SLu^U\|,zs)6jp6FFHV4p^TX^/2>Aed}=5HU.Yx}!T)%W$V#^j6<6_yFYn-Bn)t301
Oct 1, 2024 00:41:24.506961107 CEST	1209	OUT	GET /search/tsc.php?ses=ogcCEgzSeontOgAbrSzHQVODwWyiFd4Smw4NzjHCVuKwwf_Zh7smDYw8XcvF9mEwvIWDdMpWAhDhSCRGbwXXCwb7M94EIr_Y6XNgLEPfbup_J4Ss8zT-lIgI2E1lTQvRqm4D_wHpAD6GCKXnzRLM6h-4XAF_YoB7VMC7Qom8P5eH2cRNIWJys3VzkYjG_PkO-YTn-zuMeAJzDzmh8Vaj_oduMSL0HNXnpScEHSqfUof9WL9FX52GfWZ8EyYqGYtNCgOAY2PVNL6BWyP9SwiMmIxd6bpOZHKALHYm_rGRZTdJzo75bx6Mqs8nv5nNP8HbkZIyHWpLGDGeIaWw9WrCtgsNKgvJgi-8OMtQHqw9GFYlMdCq-lCrC4fiq9n&cv=2 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Easy+Credit+Online&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ&pcsa=false&nb=0 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:24.704906940 CEST	181	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:24 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-d8c6n server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49886	91.195.240.19	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:41:25.858484983 CEST	771	OUT	GET /search/tsc.php?ses=ogcCEgzSeontOgAbrSzHQVODwWyiFd4Smw4NzjHCVuKwwf_Zh7smDYw8XcvF9mEwvIWDdMpWAhDhSCRGbwXXCwb7M94EIr_Y6XNgLEPfbup_J4Ss8zT-lIgI2E1lTQvRqm4D_wHpAD6GCKXnzRLM6h-4XAF_YoB7VMC7Qom8P5eH2cRNIWJys3VzkYjG_PkO-YTn-zuMeAJzDzmh8Vaj_oduMSL0HNXnpScEHSqfUof9WL9FX52GfWZ8EyYqGYtNCgOAY2PVNL6BWyP9SwiMmIxd6bpOZHKALHYm_rGRZTdJzo75bx6Mqs8nv5nNP8HbkZIyHWpLGDGeIaWw9WrCtgsNKgvJgi-8OMtQHqw9GFYlMdCq-lCrC4fiq9n&cv=2 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:26.512897015 CEST	181	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:26 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-d8c6n server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49899	91.195.240.19	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:41:36.957576990 CEST	945	OUT	GET /caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&nb=0&nm=2 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:37.538149118 CEST	1236	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:37 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_Ghnr54cL0OqGfEbodVta5rsEU5ICcdkqf3mpAWVDQ6pdAPBlZO5XMybEXBJbyB9qcNY5vs5bAXsPSr+kBUutug== last-modified: Mon, 30 Sep 2024 22:41:37 GMT x-cache-miss-from: parking-75d9cf65f9-b9tc5 server: Parking/1.0 content-encoding: gzip Data Raw: 32 43 42 0d 0a 1f 8b 08 00 00 00 00 00 00 03 94 57 7d 53 db 38 13 ff ff 3e 85 9a 9b bb b9 97 38 71 80 50 b0 09 33 49 a1 3d 5a 5a e0 5a ae 70 1d a6 23 db b2 ad c6 96 5c 49 ce 4b f3 f8 bb 3f 2b d9 49 9c d7 6b c9 0c b1 b5 ef bb bf dd 55 ce 9e 5d dc bc f8 f0 78 7b 89 62 95 26 e7 67 fa 3f 4a 30 8b 7a 0d c2 1a 08 05 58 61 0b 07 5e c2 fd e1 90 4c 7b 6f 5f 8e c7 17 77 8f af df f0 7f af e2 91 ff ae 7f 77 39 18 dc f5 2f de 8f fb e3 f7 fd d7 83 fe 3b 36 4d 3e 8e 0f 46 d7 8f 47 f1 3d 3b 1d db c7 df ee de 78 f1 9b 41 38 fa f2 f2 fe 85 0c 5e 26 de f1 87 e0 2e 9e 78 a7 7f 3f 7c 7c c8 af 8e d4 61 c7 ff 93 9f 84 8f 37 a3 b6 3c f9 da b9 7e 75 1b e1 c3 8b cb ce 75 5b fd 75 7f 74 7d f9 ee ed 8b fe f8 b2 df bf eb f5 3e bf 8a 99 e8 1e f9 d7 f6 cd d7 57 e1 a5 c7 83 7f 14 ee 0a 79 79 df bd 7a e1 07 c3 af e1 61 9a f5 3f fe 73 71 77 9c 05 fd db 41 f2 ef 4d f7 e1 ed d4 bb 7c 18 bc f6 a6 83 d3 af fe bb c7 ee 48 76 bd fe 83 bc 7d 2f fe 1c 0e ee 73 95 47 bd 1e 84 4e 70 70 7e 96 12 85 91 1f 63 21 89 ea 35 72 15 5a 27 8d f3 33 45 [TRUNCATED] Data Ascii: 2CBW}S8>8qP3I=ZZZp#\IK?+IkU]x{b&g?J0zXa^L{o_ww9/;6M>FG=;xA8^&.x?\|\|a7<~uu[ut}>Wyyza?sqwAM\|Hv}/sGNpp~c!5rZ'3EUB=c*Z>Oe\ae!9eHHYXEu.5NI1dqL4Pq/ #4)>NH)4Ok'$bNH_LQTQ7x(cAPx_Di HzA%$5+!W<DaDByVj2+AI8xW?,m,4
Oct 1, 2024 00:41:37.538172007 CEST	1236	IN	Data Raw: 44 d0 14 47 a4 9d b1 68 49 88 05 09 7b 8d 76 9b a6 51 4b 92 80 67 58 98 28 20 2b 6d 45 d2 0c 7c 25 b2 9d f0 88 cb b6 a6 7f d6 8f 2d a3 a2 7d 7e 26 d5 14 4a ba 50 d6 fe e3 19 62 3a 4d 09 fd 46 5a be 94 68 f4 bc 65 b7 6c f4 3f f4 f6 ea 03 ba 86 9a Data Ascii: DGhI{vQKgX( +mE\|%-}~&JPb:MFZhel?2I-*=c'XWh[1QNuTZL%K.bxC4A4S,",r9of/GMI\|]Y@%$`YPY1s"ic&<N2wGv6)b1D
Oct 1, 2024 00:41:37.538184881 CEST	448	IN	Data Raw: c0 46 d4 1b 0c a6 e9 56 c3 77 77 3a 6d 9e 7c 65 e5 72 bf df 4b be ef 77 7d 8b cc 86 f7 db 78 7e 28 00 08 7e 84 fd e9 2d 87 9f 14 d3 fd 31 ac b0 7e 7f 18 db c5 7e 34 cd 7c 48 89 95 c2 35 09 47 64 b6 f8 71 12 d2 09 09 dc 6a 66 c1 ed 6a 79 e5 aa af Data Ascii: FVww:m\|erKw}x~(~-1~~4\|H5Gdqjfjyn?m[302YKo0+R%$$pa&)Hv}c;+*<37y9QU~_wo1XFd\|#gpu$@lY'eC5A.(nkjlakmAU?+
Oct 1, 2024 00:41:37.538413048 CEST	1236	IN	Data Raw: 97 cb eb b4 3c d6 fe 16 d0 18 08 b4 50 07 a8 5a e2 c4 f4 d4 e6 5a f6 45 e1 83 28 f1 b5 9f ce 78 0e 85 b0 9a 33 79 17 08 d0 bb 37 b8 36 0a 18 86 ed a9 e2 aa 7b 74 8d 66 59 16 67 da 7d 68 8b 7d 40 6b 89 e0 2d c4 54 60 02 e7 1b ce c8 3d f0 b3 22 2d Data Ascii: <PZZE(x3y76{tfYg}h}@k-T`="-+Dq`pi5ezk6hQe/[ar+jkQm]DzZOy.B4ttbU4Y")(\|n:7kKl}hO(H
Oct 1, 2024 00:41:37.538434982 CEST	224	IN	Data Raw: 99 e9 d7 ac 8a f7 58 cb 0a e9 78 58 4b 3b 29 eb 45 ce 55 a8 3b c9 2f a9 c0 d5 7a 2a bd 22 91 39 f4 42 d3 06 c8 91 47 5d b2 02 ed 0e 09 c0 ad b5 b4 46 7a 22 bc 64 83 17 c5 52 60 e4 0e 51 3f 7a 35 f2 4d 05 bc c3 f2 76 3d f2 7d cd 51 f6 00 1c c0 48 Data Ascii: XxXK;)EU;/z"9BG]Fz"dR`Q?z5Mv=}QHjd-KZf"!+tN` hujq`)juSV*H,{d%=>m)WgN=r-p V<pa[N}+ci!?aN
Oct 1, 2024 00:41:37.538445950 CEST	1236	IN	Data Raw: f0 23 c9 97 ec 00 79 7c 05 6d f0 0f 59 90 3d 6b 24 34 49 6e ad 90 dc 61 11 0f 05 c5 56 db bc 27 36 70 52 25 95 68 61 b7 22 89 54 3d c5 2c af 65 02 23 78 5b 34 b9 b5 61 0d db 3d 4b 6c 70 24 5f a7 a8 61 63 91 f0 eb 29 3e 9c 88 d8 62 ce fb a3 39 6f Data Ascii: #y\|mY=k$4InaV'6pR%ha"T=,e#x[4a=Klp$_ac)>b9o-T72^3%=d8!?<)ikj#jg,0Q_f{Mi<KON gpG$XwYA[qV@DXMBi*: 7d\|ex<S}>B
Oct 1, 2024 00:41:37.538471937 CEST	224	IN	Data Raw: 0b a9 a6 74 f5 8e a7 0d a7 41 ef 50 11 5f e4 35 db 0d 24 bc d3 17 35 7d ba 48 9e d9 d5 56 39 a8 01 e5 6f 6b 36 b6 af 8b 4c 0f ef e9 b4 c2 c4 b2 5e 63 a6 cc 5e 9b f4 ec 0e 3f 70 65 41 64 c9 be b2 21 5b ed 66 d8 f1 bb 01 dd 09 b0 43 77 b5 5f 5a 9e Data Ascii: tAP_5$5}HV9ok6L^c^?peAd![fCw_ZP=j0/(FU#ZTcQzN8h]^MpnDS`&HTu>[JmO*(v+TBgf7Z/F.p2+\$k2k:
Oct 1, 2024 00:41:37.538609028 CEST	1236	IN	Data Raw: 31 46 18 7a c1 63 66 72 c3 97 a9 bd 0d 7c 51 f8 cd 69 50 34 bc a1 30 54 e5 55 c1 75 5c 39 99 d0 82 52 15 b9 d2 4c a0 6f 07 fa fc a3 d4 f6 97 de d1 5c 87 62 4f b1 4c 65 23 f8 a9 7d 97 b6 d3 d4 27 97 65 3e 0b c6 6e a1 b7 7b ae b4 3b 01 68 89 a6 44 Data Ascii: 1Fzcfr\|QiP40TUu\9RLo\bOLe#}'e>n{;hD"DD5n{Ym`h?Ke3hNb \]I(o_r/=u}}>+N}U]T<\|R+OTh\|ww+L'+e#%VBH=!Y9!%IW?8
Oct 1, 2024 00:41:37.538649082 CEST	1236	IN	Data Raw: c8 bc eb 1b d8 e8 79 53 78 d7 91 af 6e 7f 5b 92 94 26 51 3c d7 e2 50 27 5c 45 a5 3c 2e 38 60 14 a5 71 b8 cf 09 1c 68 b0 5c 0a 77 68 62 ee 5a ae bd 4c 0d 55 ce 52 eb 3c 28 e5 59 71 43 cf e0 17 5d fe 03 00 00 ff ff 0d 0a 35 32 30 0d 0a ac 5c 5b 6b Data Ascii: ySxn[&Q<P'\E<.8`qh\whbZLUR<(YqC]520\[kF+Y=rUgM@KwcEN$$e.NZ/of$]P$*p':x9Jwk#SphNk8$;)d+?z4bM?MJ_D
Oct 1, 2024 00:41:37.538659096 CEST	161	IN	Data Raw: ef 96 4a 69 fd 1d d0 d4 d3 b9 06 8c c4 ca 93 a4 af 5e 92 e4 fc 68 30 d6 3a 57 3f 4a b8 d8 95 b9 f2 57 7e 66 5c 03 7d c9 49 1d 26 8c 22 f0 f7 f9 f9 09 6c 7f d7 bf 29 16 5d 30 96 25 ec ee 27 d4 53 14 a9 f9 e9 62 21 f4 12 7b ea 20 d4 45 27 94 75 7b Data Ascii: Ji^h0:W?JW~f\}I&"l)]0%'Sb!{ E'u{K+]p>S7g71:v<yjQTo]tE>LZ0
Oct 1, 2024 00:41:38.735189915 CEST	1220	OUT	GET /search/tsc.php?ses=ogcOvUmN52CO_eKsS5JZzE0wynRpt6QbiS6sAHuO_6msznjeTMydQ93ointIivefiiMkkBN_NZP1WxDDsxt58gmUI3k7v-SyUMSMr2tGGCjigQ7KWxayEJJgFOj_5eggQILa25IYaBcIfHpeOUsJz8ZWbj9Isa1HKZefUYxR9gqczds4rqBm0yCZ7J1Jf6c7wbfB7U7yeSJmHNLobTZ93Kck3FGEtHrIs6Hs0zIgy_lpTBM6wGPDV0TmKYKguw-dhwwuXdAXisOicYz3810tShNiPEEjuJnuYzeKyjojdjxmg6E49xGGmDuUa9wzlLggqxKPZ6vddXV_a_t5qGbkpK3crZZGymFtcClYf7VUApPj_TtA9upvttLb_lb&cv=2 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&nb=0&nm=2 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:38.930938959 CEST	181	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:38 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-b9tc5 server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49903	91.195.240.19	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:41:39.063190937 CEST	771	OUT	GET /search/tsc.php?ses=ogcOvUmN52CO_eKsS5JZzE0wynRpt6QbiS6sAHuO_6msznjeTMydQ93ointIivefiiMkkBN_NZP1WxDDsxt58gmUI3k7v-SyUMSMr2tGGCjigQ7KWxayEJJgFOj_5eggQILa25IYaBcIfHpeOUsJz8ZWbj9Isa1HKZefUYxR9gqczds4rqBm0yCZ7J1Jf6c7wbfB7U7yeSJmHNLobTZ93Kck3FGEtHrIs6Hs0zIgy_lpTBM6wGPDV0TmKYKguw-dhwwuXdAXisOicYz3810tShNiPEEjuJnuYzeKyjojdjxmg6E49xGGmDuUa9wzlLggqxKPZ6vddXV_a_t5qGbkpK3crZZGymFtcClYf7VUApPj_TtA9upvttLb_lb&cv=2 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:39.732165098 CEST	181	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:39 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-n7q88 server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49898	91.195.240.19	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:41:42.420990944 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Oct 1, 2024 00:41:44.492275953 CEST	954	OUT	GET /caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0&nm=3 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49907	91.195.240.19	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:41:44.505191088 CEST	954	OUT	GET /caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0&nm=3 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:45.189785004 CEST	1236	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:45 GMT content-type: text/html; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding expires: Mon, 26 Jul 1997 05:00:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_vOSo81pciB3Yo4i2ovbBL9KzPSn72GPR423HYjlBAYxftcMpN1D4jcSsZ7+lB6POyjbuDLshtj4gDtiwOCgcGQ== last-modified: Mon, 30 Sep 2024 22:41:45 GMT x-cache-miss-from: parking-75d9cf65f9-lw9z8 server: Parking/1.0 content-encoding: gzip Data Raw: 32 32 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 84 90 4d 73 da 30 10 86 ef fd 15 1b 1f 7a 49 20 01 3c 09 99 62 66 6c 4c be 20 7c 26 93 38 97 8e 2c cb b6 40 96 1c 6b 6d 85 fc fa 0a e8 b4 e9 a9 3a 48 bb 3b a3 e7 7d df 1d 9c 84 f3 d1 53 b4 18 43 8e 85 18 0e f6 37 08 22 33 cf 61 d2 01 48 08 92 16 49 62 a1 e8 76 cb 76 de e3 8d 31 e1 32 7a 98 a8 b7 fb bc a1 33 7f 39 0e 82 a5 1f ae 8d 6f d6 fe 43 e0 cf e4 4e bc 98 6e 33 8d dc fc 59 5e 9b 8b cb cf e5 24 ce 27 41 da 6c 6e 9e 47 3a b9 11 f1 e5 53 b2 cc 3f e2 eb d5 eb cb 6b 7d ef 62 af 43 4f 55 3f 8d e6 cd b9 ee bf 77 a6 b7 8b 8c f4 c2 71 67 7a 8e 77 cf ee 74 3c 7b 1c f9 66 ec fb 4b cf fb d9 cc d7 aa df 29 29 0f 7a 91 72 79 57 35 71 30 bd 9e 7c 2e d6 f2 aa 7b bb 58 b9 dd de 5d b4 11 81 1f 7d a4 48 1f cb 59 27 74 37 74 ad df ae 4e 45 70 b9 98 ef 36 71 1d 4e 75 8e 1b 37 0b 91 9b f9 28 a3 b7 16 6c a3 33 92 0c 07 05 43 02 34 27 95 66 e8 39 35 a6 ad be 33 1c 20 47 c1 86 31 91 5b c3 ab 36 55 c5 77 19 eb f2 47 eb f8 8c 38 c2 5c 0a 2e 19 ac 49 c3 65 a6 c1 a7 54 d5 12 61 [TRUNCATED] Data Ascii: 221Ms0zI <bflL \|&8,@km:H;}SC7"3aHIbvv12z39oCNn3Y^$'AlnG:S?k}bCOU?wqgzwt<{fK))zryW5q0\|.{X]}HY't7tNEp6qNu7(l3C4'f953 G1[6UwG8\.IeTaEiX1e W=8?sLtLZ'{k8eCs%GNDKS"i_ueRkVZL4xEKFv7x3[o 6`@VVQj<]J!cUDXA5A#\|vNllg~9&v571Y[o+jf-;Hm-
Oct 1, 2024 00:41:45.189800978 CEST	224	IN	Data Raw: b0 0b ec c3 a2 28 30 08 06 94 44 d9 dc 48 a2 20 4a 8e 3d aa fe 7b 0f 2f 92 28 89 f2 24 8b 45 30 13 9b e4 39 3c 97 ef dc 98 6b 01 16 a1 19 3e 92 75 91 1f 87 8d 53 49 92 bf de ad d7 34 3b ae 38 89 59 81 4b c1 57 98 67 5d 91 ac 48 85 4e eb 94 1d 19 Data Ascii: (0DH J={/($E09<k>uSI4;8YKWg]HN_JX/o{f^)FVi<s:$'K1_~\@m7.@GTIj;w7,6.4RbNc&]+gH
Oct 1, 2024 00:41:45.189812899 CEST	1236	IN	Data Raw: 78 bc 89 29 07 03 5c 7d 99 1d da d3 a6 49 00 45 92 b9 bf 25 59 a0 f9 ad f6 4f 24 73 bc 36 a1 c7 08 4b b8 b9 f0 b1 2e 09 00 96 4e 99 a8 9d 4e 94 0d 10 3e 7a c5 a5 3d 95 4d c8 2e 82 35 18 df d7 60 45 b0 14 68 ed bd 80 9d 49 99 a4 ec cd 3f 53 4e 01 Data Ascii: x)\}IE%YO$s6K.NN>z=M.5`EhI?SNm\|@hz33^>pUG#0;+9-cK)+-\|V-U2?g9&>DJ'zG'Rx/qV\|$qk(F-unGZ
Oct 1, 2024 00:41:45.189825058 CEST	224	IN	Data Raw: 17 ff 46 f3 98 bd cd 00 3c 9d e2 cb 63 88 3f 6d 3d cf ed fe c1 58 f2 39 10 e2 7b 81 16 7a 40 bd 12 71 78 19 11 43 a5 e2 0e e6 72 56 0f 3c 90 83 91 65 dd b6 64 cb 00 33 05 c6 3d d0 c8 49 9b 9d 77 3f 60 4f a1 ef 36 0f 13 b9 fa 41 b5 63 b0 f1 ee 55 Data Ascii: F<c?m=X9{z@qxCrV<ed3=Iw?`O6AcUQ5m0q`;l'BxQ8idD<9r@4(Oq}x73!vhBCHjrT,I1!x("-&=??-AC%17lyN
Oct 1, 2024 00:41:45.189960003 CEST	1236	IN	Data Raw: 31 69 ce b4 2f 24 83 01 de 00 6d 29 20 42 bc 8e 84 ea 16 5d b7 9b c3 e1 e1 60 f8 c3 58 1c 02 da 48 04 17 24 53 c1 98 b1 7f 12 13 b9 85 fd 06 ef c3 6d 34 61 af 17 df cf 1e f1 ec 8f 10 5d c7 d9 8c f7 1f 27 fd e4 06 70 5a 1e 8b 99 77 ce fa 10 3d ef Data Ascii: 1i/$m) B]`XH$Sm4a]'pZw=uF5O0?n`[V/hu$oxT5^bQ&6qC*h~;JzU3:IJbJDfQNvRQB~hI>
Oct 1, 2024 00:41:45.190011024 CEST	224	IN	Data Raw: 9b 27 09 0b 77 8f 40 0e 34 34 c8 79 76 c7 e9 a1 9a 31 ce e1 cb 68 54 14 c5 d0 62 17 a6 df 7d 08 bc 73 20 0a 62 f1 bf 1c 91 45 9f 19 e7 55 73 17 84 ef a3 34 03 2e 8e 47 1c a7 54 f8 75 20 f9 7f 20 ed b0 f2 ec 18 f8 9b d9 64 bd 1e f8 12 b2 51 ed 99 Data Ascii: 'w@44yv1hTb}s bEUs4.GTu dQl~jZ)n(xBFwIxuN571[YH+3e_HPnu(,& ;wyyh\wH;aj%)V)$>_;Rs3xzH8
Oct 1, 2024 00:41:45.190093994 CEST	1236	IN	Data Raw: 0f f3 d7 fa aa 5d d8 49 49 7c fe 1d a5 d1 0f 61 d0 52 ac ea 13 5a 3e b8 b4 5c 1b 95 cc 6f 12 6f a6 e4 26 4f d1 1e ed 5e 8c 64 7a b1 69 0f ad 7c ef e0 00 12 28 89 19 c9 87 30 5e ce a4 d8 e4 65 5a 19 33 cc 92 37 2a e5 b0 a1 96 9a 49 1a 7b a5 50 f7 Data Ascii: ]II\|aRZ>\oo&O^dzi\|(0^eZ37*I{PJl=6B{k'1CYI;IKemfffW#NmP'+7+P>6=B+wV$Rr)"5y3B{X>ox~ak/2_
Oct 1, 2024 00:41:45.190160036 CEST	224	IN	Data Raw: aa e4 b5 3b 3d 4d fd ea 3a 0f 6c 35 9b a8 a5 36 ec 2e 84 a0 9c a4 0c 39 99 73 8a df a5 f4 6c 94 5d 27 96 26 6c 97 7c e9 f3 01 73 73 12 38 64 22 43 08 17 34 bf be 4d cc 45 be 0d 0d 0a 32 32 42 0d 0a 2a 71 6f 93 9c e4 91 c6 76 da cf fc 53 37 55 03 Data Ascii: ;=M:l56.9sl]'&l\|ss8d"C4ME22BqovS7Uz&j#~W_;[-b`Z:.}taDKc]aZ=3}]GGR},o pC`P7exyG
Oct 1, 2024 00:41:45.190200090 CEST	1236	IN	Data Raw: 97 52 cb f7 84 1c 03 a3 e7 04 ef 5c ca 20 6d 01 0c 23 2c f1 9d 95 42 79 57 94 57 bc 20 78 61 e5 2f 34 1e 43 a0 1b 47 ee 51 2f 1a de d7 a4 9b 57 a2 72 fb 46 f4 1d 09 7e 97 2b be 9d c0 7b ad 00 2b e8 5e ce b0 69 08 0d 52 8d 2a 88 41 f6 f1 f7 24 6f Data Ascii: R\ m#,ByWW xa/4CGQ/WrF~+{+^iR*A$o?!l~l4EO6VD-[q~yj/ 7~k'G9p_B!,2+E_3]wuwC!:z5/\|di3;\|#5a_kF
Oct 1, 2024 00:41:45.190210104 CEST	224	IN	Data Raw: 48 99 f1 19 8c a3 45 e1 ad 35 8c a0 be 65 af cd 26 f2 aa fb 06 34 d2 6e 8a aa 3b e2 95 f3 6f 3b 84 93 11 c5 4b 49 0e 31 31 4b e9 49 9d 17 ba 02 24 95 30 82 e7 0c 36 34 f8 ac 1d 83 c8 c1 82 35 a5 bd 62 34 34 b1 b5 d4 79 50 ca 93 e2 cd 3d 53 fb d2 Data Ascii: HE5e&4n;o;KI11KI$0645b44yP=S(TVdBJkE:9NZ#nGJNr<.vPQ59\|J{Ot>,rDU5wkm<:e)_v.y
Oct 1, 2024 00:41:45.276640892 CEST	1138	IN	Data Raw: d0 01 b1 9f 7a d3 bb 42 52 98 45 da 94 02 58 6b 58 27 82 ba a6 e7 b1 83 de ce d1 9c 9d 43 ed 1f c5 6a 6a 5a 62 bd 62 6c 77 d0 e9 94 06 a3 08 c9 65 30 56 09 40 92 16 1d 50 c4 1f 5a de 7a a1 96 73 8b 2b ae bc d9 6c a4 ea 18 b0 02 48 f1 47 fa 5e 50 Data Ascii: zBREXkX'CjjZbblwe0V@PZzs+lHG^P$p^-d\|8^C_.ZrDkvLtaVIZjtJhP-BRQqBqucB"gjqrEk&kQ7^V>~6<54W7<(8
Oct 1, 2024 00:41:45.328563929 CEST	1229	OUT	GET /search/tsc.php?ses=ogcQkbQpzTES3IebH-jL7XHjZBaJcAFoaSa-avJH62SFZ15x2TZWk5GCiUOcmmFAix2mUIhlcIacIOBT4ovgKwAARzX-W2gTMrxEGA62NTxSdgOb30zCDj2huDe6QDewz05_n2ib87RzA7Hsxwue3b9rz7vpxsDSy3FnfxvKgaPoEPsS9-LHgsEn40EKANf-1ToBovE_SHVODsfDg4wbme94iYHhL3DRwEZLpVgxIXa0AJd0YVF6ofq-nPg3OmTUQ9wHwzYgefz5yDvfHIiyADevu-zfd3DlJ_-rlaeDJ24haWRQ7ORilmszsxqyBu4IZt6zsPA7cZAdO1JXAYHQQONrYWiYTo3vGT8lqK-0a5gkbJPdGPuDLXlIXfg&cv=2 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0&nm=3 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:45.527551889 CEST	181	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:45 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-fvx6t server: Parking/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49908	91.195.240.19	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:41:50.079073906 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49915	91.195.240.19	80	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:41:53.974041939 CEST	771	OUT	GET /search/tsc.php?ses=ogcQkbQpzTES3IebH-jL7XHjZBaJcAFoaSa-avJH62SFZ15x2TZWk5GCiUOcmmFAix2mUIhlcIacIOBT4ovgKwAARzX-W2gTMrxEGA62NTxSdgOb30zCDj2huDe6QDewz05_n2ib87RzA7Hsxwue3b9rz7vpxsDSy3FnfxvKgaPoEPsS9-LHgsEn40EKANf-1ToBovE_SHVODsfDg4wbme94iYHhL3DRwEZLpVgxIXa0AJd0YVF6ofq-nPg3OmTUQ9wHwzYgefz5yDvfHIiyADevu-zfd3DlJ_-rlaeDJ24haWRQ7ORilmszsxqyBu4IZt6zsPA7cZAdO1JXAYHQQONrYWiYTo3vGT8lqK-0a5gkbJPdGPuDLXlIXfg&cv=2 HTTP/1.1 Host: www.bankwir.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Oct 1, 2024 00:41:54.645759106 CEST	181	IN	HTTP/1.1 200 OK date: Mon, 30 Sep 2024 22:41:54 GMT content-type: text/html; charset=UTF-8 content-length: 0 x-cache-miss-from: parking-75d9cf65f9-b9tc5 server: Parking/1.0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49712	205.234.175.175	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:41 UTC	605	OUT	GET /templates/images/hero_nc.svg HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:41 UTC	483	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:41 GMT Content-Type: image/svg+xml Content-Length: 48097 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * X-CFF: B Last-Modified: Thu, 05 Oct 2023 09:16:15 GMT Vary: Accept-Encoding x-cf-rand: 4.749 X-CF3: M CF4Age: 0 x-cf-tsc: 1696583686 CF4ttl: 31536000.000 X-CF2: H Accept-Ranges: bytes Server: CFS 1124 X-CF-ReqID: a6e1b9fccafec2c806184d6c1d25d139 X-CF1: 11696:fQ.iad2:nom:cacheN.iad2-01:M
2024-09-30 22:40:41 UTC	15901	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 21 2d 2d 20 43 72 65 61 74 6f 72 3a 20 43 6f 72 65 6c 44 52 41 57 20 32 30 31 38 20 28 36 34 2d 42 69 74 29 20 2d 2d 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 77 69 64 74 68 3d 22 31 34 34 30 70 78 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">... Creator: CorelDRAW 2018 (64-Bit) --><svg xmlns="http://www.w3.org/2000/svg" xml:space="preserve" width="1440px"
2024-09-30 22:40:41 UTC	16384	IN	Data Raw: 20 2d 31 37 2e 31 38 32 31 2c 2d 32 35 2e 38 33 38 35 20 2d 34 31 2e 38 34 33 32 2c 2d 34 35 2e 38 33 33 34 20 2d 37 34 2e 30 30 35 2c 2d 36 30 2e 30 30 36 34 20 2d 33 32 2e 33 33 36 33 2c 2d 31 34 2e 31 35 31 32 20 2d 36 38 2e 38 33 37 33 2c 2d 32 31 2e 31 35 30 35 20 2d 31 30 39 2e 35 30 33 2c 2d 32 31 2e 31 35 30 35 20 2d 36 37 2e 33 33 32 38 2c 30 20 2d 31 31 38 2e 38 33 35 2c 31 33 2e 39 39 38 36 20 2d 31 35 34 2e 31 35 39 2c 34 31 2e 38 32 31 33 20 2d 33 35 2e 33 32 33 36 2c 32 37 2e 39 39 37 32 20 2d 35 37 2e 38 32 36 2c 36 39 2e 33 33 38 38 20 2d 36 37 2e 36 35 39 39 2c 31 32 34 2e 31 35 36 7a 22 2f 3e 0a 20 20 20 3c 67 6c 79 70 68 20 75 6e 69 63 6f 64 65 3d 22 74 22 20 68 6f 72 69 7a 2d 61 64 76 2d 78 3d 22 32 37 37 22 20 64 3d 22 4d 32 35 36 2e Data Ascii: -17.1821,-25.8385 -41.8432,-45.8334 -74.005,-60.0064 -32.3363,-14.1512 -68.8373,-21.1505 -109.503,-21.1505 -67.3328,0 -118.835,13.9986 -154.159,41.8213 -35.3236,27.9972 -57.826,69.3388 -67.6599,124.156z"/> <glyph unicode="t" horiz-adv-x="277" d="M256.
2024-09-30 22:40:41 UTC	15812	IN	Data Raw: 39 20 30 7a 22 2f 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 36 32 39 22 20 63 6c 61 73 73 3d 22 66 69 6c 31 31 22 20 64 3d 22 4d 34 30 30 2e 31 34 37 20 31 34 31 2e 30 37 37 63 2d 30 2e 34 37 38 2c 2d 30 2e 33 34 31 20 2d 30 2e 39 35 39 2c 2d 30 2e 36 37 39 20 2d 31 2e 34 34 31 2c 2d 31 2e 30 31 32 20 2d 35 2e 32 31 32 2c 2d 33 2e 35 35 20 2d 31 30 2e 36 35 31 2c 2d 36 2e 37 39 38 20 2d 31 36 2e 33 39 32 2c 2d 39 2e 34 34 32 6c 30 20 2d 30 2e 30 37 35 20 34 2e 33 30 36 20 31 2e 39 36 33 63 31 2e 34 33 35 2c 30 2e 36 38 20 32 2e 37 39 35 2c 31 2e 34 33 36 20 34 2e 32 33 2c 32 2e 31 31 35 20 30 2e 36 38 2c 30 2e 33 37 38 20 31 2e 33 36 2c 30 2e 37 35 36 20 32 2e 30 33 39 2c 31 2e 31 33 33 6c 32 2e 30 34 20 31 2e 32 30 39 63 31 2e 33 36 2c 30 2e Data Ascii: 9 0z"/> <path id="path629" class="fil11" d="M400.147 141.077c-0.478,-0.341 -0.959,-0.679 -1.441,-1.012 -5.212,-3.55 -10.651,-6.798 -16.392,-9.442l0 -0.075 4.306 1.963c1.435,0.68 2.795,1.436 4.23,2.115 0.68,0.378 1.36,0.756 2.039,1.133l2.04 1.209c1.36,0.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49713	142.250.185.132	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:41 UTC	448	OUT	GET /adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:41 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153198 Date: Mon, 30 Sep 2024 22:40:41 GMT Expires: Mon, 30 Sep 2024 22:40:41 GMT Cache-Control: private, max-age=3600 ETag: "4454758832833526012" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:40:41 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 34 33 33 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,173
2024-09-30 22:40:41 UTC	1390	IN	Data Raw: 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 Data Ascii: main":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYX
2024-09-30 22:40:41 UTC	1390	IN	Data Raw: 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 Data Ascii: ;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Arra
2024-09-30 22:40:41 UTC	1390	IN	Data Raw: 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 Data Ascii: extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.definePrope
2024-09-30 22:40:41 UTC	1390	IN	Data Raw: 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 Data Ascii: on":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld=function(g){this
2024-09-30 22:40:41 UTC	1390	IN	Data Raw: 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a Data Ascii: ew b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpected state:
2024-09-30 22:40:41 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 Data Ascii: nction e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Ob
2024-09-30 22:40:41 UTC	1390	IN	Data Raw: 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 Data Ascii: h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="
2024-09-30 22:40:41 UTC	1390	IN	Data Raw: 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 65 Data Ascii: })};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;re
2024-09-30 22:40:41 UTC	1390	IN	Data Raw: 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 Data Ascii: !=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49718	142.250.184.206	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:43 UTC	703	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:43 UTC	1037	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Content-Security-Policy: script-src 'nonce-x120gzsu8AW1XxZfAVw1gQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none' Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 1560 Date: Mon, 30 Sep 2024 22:40:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:40:43 UTC	353	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 78 31 32 30 67 7a 73 75 38 41 57 31 58 78 5a 66 41 56 77 31 67 51 22 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6e Data Ascii: <!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="x120gzsu8AW1XxZfAVw1gQ">if (window.n
2024-09-30 22:40:43 UTC	1207	IN	Data Raw: 61 64 73 65 6e 73 65 2f 73 65 61 72 63 68 2f 61 64 73 2e 6a 73 22 3b 76 61 72 20 68 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 69 66 20 28 21 21 68 72 65 66 20 26 26 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 27 29 20 3e 20 30 29 29 20 7b 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 31 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 31 27 29 20 3e 20 30 29 20 7b 73 63 72 69 70 74 2e 73 72 63 20 2b 3d 20 27 3f 70 61 63 3d 31 27 3b 7d 20 65 6c 73 65 20 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 32 27 29 20 3e 20 30 20 7c 7c 20 Data Ascii: adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49719	142.250.184.206	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:43 UTC	1478	OUT	GET /afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=r3%7Cs&nocache=9481727736041134&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727736041142&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1146&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fwww.bankwir.com%2F HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:43 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Mon, 30 Sep 2024 22:40:43 GMT Expires: Mon, 30 Sep 2024 22:40:43 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ymDsioA5VdDhJQ9IkYKQPw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 22:40:43 UTC	583	IN	Data Raw: 33 38 61 61 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 38aa<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-30 22:40:43 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-30 22:40:43 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-30 22:40:43 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-30 22:40:43 UTC	1390	IN	Data Raw: 72 69 67 68 74 3a 31 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 31 30 32 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 30 70 78 3b 7d 2e 73 69 31 32 38 7b 68 65 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 Data Ascii: right:10px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si102{border-radius:15px;height:30px;width:0px;}.si128{height:1px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shr
2024-09-30 22:40:43 UTC	1390	IN	Data Raw: 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 20 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 22 20 64 61 74 61 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 31 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f Data Ascii: -align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;-ms-flex-wrap:wrap; -webkit-flex-wrap:wrap; flex-wrap:wrap;" data-ad-container="1"><div class="i_ div rssAttrContainer" style="-ms-flex-direction:row; -webkit-bo
2024-09-30 22:40:43 UTC	1390	IN	Data Raw: 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 Data Ascii: style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:center; -webkit-box-pack:center; -webkit-justify-content:center; justify-content:center;-ms-flex-align:center; -webkit-box-align:ce
2024-09-30 22:40:43 UTC	1390	IN	Data Raw: 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 61 6e 6b 77 69 72 2e 63 6f 6d 2f 63 61 66 2f 3f 73 65 73 3d 59 33 4a 6c 50 54 45 33 4d 6a 63 33 4d 7a 59 77 4e 44 41 6d 64 47 4e 70 5a 44 31 33 64 33 63 75 59 6d 46 75 61 33 64 70 63 69 35 6a 62 32 30 32 4e 6d 5a 69 4d 6a 68 6c 4f 47 4a 6c 5a 44 4d 33 4e 43 34 34 4f 44 59 78 4e 6a 55 31 4f 53 5a 30 59 58 4e 72 50 58 4e 6c 59 58 4a 6a 61 43 5a 6b 62 32 31 68 61 57 34 39 59 6d 46 75 61 33 64 70 63 69 35 6a 62 32 30 6d 59 56 39 70 5a 44 30 7a 4a 6e 4e 6c 63 33 4e 70 62 32 34 39 59 6e 46 4f 4e 58 4e 59 4e 33 Data Ascii: nt:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a href="http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3
2024-09-30 22:40:43 UTC	1390	IN	Data Raw: 5f 20 73 69 31 30 32 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 66 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 61 64 5f 69 63 6f 6e 73 2f 73 74 61 6e 64 61 72 64 2f 70 75 62 6c 69 73 68 65 72 5f 69 63 6f 6e 5f 69 6d 61 67 65 2f 73 65 61 72 63 68 2e 73 76 67 3f 63 3d 25 32 33 31 39 36 37 64 32 22 20 61 6c 74 3d 22 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 63 6c 61 73 73 3d 22 69 6d 67 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 33 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 Data Ascii: _ si102"><img src="https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2" alt="" loading="lazy" class="img"></div></div></div><div class="i_ div si33" style="-ms-flex-direction:row; -webkit-box-orient:horizontal;
2024-09-30 22:40:43 UTC	1390	IN	Data Raw: 61 3d 66 61 6c 73 65 22 20 64 61 74 61 2d 6e 62 3d 22 30 22 20 74 61 72 67 65 74 3d 22 5f 74 6f 70 22 20 63 6c 61 73 73 3d 22 69 5f 20 61 20 73 69 31 34 34 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e Data Ascii: a=false" data-nb="0" target="_top" class="i_ a si144" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49724	142.250.184.228	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:44 UTC	489	OUT	GET /adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:44 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153207 Date: Mon, 30 Sep 2024 22:40:44 GMT Expires: Mon, 30 Sep 2024 22:40:44 GMT Cache-Control: private, max-age=3600 ETag: "5807633318253471531" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:40:44 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 34 33 37 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,173
2024-09-30 22:40:44 UTC	1390	IN	Data Raw: 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 Data Ascii: rovidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsd
2024-09-30 22:40:44 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 Data Ascii: )return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray
2024-09-30 22:40:44 UTC	1390	IN	Data Raw: 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 Data Ascii: +" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.de
2024-09-30 22:40:44 UTC	1390	IN	Data Raw: 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 3d 66 75 6e 63 74 69 6f Data Ascii: e "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld=functio
2024-09-30 22:40:44 UTC	1390	IN	Data Raw: 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 Data Ascii: r l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpect
2024-09-30 22:40:44 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c Data Ascii: ction"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal
2024-09-30 22:40:44 UTC	1390	IN	Data Raw: 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 Data Ascii: :m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Objec
2024-09-30 22:40:44 UTC	1390	IN	Data Raw: 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 Data Ascii: urn h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;v
2024-09-30 22:40:44 UTC	1390	IN	Data Raw: 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 Data Ascii: if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49725	205.234.175.175	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:44 UTC	371	OUT	GET /templates/images/hero_nc.svg HTTP/1.1 Host: img.sedoparking.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:44 UTC	483	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:44 GMT Content-Type: image/svg+xml Content-Length: 48097 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * X-CFF: B Last-Modified: Thu, 05 Oct 2023 09:16:15 GMT Vary: Accept-Encoding x-cf-rand: 4.749 X-CF3: M CF4Age: 0 x-cf-tsc: 1696583686 CF4ttl: 31536000.000 X-CF2: H Accept-Ranges: bytes Server: CFS 1124 X-CF-ReqID: 537d6b1d415e334b80ec68fe3442ec4a X-CF1: 11696:fP.iad2:nom:cacheN.iad2-01:M
2024-09-30 22:40:44 UTC	15901	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 21 2d 2d 20 43 72 65 61 74 6f 72 3a 20 43 6f 72 65 6c 44 52 41 57 20 32 30 31 38 20 28 36 34 2d 42 69 74 29 20 2d 2d 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 77 69 64 74 68 3d 22 31 34 34 30 70 78 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">... Creator: CorelDRAW 2018 (64-Bit) --><svg xmlns="http://www.w3.org/2000/svg" xml:space="preserve" width="1440px"
2024-09-30 22:40:44 UTC	16384	IN	Data Raw: 20 2d 31 37 2e 31 38 32 31 2c 2d 32 35 2e 38 33 38 35 20 2d 34 31 2e 38 34 33 32 2c 2d 34 35 2e 38 33 33 34 20 2d 37 34 2e 30 30 35 2c 2d 36 30 2e 30 30 36 34 20 2d 33 32 2e 33 33 36 33 2c 2d 31 34 2e 31 35 31 32 20 2d 36 38 2e 38 33 37 33 2c 2d 32 31 2e 31 35 30 35 20 2d 31 30 39 2e 35 30 33 2c 2d 32 31 2e 31 35 30 35 20 2d 36 37 2e 33 33 32 38 2c 30 20 2d 31 31 38 2e 38 33 35 2c 31 33 2e 39 39 38 36 20 2d 31 35 34 2e 31 35 39 2c 34 31 2e 38 32 31 33 20 2d 33 35 2e 33 32 33 36 2c 32 37 2e 39 39 37 32 20 2d 35 37 2e 38 32 36 2c 36 39 2e 33 33 38 38 20 2d 36 37 2e 36 35 39 39 2c 31 32 34 2e 31 35 36 7a 22 2f 3e 0a 20 20 20 3c 67 6c 79 70 68 20 75 6e 69 63 6f 64 65 3d 22 74 22 20 68 6f 72 69 7a 2d 61 64 76 2d 78 3d 22 32 37 37 22 20 64 3d 22 4d 32 35 36 2e Data Ascii: -17.1821,-25.8385 -41.8432,-45.8334 -74.005,-60.0064 -32.3363,-14.1512 -68.8373,-21.1505 -109.503,-21.1505 -67.3328,0 -118.835,13.9986 -154.159,41.8213 -35.3236,27.9972 -57.826,69.3388 -67.6599,124.156z"/> <glyph unicode="t" horiz-adv-x="277" d="M256.
2024-09-30 22:40:44 UTC	15812	IN	Data Raw: 39 20 30 7a 22 2f 3e 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 36 32 39 22 20 63 6c 61 73 73 3d 22 66 69 6c 31 31 22 20 64 3d 22 4d 34 30 30 2e 31 34 37 20 31 34 31 2e 30 37 37 63 2d 30 2e 34 37 38 2c 2d 30 2e 33 34 31 20 2d 30 2e 39 35 39 2c 2d 30 2e 36 37 39 20 2d 31 2e 34 34 31 2c 2d 31 2e 30 31 32 20 2d 35 2e 32 31 32 2c 2d 33 2e 35 35 20 2d 31 30 2e 36 35 31 2c 2d 36 2e 37 39 38 20 2d 31 36 2e 33 39 32 2c 2d 39 2e 34 34 32 6c 30 20 2d 30 2e 30 37 35 20 34 2e 33 30 36 20 31 2e 39 36 33 63 31 2e 34 33 35 2c 30 2e 36 38 20 32 2e 37 39 35 2c 31 2e 34 33 36 20 34 2e 32 33 2c 32 2e 31 31 35 20 30 2e 36 38 2c 30 2e 33 37 38 20 31 2e 33 36 2c 30 2e 37 35 36 20 32 2e 30 33 39 2c 31 2e 31 33 33 6c 32 2e 30 34 20 31 2e 32 30 39 63 31 2e 33 36 2c 30 2e Data Ascii: 9 0z"/> <path id="path629" class="fil11" d="M400.147 141.077c-0.478,-0.341 -0.959,-0.679 -1.441,-1.012 -5.212,-3.55 -10.651,-6.798 -16.392,-9.442l0 -0.075 4.306 1.963c1.435,0.68 2.795,1.436 4.23,2.115 0.68,0.378 1.36,0.756 2.039,1.133l2.04 1.209c1.36,0.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49720	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:44 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 22:40:44 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=237906 Date: Mon, 30 Sep 2024 22:40:44 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49727	142.250.184.206	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:45 UTC	555	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:45 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153214 Date: Mon, 30 Sep 2024 22:40:45 GMT Expires: Mon, 30 Sep 2024 22:40:45 GMT Cache-Control: private, max-age=3600 ETag: "16762785716741463394" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:40:45 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301
2024-09-30 22:40:45 UTC	1390	IN	Data Raw: 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 Data Ascii: eServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpb
2024-09-30 22:40:45 UTC	1390	IN	Data Raw: 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 Data Ascii: g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8Clamp
2024-09-30 22:40:45 UTC	1390	IN	Data Raw: 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f Data Ascii: eError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&O
2024-09-30 22:40:45 UTC	1390	IN	Data Raw: 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 Data Ascii: ak a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld
2024-09-30 22:40:45 UTC	1390	IN	Data Raw: 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 Data Ascii: )}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("
2024-09-30 22:40:45 UTC	1390	IN	Data Raw: 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a Data Ascii: l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Obj
2024-09-30 22:40:45 UTC	1390	IN	Data Raw: 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 Data Ascii: d:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|type
2024-09-30 22:40:45 UTC	1390	IN	Data Raw: 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 Data Ascii: n(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.e
2024-09-30 22:40:45 UTC	1390	IN	Data Raw: 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 Data Ascii: 0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49728	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:45 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 22:40:45 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=237849 Date: Mon, 30 Sep 2024 22:40:45 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-30 22:40:45 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49732	142.250.186.78	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:46 UTC	373	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:46 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153215 Date: Mon, 30 Sep 2024 22:40:46 GMT Expires: Mon, 30 Sep 2024 22:40:46 GMT Cache-Control: private, max-age=3600 ETag: "14287442422026715323" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:40:46 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301
2024-09-30 22:40:46 UTC	1390	IN	Data Raw: 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 Data Ascii: eServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpb
2024-09-30 22:40:46 UTC	1390	IN	Data Raw: 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d Data Ascii: :g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8Clam
2024-09-30 22:40:46 UTC	1390	IN	Data Raw: 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 Data Ascii: peError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&
2024-09-30 22:40:46 UTC	1390	IN	Data Raw: 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c Data Ascii: eak a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.L
2024-09-30 22:40:46 UTC	1390	IN	Data Raw: 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 Data Ascii: w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error(
2024-09-30 22:40:46 UTC	1390	IN	Data Raw: 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 Data Ascii: \|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Ob
2024-09-30 22:40:46 UTC	1390	IN	Data Raw: 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 Data Ascii: id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typ
2024-09-30 22:40:46 UTC	1390	IN	Data Raw: 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: on(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.
2024-09-30 22:40:46 UTC	1390	IN	Data Raw: 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 Data Ascii: >0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49734	172.217.18.1	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:47 UTC	736	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:47 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 13:55:14 GMT Expires: Tue, 01 Oct 2024 12:55:14 GMT Cache-Control: public, max-age=82800 Age: 31533 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:40:47 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 31 39 36 37 64 32 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#1967d2' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49735	172.217.18.1	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:47 UTC	737	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:47 UTC	788	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 Date: Mon, 30 Sep 2024 22:40:47 GMT Expires: Tue, 01 Oct 2024 21:40:47 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:40:47 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49716	142.250.185.110	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:48 UTC	878	OUT	GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=v9j5kxslamme&aqid=6yj7ZoLRH-rdjuwPstOM8QY&psid=3259787283&pbt=bs&adbx=385.203125&adby=413.015625&adbh=571&adbw=493&adbah=212%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=20%7C0%7C1376%7C2057%7C783&lle=0&ifv=1&hpt=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:48 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-TeCLsJMsUF5g2e7ahiFFCg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 30 Sep 2024 22:40:48 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49739	142.250.186.161	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:49 UTC	495	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:49 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 13:55:14 GMT Expires: Tue, 01 Oct 2024 12:55:14 GMT Cache-Control: public, max-age=82800 Age: 31535 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:40:49 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 31 39 36 37 64 32 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#1967d2' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49737	142.250.185.110	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:49 UTC	835	OUT	GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=tig31t74dzzu&aqid=6yj7ZoLRH-rdjuwPstOM8QY&pbt=bs&adbx=481.5&adby=986.015625&adbh=16&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=12%7C0%7C1384%7C2057%7C784&lle=0&ifv=0&hpt=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:49 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-3O_LPoUEQyHUntdKkP2EBw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 30 Sep 2024 22:40:49 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49738	142.250.186.161	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:49 UTC	496	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:49 UTC	796	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 22:40:47 GMT Expires: Tue, 01 Oct 2024 21:40:47 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:40:49 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49740	142.250.185.110	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:49 UTC	878	OUT	GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=lrsy5ttgkmyk&aqid=6yj7ZoLRH-rdjuwPstOM8QY&psid=3259787283&pbt=bv&adbx=385.203125&adby=413.015625&adbh=571&adbw=493&adbah=212%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=20%7C0%7C1376%7C2057%7C783&lle=0&ifv=1&hpt=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:50 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-xJt2yU6vBE8vHqaLk9rS8w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 30 Sep 2024 22:40:50 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49743	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:52 UTC	656	OUT	GET /services/parking.php3 HTTP/1.1 Host: www.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:40:52 UTC	780	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 30 Sep 2024 22:40:52 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: campaignId=; Max-Age=86400; Path=/; Secure; HttpOnly Location: https://sedo.com/services/parking.php3 X-Sedo-Request-Id: ID-848758bd5-kxgbq-ea0870907da86751a07df8231580de6e X-Frame-Options: sameorigin X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; path=/; expires=Mon, 30-Sep-24 23:10:52 GMT; domain=.sedo.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=2592000 Server: cloudflare CF-RAY: 8cb7b7974b977cee-EWR
2024-09-30 22:40:52 UTC	172	IN	Data Raw: 61 36 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a6<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>openresty</center></body></html>
2024-09-30 22:40:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49745	104.16.141.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:53 UTC	819	OUT	GET /services/parking.php3 HTTP/1.1 Host: sedo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:40:53 UTC	529	IN	HTTP/1.1 302 Moved Temporarily Date: Mon, 30 Sep 2024 22:40:53 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Set-Cookie: campaignId=; Max-Age=86400; Path=/; Secure; HttpOnly x-content-type-options: nosniff x-sedo-request-id: ID-848758bd5-nkmmh-5cfd6427180e3473695aa68df131ac8b x-frame-options: sameorigin strict-transport-security: max-age=2592000 location: http://sedo.com/redirect.php?id=22 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8cb7b79cfe8542a3-EWR
2024-09-30 22:40:53 UTC	224	IN	Data Raw: 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 73 65 64 6f 2e 63 6f 6d 2f 72 65 64 69 72 65 63 74 2e 70 68 70 3f 69 64 3d 32 32 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: da<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="http://sedo.com/redirect.php?id=22">here</a>.</p></body></html>
2024-09-30 22:40:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49751	104.16.141.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:56 UTC	829	OUT	GET /redirect.php?id=22 HTTP/1.1 Host: sedo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=
2024-09-30 22:40:56 UTC	744	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 30 Sep 2024 22:40:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store, no-cache, must-revalidate x-ua-compatible: IE=edge strict-transport-security: max-age=2592000 x-content-type-options: nosniff pragma: no-cache x-frame-options: sameorigin x-sedo-request-id: ID-848758bd5-nkmmh-8a37f244d7f857918508e2f32f819469 set-cookie: session=03e31c5ec68ea2ed808724c8900cf8d8; expires=Thu, 03 Oct 2024 22:40:56 GMT; Max-Age=259200; path=/; secure; HttpOnly expires: Thu, 19 Nov 1981 08:52:00 GMT location: /us/park-domains/?tracked=&partnerid=&language=us CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8cb7b7b1bc4f1871-EWR
2024-09-30 22:40:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49753	104.16.141.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:57 UTC	901	OUT	GET /us/park-domains/?tracked=&partnerid=&language=us HTTP/1.1 Host: sedo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8
2024-09-30 22:40:57 UTC	453	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:57 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-frame-options: sameorigin x-sedo-request-id: ID-848758bd5-kxgbq-3d30d508394abfd392a31fe98e8dd08b age: 1969 strict-transport-security: max-age=2592000 x-content-type-options: nosniff content-language: en CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8cb7b7b79a0b42be-EWR
2024-09-30 22:40:57 UTC	916	IN	Data Raw: 37 64 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 21 2d 2d 20 0a 09 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 6f 77 65 72 65 64 20 62 79 20 54 59 50 4f 33 20 2d 20 69 6e 73 70 69 72 69 6e 67 20 70 65 6f 70 6c 65 20 74 6f 20 73 68 61 72 65 21 0a 09 54 59 50 4f 33 20 69 73 20 61 20 66 72 65 65 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 43 6f 6e 74 65 6e 74 20 4d 61 6e 61 67 65 6d 65 6e 74 20 46 72 61 6d 65 77 6f 72 6b 20 69 6e 69 74 69 61 6c 6c 79 20 63 72 65 61 74 65 64 20 62 79 20 4b 61 73 70 65 72 20 53 6b 61 61 72 68 6f 6a 20 61 6e 64 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 Data Ascii: 7dda<!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8">... This website is powered by TYPO3 - inspiring people to share!TYPO3 is a free open source Content Management Framework initially created by Kasper Skaarhoj and licensed under
2024-09-30 22:40:57 UTC	1369	IN	Data Raw: 2c 20 65 61 72 6e 20 6d 6f 6e 65 79 20 77 69 74 68 20 64 6f 6d 61 69 6e 73 2c 20 61 64 76 65 72 74 69 73 69 6e 67 20 6f 6e 20 64 6f 6d 61 69 6e 73 2c 20 74 75 72 6e 69 6e 67 20 74 72 61 66 66 69 63 20 69 6e 74 6f 20 6d 6f 6e 65 79 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 22 20 2f 3e 0a 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 65 64 6f 2e 63 6f 6d 2f 64 69 73 74 2f 63 73 73 2f 74 79 70 6f 33 2f 6d 61 69 6e 2e 63 73 73 3f 31 37 32 34 39 32 32 31 39 35 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0a 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 Data Ascii: , earn money with domains, advertising on domains, turning traffic into money" /><meta name="twitter:card" content="summary" /><link rel="stylesheet" href="https://cdn.sedo.com/dist/css/typo3/main.css?1724922195" media="all"><script src="https://cd
2024-09-30 22:40:57 UTC	1369	IN	Data Raw: 37 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 63 6f 6e 66 69 67 22 20 63 6f 6e 74 65 6e 74 3d 22 2f 63 37 72 2f 61 73 73 65 74 73 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 62 72 6f 77 73 65 72 63 6f 6e 66 69 67 2e 78 6d 6c 3f 76 3d 64 4c 4a 33 62 78 32 78 6a 6a 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 36 30 61 39 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 2f 75 73 2f 70 61 72 6b 2d 64 6f 6d 61 69 6e 73 2f 22 2f 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 68 72 Data Ascii: 7"> <meta name="msapplication-config" content="/c7r/assets/static/images/icons/browserconfig.xml?v=dLJ3bx2xjj"> <meta name="theme-color" content="#0060a9"><link rel="canonical" href="/us/park-domains/"/><link rel="alternate" hreflang="en-US" hr
2024-09-30 22:40:57 UTC	1369	IN	Data Raw: 35 20 31 32 2d 38 20 31 39 2d 38 20 38 20 30 20 31 34 20 33 20 32 30 20 38 6c 33 38 20 33 39 63 36 20 36 20 38 20 31 32 20 38 20 32 30 7a 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 2d 66 6f 6e 74 2d 69 63 6f 6e 2d 65 64 69 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 32 39 39 20 31 35 36 63 31 39 20 31 39 20 33 38 20 33 38 20 35 36 20 35 38 2d 34 39 20 34 38 2d 39 38 20 39 36 2d 31 34 38 20 31 34 35 2d 31 39 2d 31 39 2d 33 37 2d 33 38 2d 35 36 2d 35 37 20 35 30 2d 34 39 20 39 39 2d 39 37 20 31 34 38 2d 31 34 36 7a 20 6d 37 30 20 34 34 63 2d 31 39 2d 31 39 2d 33 37 2d 33 38 2d 35 36 2d 35 Data Ascii: 5 12-8 19-8 8 0 14 3 20 8l38 39c6 6 8 12 8 20z"></path> </symbol> <symbol id="s-font-icon-edit" viewBox="0 0 512 512"> <path d="m299 156c19 19 38 38 56 58-49 48-98 96-148 145-19-19-37-38-56-57 50-49 99-97 148-146z m70 44c-19-19-37-38-56-5
2024-09-30 22:40:57 UTC	1369	IN	Data Raw: 31 20 32 31 2d 36 20 30 2d 31 30 20 34 2d 31 30 20 39 20 30 20 30 20 30 20 30 20 30 20 31 20 30 20 30 20 30 20 30 20 30 20 31 6c 30 20 32 30 63 30 20 35 20 34 20 39 20 31 30 20 39 20 35 20 30 20 31 30 2d 34 20 31 30 2d 39 6c 30 2d 31 33 63 31 37 2d 34 20 33 30 2d 31 39 20 33 30 2d 33 38 20 30 2d 32 34 2d 31 38 2d 34 32 2d 34 30 2d 34 32 7a 20 6d 32 20 31 37 32 63 2d 35 39 20 30 2d 31 30 36 2d 34 38 2d 31 30 36 2d 31 30 36 20 30 2d 35 39 20 34 38 2d 31 30 36 20 31 30 36 2d 31 30 36 20 35 38 20 30 20 31 30 36 20 34 38 20 31 30 36 20 31 30 36 20 30 20 35 39 2d 34 37 20 31 30 36 2d 31 30 36 20 31 30 36 7a 20 6d 30 2d 32 34 30 63 2d 37 34 20 30 2d 31 33 34 20 36 30 2d 31 33 34 20 31 33 34 20 30 20 37 34 20 36 30 20 31 33 34 20 31 33 34 20 31 33 34 20 37 34 20 Data Ascii: 1 21-6 0-10 4-10 9 0 0 0 0 0 1 0 0 0 0 0 1l0 20c0 5 4 9 10 9 5 0 10-4 10-9l0-13c17-4 30-19 30-38 0-24-18-42-40-42z m2 172c-59 0-106-48-106-106 0-59 48-106 106-106 58 0 106 48 106 106 0 59-47 106-106 106z m0-240c-74 0-134 60-134 134 0 74 60 134 134 134 74
2024-09-30 22:40:57 UTC	1369	IN	Data Raw: 36 2d 31 2d 31 2d 31 2d 31 2d 33 2d 31 2d 33 30 2d 31 33 2d 35 35 2d 33 35 2d 37 31 2d 36 33 7a 20 6d 2d 31 31 2d 31 32 33 6c 34 35 20 30 63 2d 33 20 31 37 2d 35 20 33 33 2d 35 20 34 39 20 30 20 31 36 20 32 20 33 33 20 35 20 35 30 6c 2d 34 35 20 30 63 2d 31 31 2d 33 33 2d 31 31 2d 36 37 20 30 2d 39 39 7a 20 6d 38 31 2d 38 36 63 2d 35 20 35 2d 39 20 31 32 2d 31 33 20 31 39 2d 37 20 31 33 2d 31 33 20 32 38 2d 31 37 20 34 33 6c 2d 34 30 20 30 63 31 36 2d 32 38 20 34 30 2d 35 30 20 37 30 2d 36 32 7a 20 6d 31 38 36 20 36 32 6c 2d 33 31 20 30 63 2d 35 2d 31 35 2d 31 31 2d 33 30 2d 31 38 2d 34 33 2d 32 2d 35 2d 35 2d 39 2d 38 2d 31 34 20 32 33 20 31 33 20 34 33 20 33 33 20 35 37 20 35 37 7a 20 6d 2d 36 31 20 32 30 35 63 34 2d 36 20 38 2d 31 33 20 31 32 2d 32 30 Data Ascii: 6-1-1-1-1-3-1-30-13-55-35-71-63z m-11-123l45 0c-3 17-5 33-5 49 0 16 2 33 5 50l-45 0c-11-33-11-67 0-99z m81-86c-5 5-9 12-13 19-7 13-13 28-17 43l-40 0c16-28 40-50 70-62z m186 62l-31 0c-5-15-11-30-18-43-2-5-5-9-8-14 23 13 43 33 57 57z m-61 205c4-6 8-13 12-20
2024-09-30 22:40:57 UTC	1369	IN	Data Raw: 39 7a 20 6d 30 2d 31 32 32 63 2d 31 36 20 30 2d 33 30 20 39 2d 33 38 20 32 32 2d 33 20 35 2d 31 20 31 30 20 34 20 31 34 20 35 20 32 20 31 31 20 31 20 31 34 2d 34 20 34 2d 37 20 31 31 2d 31 32 20 32 30 2d 31 32 20 31 33 20 30 20 32 33 20 31 30 20 32 33 20 32 34 20 30 20 31 33 2d 31 30 20 32 33 2d 32 33 20 32 33 2d 36 20 30 2d 31 31 20 35 2d 31 31 20 31 30 20 30 20 30 20 30 20 30 20 30 20 31 20 30 20 30 20 30 20 30 20 30 20 31 6c 30 20 32 31 63 30 20 36 20 35 20 31 30 20 31 31 20 31 30 20 35 20 30 20 31 30 2d 34 20 31 30 2d 31 30 6c 30 2d 31 33 63 31 39 2d 35 20 33 33 2d 32 32 20 33 33 2d 34 33 20 31 2d 32 35 2d 31 39 2d 34 34 2d 34 33 2d 34 34 7a 20 6d 32 20 31 39 31 63 2d 36 35 20 30 2d 31 31 38 2d 35 33 2d 31 31 38 2d 31 31 38 20 30 2d 36 35 20 35 33 2d Data Ascii: 9z m0-122c-16 0-30 9-38 22-3 5-1 10 4 14 5 2 11 1 14-4 4-7 11-12 20-12 13 0 23 10 23 24 0 13-10 23-23 23-6 0-11 5-11 10 0 0 0 0 0 1 0 0 0 0 0 1l0 21c0 6 5 10 11 10 5 0 10-4 10-10l0-13c19-5 33-22 33-43 1-25-19-44-43-44z m2 191c-65 0-118-53-118-118 0-65 53-
2024-09-30 22:40:57 UTC	1369	IN	Data Raw: 7a 20 6d 32 39 20 39 32 63 30 20 35 2d 32 20 39 2d 35 20 31 32 2d 34 20 34 2d 38 20 35 2d 31 33 20 35 2d 35 20 30 2d 31 30 2d 31 2d 31 33 2d 35 2d 34 2d 33 2d 36 2d 37 2d 36 2d 31 32 20 30 2d 35 20 32 2d 39 20 36 2d 31 32 20 33 2d 33 20 38 2d 35 20 31 33 2d 35 20 35 20 30 20 39 20 32 20 31 33 20 35 20 33 20 33 20 35 20 37 20 35 20 31 32 7a 20 6d 2d 32 20 31 31 35 6c 2d 32 20 39 63 2d 36 20 32 2d 31 31 20 34 2d 31 35 20 35 2d 34 20 32 2d 38 20 32 2d 31 33 20 32 2d 38 20 30 2d 31 33 2d 32 2d 31 38 2d 35 2d 34 2d 34 2d 36 2d 38 2d 36 2d 31 34 20 30 2d 32 20 30 2d 35 20 30 2d 37 20 31 2d 32 20 31 2d 35 20 32 2d 38 6c 38 2d 32 38 63 31 2d 32 20 31 2d 35 20 32 2d 37 20 30 2d 32 20 30 2d 34 20 30 2d 37 20 30 2d 33 20 30 2d 36 2d 32 2d 37 2d 31 2d 31 2d 34 2d 32 Data Ascii: z m29 92c0 5-2 9-5 12-4 4-8 5-13 5-5 0-10-1-13-5-4-3-6-7-6-12 0-5 2-9 6-12 3-3 8-5 13-5 5 0 9 2 13 5 3 3 5 7 5 12z m-2 115l-2 9c-6 2-11 4-15 5-4 2-8 2-13 2-8 0-13-2-18-5-4-4-6-8-6-14 0-2 0-5 0-7 1-2 1-5 2-8l8-28c1-2 1-5 2-7 0-2 0-4 0-7 0-3 0-6-2-7-1-1-4-2
2024-09-30 22:40:57 UTC	1369	IN	Data Raw: 20 37 2d 32 20 31 30 2d 35 6c 32 31 2d 32 39 63 34 2d 36 20 31 32 2d 39 20 31 39 2d 39 20 33 20 30 20 35 20 30 20 37 20 31 6c 33 34 20 31 31 63 32 20 30 20 33 20 31 20 35 20 31 20 36 20 30 20 31 31 2d 35 20 31 31 2d 31 33 6c 30 2d 33 36 63 30 2d 39 20 37 2d 31 39 20 31 36 2d 32 32 6c 33 34 2d 31 31 63 39 2d 33 20 31 32 2d 31 31 20 37 2d 31 38 6c 2d 32 32 2d 32 39 63 2d 35 2d 38 2d 35 2d 32 30 20 30 2d 32 37 6c 32 31 2d 33 30 63 36 2d 37 20 33 2d 31 35 2d 36 2d 31 38 6c 2d 33 35 2d 31 31 63 2d 38 2d 33 2d 31 35 2d 31 33 2d 31 35 2d 32 32 6c 30 2d 33 37 63 30 2d 37 2d 35 2d 31 32 2d 31 31 2d 31 32 2d 32 20 30 2d 33 20 30 2d 35 20 31 6c 2d 33 35 20 31 31 63 2d 32 20 31 2d 34 20 31 2d 36 20 31 2d 37 20 30 2d 31 35 2d 34 2d 31 39 2d 39 6c 2d 32 31 2d 32 39 63 Data Ascii: 7-2 10-5l21-29c4-6 12-9 19-9 3 0 5 0 7 1l34 11c2 0 3 1 5 1 6 0 11-5 11-13l0-36c0-9 7-19 16-22l34-11c9-3 12-11 7-18l-22-29c-5-8-5-20 0-27l21-30c6-7 3-15-6-18l-35-11c-8-3-15-13-15-22l0-37c0-7-5-12-11-12-2 0-3 0-5 1l-35 11c-2 1-4 1-6 1-7 0-15-4-19-9l-21-29c
2024-09-30 22:40:57 UTC	1369	IN	Data Raw: 2d 69 63 6f 6e 2d 74 72 61 6e 73 66 65 72 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 32 33 37 20 33 33 32 63 30 20 31 30 20 30 20 31 39 20 30 20 32 39 2d 32 35 2d 31 38 2d 34 39 2d 33 36 2d 37 34 2d 35 34 20 32 35 2d 31 38 20 34 39 2d 33 36 20 37 34 2d 35 34 20 30 20 31 30 20 30 20 32 30 20 30 20 33 30 20 31 20 30 20 33 20 30 20 34 20 30 20 32 35 20 30 20 35 31 20 30 20 37 37 20 30 20 31 33 20 30 20 32 34 20 31 31 20 32 34 20 32 34 20 30 20 31 34 2d 31 31 20 32 35 2d 32 35 20 32 35 2d 32 35 20 30 2d 35 31 20 30 2d 37 37 20 30 2d 31 20 30 2d 32 20 30 2d 33 20 30 7a 20 6d 33 31 2d 31 35 30 63 30 2d 31 30 20 30 2d 32 30 20 30 2d 33 30 20 32 35 20 31 38 20 35 30 20 33 36 20 Data Ascii: -icon-transfer" viewBox="0 0 512 512"> <path d="m237 332c0 10 0 19 0 29-25-18-49-36-74-54 25-18 49-36 74-54 0 10 0 20 0 30 1 0 3 0 4 0 25 0 51 0 77 0 13 0 24 11 24 24 0 14-11 25-25 25-25 0-51 0-77 0-1 0-2 0-3 0z m31-150c0-10 0-20 0-30 25 18 50 36

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49757	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:58 UTC	718	OUT	GET /dist/css/typo3/main.css?1724922195 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:40:58 UTC	507	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:58 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 29 Aug 2024 09:03:15 GMT X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-dadca3948eb0181c9e1b737de0c0c0f7 ETag: W/"66d03953-24099" X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4218 Server: cloudflare CF-RAY: 8cb7b7bf7aea8c9c-EWR
2024-09-30 22:40:58 UTC	862	IN	Data Raw: 37 64 61 33 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 44 72 6f 69 64 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 44 72 6f 69 64 20 53 61 6e 73 22 29 2c 6c 6f 63 61 6c 28 22 44 72 6f 69 64 53 61 6e 73 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 73 2d 42 69 79 77 65 55 50 56 30 76 2d 79 52 62 2d 63 6a 63 69 41 7a 79 44 4d 58 68 64 44 38 73 41 6a 36 4f 41 4a 54 46 73 42 49 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 30 3f 3f 2c 75 2b 30 31 33 31 2c 75 2b 30 31 35 32 2d 30 31 35 33 2c 75 2b 30 32 63 36 2c 75 2b 30 32 64 61 2c 75 Data Ascii: 7da3@font-face{font-family:Droid Sans;font-style:normal;font-weight:400;src:local("Droid Sans"),local("DroidSans"),url(/dist/files/s-BiyweUPV0v-yRb-cjciAzyDMXhdD8sAj6OAJTFsBI.woff2) format("woff2");unicode-range:u+00??,u+0131,u+0152-0153,u+02c6,u+02da,u
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 65 2d 72 61 6e 67 65 3a 75 2b 30 34 30 30 2d 30 34 35 66 2c 75 2b 30 34 39 30 2d 30 34 39 31 2c 75 2b 30 34 62 30 2d 30 34 62 31 2c 75 2b 32 31 31 36 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 61 72 63 6b 20 53 63 72 69 70 74 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 4d 61 72 63 6b 20 53 63 72 69 70 74 22 29 2c 6c 6f 63 61 6c 28 22 4d 61 72 63 6b 53 63 72 69 70 74 2d 52 65 67 75 6c 61 72 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 4f 5f 44 31 4e 41 5a 56 4f 46 4f 6f 62 4c 62 56 74 57 33 62 63 6f 6a 6f 59 77 33 59 54 79 6b 74 43 43 65 72 5f 69 6c 4f 6c 68 45 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 Data Ascii: e-range:u+0400-045f,u+0490-0491,u+04b0-04b1,u+2116}@font-face{font-family:Marck Script;font-style:normal;font-weight:400;src:local("Marck Script"),local("MarckScript-Regular"),url(/dist/files/O_D1NAZVOFOobLbVtW3bcojoYw3YTyktCCer_ilOlhE.woff2) format("woff
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 31 66 3f 3f 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 22 29 2c 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 2d 4c 69 67 68 74 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 49 33 53 31 77 73 67 53 67 39 59 43 75 72 56 36 50 55 6b 54 4f 59 58 30 68 56 67 7a 5a 51 55 66 52 44 75 5a 72 50 76 48 33 44 38 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 33 37 30 2d 30 33 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f Data Ascii: unicode-range:u+1f??}@font-face{font-family:Roboto;font-style:normal;font-weight:300;src:local("Roboto Light"),local("Roboto-Light"),url(/dist/files/I3S1wsgSg9YCurV6PUkTOYX0hVgzZQUfRDuZrPvH3D8.woff2) format("woff2");unicode-range:u+0370-03ff}@font-face{fo
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 22 29 2c 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 2d 52 65 67 75 6c 61 72 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 75 59 45 43 4d 4b 6f 48 63 4f 39 78 31 77 64 6d 62 79 48 49 6d 33 2d 5f 6b 66 36 42 79 59 4f 36 43 4c 59 64 42 34 48 51 45 2d 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 34 30 30 2d 30 34 35 66 2c 75 2b 30 34 39 30 2d 30 34 39 31 2c 75 2b 30 34 62 30 2d 30 34 62 31 2c 75 2b 32 31 31 36 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d Data Ascii: l;font-weight:400;src:local("Roboto"),local("Roboto-Regular"),url(/dist/files/uYECMKoHcO9x1wdmbyHIm3-_kf6ByYO6CLYdB4HQE-Y.woff2) format("woff2");unicode-range:u+0400-045f,u+0490-0491,u+04b0-04b1,u+2116}@font-face{font-family:Roboto;font-style:normal;font-
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 2c 75 2b 30 32 63 36 2c 75 2b 30 32 64 61 2c 75 2b 30 32 64 63 2c 75 2b 32 30 30 30 2d 32 30 36 66 2c 75 2b 32 30 37 34 2c 75 2b 32 30 61 63 2c 75 2b 32 32 31 32 2c 75 2b 32 32 31 35 2c 75 2b 65 30 66 66 2c 75 2b 65 66 66 64 2c 75 2b 66 30 30 30 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 20 49 74 61 6c 69 63 22 29 2c 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 2d 4c 69 67 68 74 49 74 61 6c 69 63 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 37 6d 38 6c 37 54 6c 46 4f 2d 53 33 56 6b 68 48 75 52 30 61 74 5f 5a 72 61 52 32 54 67 38 77 Data Ascii: ,u+02c6,u+02da,u+02dc,u+2000-206f,u+2074,u+20ac,u+2212,u+2215,u+e0ff,u+effd,u+f000}@font-face{font-family:Roboto;font-style:italic;font-weight:300;src:local("Roboto Light Italic"),local("Roboto-LightItalic"),url(/dist/files/7m8l7TlFO-S3VkhHuR0at_ZraR2Tg8w
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 20 4c 69 67 68 74 20 49 74 61 6c 69 63 22 29 2c 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 2d 4c 69 67 68 74 49 74 61 6c 69 63 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 37 6d 38 6c 37 54 6c 46 4f 2d 53 33 56 6b 68 48 75 52 30 61 74 36 45 38 6b 4d 34 78 57 52 31 5f 31 62 59 55 52 52 6f 6a 52 47 63 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 31 30 30 2d 30 32 34 66 2c 75 2b 31 65 3f 3f 2c 75 2b 32 30 61 30 2d 32 30 61 62 2c 75 2b 32 30 61 64 2d 32 30 63 66 2c 75 2b 32 63 36 30 2d 32 63 37 66 2c 75 2b 61 37 32 30 2d 61 37 66 66 7d 40 66 6f 6e 74 2d Data Ascii: :italic;font-weight:300;src:local("Roboto Light Italic"),local("Roboto-LightItalic"),url(/dist/files/7m8l7TlFO-S3VkhHuR0at6E8kM4xWR1_1bYURRojRGc.woff2) format("woff2");unicode-range:u+0100-024f,u+1e??,u+20a0-20ab,u+20ad-20cf,u+2c60-2c7f,u+a720-a7ff}@font-
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 73 72 63 3a 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 20 49 74 61 6c 69 63 22 29 2c 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 2d 49 74 61 6c 69 63 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 63 44 4b 68 52 61 58 6e 51 54 4f 56 62 61 6f 78 77 64 4f 72 39 78 6b 41 7a 34 72 59 6e 34 37 5a 79 32 72 76 69 67 57 51 66 36 77 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 33 37 30 2d 30 33 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 52 6f 62 6f 74 6f 20 49 74 61 6c 69 63 22 29 2c 6c 6f 63 61 6c Data Ascii: src:local("Roboto Italic"),local("Roboto-Italic"),url(/dist/files/cDKhRaXnQTOVbaoxwdOr9xkAz4rYn47Zy2rvigWQf6w.woff2) format("woff2");unicode-range:u+0370-03ff}@font-face{font-family:Roboto;font-style:italic;font-weight:400;src:local("Roboto Italic"),local
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 63 3a 6c 6f 63 61 6c 28 22 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 20 45 78 74 72 61 4c 69 67 68 74 22 29 2c 6c 6f 63 61 6c 28 22 53 6f 75 72 63 65 53 61 6e 73 50 72 6f 2d 45 78 74 72 61 4c 69 67 68 74 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 74 6f 61 64 4f 63 66 6d 6c 74 39 62 33 38 64 48 4a 78 4f 42 47 44 76 6c 47 52 5a 33 75 43 46 62 76 55 4a 53 4a 46 79 61 56 43 58 33 72 47 56 74 73 54 6b 50 73 62 44 61 6a 75 4f 35 75 65 51 77 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 31 30 30 2d 30 32 34 66 2c 75 2b 31 65 3f 3f 2c 75 2b 32 30 61 30 2d 32 30 61 62 2c 75 2b 32 30 61 64 2d 32 30 63 66 2c 75 2b 32 63 36 30 2d 32 63 37 66 2c 75 2b 61 37 32 30 2d 61 37 66 Data Ascii: c:local("Source Sans Pro ExtraLight"),local("SourceSansPro-ExtraLight"),url(/dist/files/toadOcfmlt9b38dHJxOBGDvlGRZ3uCFbvUJSJFyaVCX3rGVtsTkPsbDajuO5ueQw.woff2) format("woff2");unicode-range:u+0100-024f,u+1e??,u+20a0-20ab,u+20ad-20cf,u+2c60-2c7f,u+a720-a7f
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 2f 74 6f 61 64 4f 63 66 6d 6c 74 39 62 33 38 64 48 4a 78 4f 42 47 43 50 32 4c 45 6b 36 6c 4d 7a 59 73 52 71 72 33 64 48 46 49 6d 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 30 3f 3f 2c 75 2b 30 31 33 31 2c 75 2b 30 31 35 32 2d 30 31 35 33 2c 75 2b 30 32 63 36 2c 75 2b 30 32 64 61 2c 75 2b 30 32 64 63 2c 75 2b 32 30 30 30 2d 32 30 36 66 2c 75 2b 32 30 37 34 2c 75 2b 32 30 61 63 2c 75 2b 32 32 31 32 2c 75 2b 32 32 31 35 2c 75 2b 65 30 66 66 2c 75 2b 65 66 66 64 2c 75 2b 66 30 30 30 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 Data Ascii: /toadOcfmlt9b38dHJxOBGCP2LEk6lMzYsRqr3dHFImA.woff2) format("woff2");unicode-range:u+00??,u+0131,u+0152-0153,u+02c6,u+02da,u+02dc,u+2000-206f,u+2074,u+20ac,u+2212,u+2215,u+e0ff,u+effd,u+f000}@font-face{font-family:Source Sans Pro;font-style:normal;font-wei
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 31 2c 75 2b 32 30 61 62 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 20 53 65 6d 69 62 6f 6c 64 22 29 2c 6c 6f 63 61 6c 28 22 53 6f 75 72 63 65 53 61 6e 73 50 72 6f 2d 53 65 6d 69 62 6f 6c 64 22 29 2c 75 72 6c 28 2f 64 69 73 74 2f 66 69 6c 65 73 2f 74 6f 61 64 4f 63 66 6d 6c 74 39 62 33 38 64 48 4a 78 4f 42 47 4b 79 47 4a 68 41 68 2d 52 45 30 42 78 47 63 64 5f 69 7a 79 65 76 33 72 47 56 74 73 54 6b 50 73 62 44 61 6a 75 4f 35 75 65 51 77 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 Data Ascii: 1,u+20ab}@font-face{font-family:Source Sans Pro;font-style:normal;font-weight:600;src:local("Source Sans Pro Semibold"),local("SourceSansPro-Semibold"),url(/dist/files/toadOcfmlt9b38dHJxOBGKyGJhAh-RE0BxGcd_izyev3rGVtsTkPsbDajuO5ueQw.woff2) format("woff2")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49754	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:58 UTC	743	OUT	GET /fileadmin_git/resources/public/JavaScripts/jquery-3.7.1.min.js?1724921946 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:40:58 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:58 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 29 Aug 2024 08:59:06 GMT X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-f790b2e3dfd363f7e95a62dc424349da ETag: W/"66d0385a-155ec" X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 112 Server: cloudflare CF-RAY: 8cb7b7bf7f1ac324-EWR
2024-09-30 22:40:58 UTC	849	IN	Data Raw: 37 64 39 37 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7d97/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 7c 43 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 75 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6e 5b 69 2e 63 61 6c 6c 28 65 29 5d 7c 7c Data Ascii: \|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[i.call(e)]\|\|
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 73 2c 73 6f 72 74 3a 6f 65 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 6f 65 2e 73 70 6c 69 63 65 7d 2c 63 65 2e 65 78 74 65 6e 64 3d 63 65 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 76 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 Data Ascii: bject\|\|this.constructor()},push:s,sort:oe.sort,splice:oe.splice},ce.extend=ce.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|v(a)\|\|(a={}),s===u&
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 29 3a 73 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 73 65 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 69 73 58 4d 4c 44 6f 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 6c 2e 74 65 73 74 28 74 7c 7c 6e 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 48 54 4d 4c 22 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e Data Ascii: ):s.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:se.call(t,e,n)},isXMLDoc:function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|\|e).documentElement;return!l.test(t\|\|n&&n.nodeName\|\|"HTML")},merge:function(e,t){for(var n=+t.length,r=0,i=e.len
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 6b 3d 6d 65 2c 53 3d 63 65 2e 65 78 70 61 6e 64 6f 2c 45 3d 30 2c 6e 3d 30 2c 73 3d 57 28 29 2c 63 3d 57 28 29 2c 75 3d 57 28 29 2c 68 3d 57 28 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 26 26 28 61 3d 21 30 29 2c 30 7d 2c 66 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 74 3d 22 28 3f 3a 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 67 65 2b 22 3f 7c 5c 5c 5c 5c Data Ascii: k=me,S=ce.expando,E=0,n=0,s=W(),c=W(),u=W(),h=W(),l=function(e,t){return e===t&&(a=!0),0},f="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",t="(?:\\\\[\\da-fA-F]{1,6}"+ge+"?\|\\\\
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 56 28 29 7d 2c 52 3d 4a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 66 65 28 65 2c 22 66 69 65 6c 64 73 65 74 22 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 6b 2e 61 70 70 6c 79 28 6f 65 3d 61 65 2e 63 61 6c 6c 28 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 6f Data Ascii: return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},M=function(){V()},R=J(function(e){return!0===e.disabled&&fe(e,"fieldset")},{dir:"parentNode",next:"legend"});try{k.apply(oe=ae.call(ye.childNodes),ye.childNodes),o
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 76 61 72 20 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function F(e){return e[S]=!0,e}function $(e){var t=T.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function B(t){return
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 22 29 7d 29 2c 6c 65 2e 63 73 73 48 61 73 3d 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 3a 68 61 73 28 2a 2c 3a 6a 71 66 61 6b 65 29 22 29 2c 21 31 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 30 7d 7d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3f 28 62 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 4f 2c 50 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 74 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 Data Ascii: ")}),le.cssHas=$(function(){try{return T.querySelector(":has(*,:jqfake)"),!1}catch(e){return!0}}),le.getById?(b.filter.ID=function(e){var t=e.replace(O,P);return function(e){return e.getAttribute("id")===t}},b.find.ID=function(e,t){if("undefined"!=typeof
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 28 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 64 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 Data Ascii: erySelectorAll(":checked").length\|\|d.push(":checked"),(t=T.createElement("input")).setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),r.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&d.push(":enabled",":disable
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 7d 2c 49 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 64 20 65 78 70 72 65 73 73 69 6f 6e 3a 20 22 2b 65 29 7d 2c 63 65 2e 75 6e 69 71 75 65 53 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 5b 5d 2c 72 3d 30 2c 69 3d 30 3b 69 66 28 61 3d 21 6c 65 2e 73 6f 72 74 53 74 61 62 6c 65 2c 6f 3d 21 6c 65 2e 73 6f 72 74 53 74 61 62 6c 65 26 26 61 65 2e 63 61 6c 6c 28 65 2c 30 29 2c 64 65 2e 63 61 6c 6c 28 65 2c 6c 29 2c 61 29 7b 77 68 69 6c 65 28 74 3d 65 5b 69 2b 2b 5d 29 74 3d 3d 3d 65 5b 69 5d 26 26 Data Ascii: urn void 0!==r?r:e.getAttribute(t)},I.error=function(e){throw new Error("Syntax error, unrecognized expression: "+e)},ce.uniqueSort=function(e){var t,n=[],r=0,i=0;if(a=!le.sortStable,o=!le.sortStable&&ae.call(e,0),de.call(e,l),a){while(t=e[i++])t===e[i]&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49755	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:58 UTC	773	OUT	GET /fileadmin/user_upload/park-domains_bild.png HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:40:58 UTC	478	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:58 GMT Content-Type: image/png Content-Length: 537573 Connection: close Last-Modified: Mon, 29 Apr 2024 12:21:40 GMT ETag: "662f90d4-833e5" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-9b84c395abcc4c73ae00dac8eb478e7c X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 6322 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7bf7d3243c8-EWR
2024-09-30 22:40:58 UTC	891	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 f0 00 00 01 f4 08 06 00 00 00 72 e4 0c 72 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 08 33 7a 49 44 41 54 78 01 ec fd 49 af 6d 4b 92 26 86 99 fb da a7 ef ee 7b 2f 22 23 b2 8a 59 44 55 b1 8a c9 6a 12 20 04 15 41 40 84 04 8e 05 70 20 fd 06 fd 13 cd f4 03 38 d1 0f 10 c0 a9 40 0d 34 12 20 80 92 08 65 15 ab 90 ca cc ca ca 2e e2 bd 77 fb e6 dc d3 9f bd 96 6b 59 6f ee 7b df c8 cb d9 1d d8 f7 e2 c6 39 67 ef d5 b8 9b 9b 77 9f 99 9b 95 7f f0 9f ff ef 1b 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 f8 96 d0 2a 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 f8 e6 90 04 7e 22 Data Ascii: PNGIHDRrrpHYssRGBgAMAa3zIDATxImK&{/"#YDUj A@p 8@4 e.wkYo{9gw$D"H$D"H$D"*$D"H$D"H$D"~"
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 3f 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 6f 10 49 e0 27 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 f1 0d 22 09 fc 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 be 41 24 81 9f 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 c4 37 88 24 f0 13 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 f8 06 91 04 7e 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 df 20 92 c0 4f 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 e2 1b 44 12 f8 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 7c 83 48 02 3f 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 6f 10 49 e0 27 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 f1 0d 22 09 fc 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 Data Ascii: ?H$D"H$D"H$oI'D"H$D"H$D""D"H$D"H$D"H$A$H$D"H$D"H$7$D"H$D"H$D"~"H$D"H$D"H$ O$D"H$D"H$DDD"H$D"H$D"H\|H?H$D"H$D"H$oI'D"H$D"H$D""D"H$D"H$D"H
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 5a 5b 4c 0e 5a 26 6b 8b c6 05 18 c7 e8 16 06 99 12 fe e6 f1 18 ba 49 b5 68 1f d6 37 d3 02 81 e7 37 c4 bc ea 5c 9d 64 ae 6f 3e 6e c5 36 fc d2 5c d5 a4 bf ab 6c 62 1d 54 66 fb c6 23 fb 9b d6 2f 45 aa c9 eb 11 d5 cd 5e 92 10 d6 51 a1 af 4b 81 f5 da 12 be 5f a8 3e 8d fa 56 53 bd 92 6b e7 f5 f3 cd fa f9 76 9d 8b 1e 1e 1f e1 fe f1 61 ed 7f cf 70 b0 d9 c0 c9 aa 2b c7 47 47 a4 73 51 d6 dc 5e 71 ec 2b f2 99 3e ba 9a ae 8c f3 7c 94 85 cb 30 ea 0e d8 fa 12 8b ca 55 5b 86 f1 11 cb c3 6d c4 b3 14 ca 6d b1 25 59 9d 0a 8d e9 74 3d 3e a3 ca d4 89 ed 24 e3 44 a1 7b b4 3c 33 a8 8e aa 1f 38 cb 4b db 8b eb 44 f3 02 3f 80 d7 c5 74 cf b4 ea cd 16 df ee ed 10 e4 8f df bb 0e 45 fd 69 dc c7 97 6d e8 7b 53 98 bb d6 af d6 36 79 7a 5a db 63 ed c3 a8 0b db ed 96 7e 16 7a 37 2b 30 5e Data Ascii: Z[LZ&kIh77\do>n6\lbTf#/E^QK_>VSkvap+GGsQ^q+>\|0U[mm%Yt=>$D{<38KD?tEim{S6yzZc~z7+0^
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 79 ef 1b 7d 3b 21 11 3c e0 f6 91 c3 91 8c e3 8d 58 ac c7 ae 87 a1 7b 46 17 fb 7d c7 20 20 65 d0 cd b0 d6 ad 23 44 a0 27 c3 87 aa ee 10 90 4b 5b e0 4b e0 cd 3a 18 31 af cf 8c e4 6f 7c e6 78 2f c9 a9 b4 fe be 20 fe f1 39 b1 8c f1 1e 25 9e 89 b0 2f 4a c8 33 35 c4 44 91 7b ea 29 19 40 9f 69 5b e2 7f 75 b7 8c d1 4b 53 09 30 7b 67 a8 6f 47 ae c6 f2 2a a1 1b 3d 1c ab d0 e6 45 36 ec 81 18 63 52 61 11 af 3c f1 9e eb 08 4a 21 8a 02 89 14 e5 c0 46 05 30 d2 68 a7 ad 58 28 5c 2e 21 2b fc da 62 9e 8f 9d 91 ad ec 39 31 d1 5c b6 f1 fd 5e 34 bd a7 f7 d4 ec 8d 0a 60 5e 8b a0 9e be 10 9c d0 f1 e3 d2 ec 39 4c 2e 80 8d 79 8a d1 b8 b3 63 24 b0 71 6b 8f 21 01 db 4e 84 d0 44 2e 4d 0c 03 4c 60 35 23 09 47 bd 1e 3f 8b 24 62 35 2f f2 de b8 68 de f7 41 3f 44 98 61 7c 15 ef 48 ab 53 Data Ascii: y};!<X{F} e#D'K[K:1o\|x/ 9%/J35D{)@i[uKS0{goG*=E6cRa<J!F0hX(\.!+b91\^4`^9L.yc$qk!ND.ML`5#G?$b5/hA?Da\|HS
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: d5 2c 43 f0 f9 cc 8c 76 c1 18 12 0c d4 ea 01 2c 25 02 3d 3d a8 64 24 cb 6d e9 d6 1f d3 14 bd 99 bd bd 6b 29 3b e1 6b e2 4f 26 30 1b f8 c8 c2 cf 46 c3 60 2d 1a ea 25 18 3f c1 c7 17 1d 8b 47 c3 41 2c 1f 04 0d 00 7d 46 18 cb b5 cd 62 f9 f6 3d a3 ca 82 6c 3c 41 34 55 3f c1 30 ce da ae e3 ae 0f aa 9f da 1e 6d 28 83 af 3b 42 39 9a 7b 65 ab ac 7d ec 52 dd 66 3d f6 f5 4a 08 3f 24 3a 58 b8 39 65 88 6d a0 64 bb 1a 05 d8 38 cc 9e ea dd 38 a5 f3 97 cc 7b 4a d4 eb 6c d9 64 2c 69 a6 2f 71 0d d1 80 4f c4 49 db ad ff 36 eb 1a 99 8d b0 b2 26 d5 f7 4c ae 2b fa 9e 2a 0e 1c 8b 18 7a 54 57 e8 24 d3 6a 10 dd a2 c7 3d 92 d9 aa b2 58 1f f0 75 db 66 2d d7 01 ae 27 6b e1 d3 47 e4 08 40 34 7f 37 c6 e8 f8 46 c6 11 e0 6b d1 90 86 c0 75 fd 22 c6 91 7e 5c f1 fa 92 61 a9 ec d7 f1 7e 7c Data Ascii: ,Cv,%==d$mk);kO&0F`-%?GA,}Fb=l<A4U?0m(;B9{e}Rf=J?$:X9emd88{Jld,i/qOI6&L+*zTW$j=Xuf-'kG@47Fku"~\a~\|
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 9b cc be 40 90 59 a1 87 67 33 4f 5d ba 67 8e 75 8e cf 19 89 93 91 70 19 7f 1f bf 8f 84 c8 2e 01 0c a6 0b 00 1e 26 22 9a 08 6a 47 4c e1 47 e2 c5 5a 9c a0 28 ac 44 64 b0 6a 31 ef c3 60 80 29 45 13 70 2a d9 d1 cb c6 33 05 47 72 57 14 b5 a3 a2 43 fd 84 2c 86 36 78 73 83 90 07 a3 bc 28 04 01 b6 21 ca 55 c9 09 7f 16 c8 a7 f8 51 2d 91 90 e8 8d 4c fb 88 4f 85 86 7b 8a ed b1 2c 91 bc d7 b6 58 4c 36 f1 a7 dd 63 61 a7 fa 3a ab 4c b9 6d 47 32 11 a4 ef 16 88 d2 a4 ef c5 6b 9b c9 89 66 7a c8 c9 b7 7b f4 64 51 b1 0e d8 87 f1 00 23 e1 e2 33 9b c4 44 6f fb ca 0d e0 3a 35 c8 54 43 c1 e8 e5 63 e8 0e 8c cd 0c ad 74 84 c9 3e 42 d9 08 b6 ea 2c 8a cb 1c 4c df b5 80 b5 f4 a1 40 f6 f5 11 95 2b ca b0 12 71 af b1 4b f8 f3 e7 a7 2d 7c bc be 81 db 4f 37 f0 ee dd 7b 78 f5 f3 cf f0 f2 Data Ascii: @Yg3O]gup.&"jGLGZ(Ddj1`)Ep*3GrWC,6xs(!UQ-LO{,XL6ca:LmG2kfz{dQ#3Do:5TCct>B,L@+qK-\|O7{x
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 06 33 1d f5 a3 97 76 ec df dd 89 31 e9 57 5a 36 90 67 2d 41 f6 1e c2 64 b1 d0 45 10 ca 36 12 f7 51 0f 4d f6 2e 51 88 a7 9f 54 b9 58 4e da 7f 79 0c e3 5c 01 52 b4 b6 98 87 be 87 b0 81 41 df b4 ad d8 70 c7 de da e2 f8 51 c0 42 12 ba 8c 8b e8 e1 04 dd da a4 ca fc 33 c9 89 4b 4d 8e 4c e5 a9 64 e4 13 91 b0 1e 36 10 03 89 9c 5a b4 6e 23 c9 e4 9b ce 79 ad 9f db 21 7a a9 17 1b 5f 77 e7 27 10 b2 1c 24 9f 13 3f 7b cc 51 03 81 7c 56 5d 42 4c 75 cc 1f a0 65 59 4d 69 2b 69 8f 09 6a 31 39 2d 9d 19 5a 38 49 ad 26 86 d6 02 a0 0c 0e 0f 78 bd 7d 50 ab 8d 79 8b 18 bc d0 d9 06 74 cc 07 2d af f7 03 57 09 ae b7 e5 72 22 39 bb 5e 8f fa 15 f5 1c a0 75 46 3d d5 27 0f 7b e4 06 94 89 4e c2 14 c9 29 13 e6 c7 f5 9f 26 fa dd 37 7e b9 2e 4f 49 e0 27 12 89 44 22 91 48 24 12 5f 83 ff f4 Data Ascii: 3v1WZ6g-AdE6QM.QTXNy\RApQB3KMLd6Zn#y!z_w'$?{Q\|V]BLueYMi+ij19-Z8I&x}Pyt-Wr"9^uF='{N)&7~.OI'D"H$_
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: cf 3d 89 a0 3f e3 46 7e 24 24 74 f3 a5 24 fe 48 78 8f c4 d5 3e 22 5d af df 31 8c 94 9e e8 8d d7 1a c1 59 60 87 34 1b 61 04 45 01 f3 78 d3 ba c5 67 ff 2e 8f 5a dd 98 ea df bd 3c 5b 47 74 f5 a4 55 ff 1c fa 09 ee 21 0e 42 d3 fa 95 be 61 37 82 77 61 86 5d 65 0c 42 1c 6a 38 0a 90 47 2d 5d 98 0e 25 ee 41 b8 5a 39 66 cf 81 93 57 bd ab 42 6e c9 e7 aa 8c fa 30 a9 a3 cb 1c 49 af c6 11 70 16 6d f7 22 fa e8 45 1f 4f 24 08 bb ab 34 2e 87 02 80 de eb 93 f4 44 05 5c 5c 1a a3 2e 2a 19 ba 4f a6 46 a8 06 99 17 d3 0d 7f f4 ef d2 13 97 35 0b d9 0d 4d 0d 4a 69 c3 fb 00 f6 19 75 74 c0 f0 d8 f7 ee 51 b8 70 00 6e bb ae 8c ef 6e bb 06 a5 f8 9d d4 12 4c d6 ad 75 c4 ce 6e bd 94 1c 25 49 0b 21 13 74 b9 ed 69 af 7d 32 31 f2 55 c3 e5 84 44 df 6d ec 7f 52 8f e6 49 2d 15 44 e4 88 6e fd Data Ascii: =?F~$$t$Hx>"]1Y`4aExg.Z<[GtU!Ba7wa]eBj8G-]%AZ9fWBn0Ipm"EO$4.D\\.*OF5MJiutQpnnLun%I!ti}21UDmRI-Dn
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: b5 99 d7 ba 1a be e6 b9 37 40 f7 73 54 38 f9 d3 d8 83 7c 5e 7a 8f fc da 95 d5 f3 1e f4 61 72 98 f8 d4 10 21 d3 a8 0b cd 4d 3a 71 9e 55 a2 3f d6 6f aa 4a cc 2e 56 0e ec cf d3 e4 b2 37 cd 09 7a 59 8b e7 cf 19 e7 e1 28 43 d7 d9 5d 23 91 b6 31 13 bc 4f 54 57 0a 57 65 84 7c 9f 1b 40 1b df c7 6d 4d 38 de bc fd c3 18 c7 75 9a 64 8d 25 f1 ed e7 7e 9d 32 2f 9e 34 9b 4e fd 28 89 0f 3e 0a 57 e9 a7 b5 1b ab 54 a6 b6 d4 eb ea df a4 90 be 56 19 8c 37 9d 3c 5d f6 d1 d0 a0 ba a5 c9 62 91 68 5f 9a 1b cd e8 dd b3 38 81 c8 b3 31 39 ed 76 5d 0f ce 5b 8e 71 4f 6d 59 78 86 a9 72 cc 0b c7 41 4c 04 7d 74 b0 8e 61 94 23 a9 9a 9e ab 91 47 cb 5e aa f7 65 3d 41 a5 63 8b 8e bf da 0f 26 31 00 e0 3a dd 8d 8b 0b 1b 7b 64 fc e2 2e 2a 27 6d e4 44 a0 9f 08 12 63 72 e8 07 18 7e cb e7 9b 4a Data Ascii: 7@sT8\|^zar!M:qU?oJ.V7zY(C]#1OTWWe\|@mM8ud%~2/4N(>WTV7<]bh_819v][qOmYxrAL}ta#G^e=Ac&1:{d.*'mDcr~J
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 21 b5 7b e7 97 da 76 dc d4 ef 12 28 11 d1 cb 4a bd ef 0a ec f1 3a 25 19 39 f7 37 12 60 b6 e9 83 dd 6b ec 7b db b4 97 bd 65 f6 7a f7 a4 a7 3e 78 3c 51 60 c4 be 92 11 e0 9b 74 61 c1 7b d2 23 24 00 d5 8d a7 79 c0 89 21 00 02 41 21 0f 84 51 e2 ca 8f 18 71 04 4a a0 82 91 75 fb 42 25 d0 73 17 97 91 f6 ac 28 b7 26 84 04 13 18 fe 85 93 84 51 5f b8 20 5a 17 eb c7 e2 19 59 7a 5a bf ab 47 24 7d f4 b9 2a ff e8 c1 19 f5 48 09 2c d3 7d e8 8d 0b f6 96 f2 77 1b 83 c6 36 d6 7f cb 40 be f7 84 5c 24 8f 96 ae 0d 8d ec b0 93 04 e1 3d ad 7f a7 1a e8 30 29 37 85 2a 59 42 8e 8d b2 6b 64 8a ba de 79 bd ba 12 78 dd 43 60 fb 9e 5c ed fb 8a 86 bc 31 cf 7d fe c2 3c 3a a3 17 ee a8 47 91 fc f7 f1 45 9f 0d a0 c9 25 61 0f b1 a9 61 5e d4 4b b2 05 85 57 ef 69 25 eb 0a 00 8c 84 31 8e eb 77 Data Ascii: !{v(J:%97`k{ez>x<Q`ta{#$y!A!QqJuB%s(&Q_ ZYzZG$}H,}w6@\$=0)7YBkdyxC`\1}<:GE%aa^KWi%1w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49756	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:58 UTC	783	OUT	GET /fileadmin/user_upload/Park_Domains/Domain-Parking.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:40:58 UTC	492	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:58 GMT Content-Type: image/jpeg Content-Length: 42237 Connection: close Cf-Bgj: h2pri ETag: "6321aef7-a4fd" Last-Modified: Wed, 14 Sep 2022 10:37:43 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-3885ed6b65ff720ea15ff4d730a0ceaa CF-Cache-Status: HIT Age: 1464 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7bf7d1d7291-EWR
2024-09-30 22:40:58 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0b 1b 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 07 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 62 00 00 00 1b 01 05 00 01 00 00 00 6a 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 72 00 00 00 32 01 02 00 14 00 00 00 8e 00 00 00 69 87 04 00 01 00 00 00 a4 00 00 00 d0 00 00 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 00 32 30 31 36 3a 30 38 3a 31 30 20 31 32 3a 30 32 3a 30 32 00 00 00 03 00 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 8c 05 00 00 03 a0 04 00 01 00 00 00 3a 04 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 Data Ascii: JFIFHHExifII*bj(1r2i''Adobe Photoshop CS4 Windows2016:08:10 12:02:02:
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 12 49 25 7d ce 52 49 24 92 94 92 49 24 a5 24 99 24 94 ba 64 92 49 4a 49 25 63 1b 0d f7 c3 dd ec ab f7 bb 9f ea 7f e4 d2 24 01 65 20 12 68 06 ba 4a ce 76 35 54 6c 35 c8 df 20 b4 99 e3 f3 95 54 22 41 16 15 28 98 9a 2a 49 24 91 5a a4 93 24 92 94 92 49 24 a7 ff d0 ec 12 49 25 7d ce 52 49 26 49 4b a6 49 24 94 a4 92 49 25 29 20 09 20 00 49 3a 00 35 25 25 7b a6 7a 7b 5f 1f cf 03 a9 ef b0 fe ef f6 be 92 12 97 08 26 ad 30 8f 14 80 ba 5f 1b a7 86 c3 ef 1b 9d da be 40 fe bf ef a9 e5 67 b2 a2 59 5c 3e de 09 fc d6 fc 7f 7b fa aa c5 8d 6b 98 5a e7 16 83 cc 3b 69 f8 6e 55 ff 00 67 e1 bb 46 cf f6 5f 3f f9 25 00 90 26 e7 67 c3 a3 60 c4 81 50 a1 e2 77 73 5e f7 bd c5 ef 25 ce 3c 92 99 5e b3 a5 ff 00 a3 b3 5f 07 8f fb f3 7f f2 2a a5 d4 5b 49 8b 5b b4 1e 1d c8 3f 07 29 a3 38 Data Ascii: I%}RI$I$$$dIJI%c$e hJv5Tl5 T"A(I$Z$I$I%}RI&IKI$I%) I:5%%{z{_&0_@gY\>{kZ;inUgF_?%&g`Pws^%<^_[I[?)8
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 55 26 91 8f 94 c2 fa db f4 1c de 5a aa a4 81 00 ee 98 c8 8d 9b 7f 66 e9 ae d5 99 25 83 c1 c3 fb da d4 85 5d 2a af 73 ac 75 e7 f7 40 d3 f0 0d ff 00 ab 55 25 32 1c 27 f7 a4 bb 8c 7e ec 53 e4 e5 be f7 b4 81 e9 b2 bf e6 da 3b 79 ff 00 d1 46 76 46 16 58 07 2d a6 bb 62 0d 8c d4 1f fa af fa 4d 55 a8 f4 7d 66 8b e7 d2 3a 38 83 11 3f 44 9f e4 ab 59 bd 3c 56 df 52 80 76 b4 7b d9 24 98 fd f6 ff 00 df 90 3c 20 88 eb 1f dd 21 23 88 89 4b 49 7e f4 4b 0f b2 f4 ee d9 7a 78 40 fe e5 26 59 d3 71 4e fa 43 af b4 7d 12 74 00 f8 f0 df fa 95 49 32 3c 17 bc 89 47 1d 6d 18 86 76 d8 fb 6c 75 af 32 e7 99 31 c2 82 49 27 2c 52 49 26 49 4a 25 6b e1 b0 62 61 9b 6c 10 48 f5 5e 3f f3 db 15 5e 9f 86 6e 70 ba c1 fa 26 9f 68 3f 9e 47 fd f1 a9 fa a6 56 f7 7d 9d 86 5a c3 36 1f 17 0f cd fe c7 Data Ascii: U&Zf%]*su@U%2'~S;yFvFX-bMU}f:8?DY<VRv{$< !#KI~Kzx@&YqNC}tI2<Gmvlu21I',RI&IJ%kbalH^?^np&h?GV}Z6
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 69 63 65 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 07 67 72 6f 75 70 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 06 6f 72 69 67 69 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 04 3a 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 05 8c 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 Data Ascii: iceIDlonggroupIDlongoriginenumESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlong:RghtlongurlTEXTnullTEXTMsgeTEX
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 7f 7b fa aa c5 8d 6b 98 5a e7 16 83 cc 3b 69 f8 6e 55 ff 00 67 e1 bb 46 cf f6 5f 3f f9 25 00 90 26 e7 67 c3 a3 60 c4 81 50 a1 e2 77 73 5e f7 bd c5 ef 25 ce 3c 92 99 5e b3 a5 ff 00 a3 b3 5f 07 8f fb f3 7f f2 2a a5 d4 5b 49 8b 5b b4 1e 1d c8 3f 07 29 a3 38 9d 8f d1 82 50 90 dc 7d 51 a4 92 49 cb 14 92 64 92 52 92 49 32 4a 7f ff d1 ec 13 24 92 be e7 29 24 92 49 4a 49 24 c9 29 74 d2 9d ad 2e 70 6b 79 71 00 7c 4e 8b 56 ac 2c 7a 87 d1 0f 77 77 b8 4f dc df a2 d4 d9 cc 47 75 d0 81 96 ce 46 e1 e2 a7 55 ae a9 ed b2 b3 ee 6f dc 7c 5a 7f ac b6 a0 71 02 3e 01 0e dc 5c 7b 47 bd 80 1f de 6f b5 df 78 4c f7 81 d0 8d 19 3d 82 35 12 d5 67 36 9c dc 6f e4 bf 50 79 2d 70 ff 00 c8 ac 87 d4 6b 79 63 c0 0e 69 83 fe c5 6a 9b 0e 16 53 e9 79 9a 89 01 c7 e2 25 96 7f e4 d5 9c fc 5f 59 Data Ascii: {kZ;inUgF_?%&g`Pws^%<^_*[I[?)8P}QIdRI2J$)$IJI$)t.pkyq\|NV,zwwOGuFUo\|Zq>\{GoxL=5g6oPy-pkycijSy%_Y
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: f8 f0 df fa 95 49 32 3c 17 bc 89 47 1d 6d 18 86 76 d8 fb 6c 75 af 32 e7 99 31 c2 82 49 27 2c 52 49 26 49 4a 25 6b e1 b0 62 61 9b 6c 10 48 f5 5e 3f f3 db 15 5e 9f 86 6e 70 ba c1 fa 26 9f 68 3f 9e 47 fd f1 a9 fa a6 56 f7 7d 9d 86 5a c3 36 1f 17 0f cd fe c7 fd 5a 8e 7e a2 20 3f c2 65 80 e0 89 99 f2 8b 48 b9 ce 25 ce d5 ce 24 bb e2 75 4c 92 4a 46 25 24 92 64 94 ff 00 ff d5 eb 12 49 32 be e6 ae 99 24 92 52 92 49 24 94 a5 77 0b a8 7a 40 55 79 f6 0f a1 67 76 ff 00 25 df c8 54 52 42 51 12 14 57 46 46 26 c3 a9 93 d3 59 6f e9 31 c8 63 9d ae df cc 77 f2 9b 1f 43 fe a1 67 5b 4d b4 98 b5 85 9e 67 83 f0 77 d1 52 a3 2a fc 7f e6 dd ed ee c3 ab 7e ef cd fe ca bd 5f 56 a4 88 b5 8e 64 f3 b7 dc df bb e9 26 7a e3 fd 71 ff 00 39 7f ea e7 fd 43 ff 00 35 cc 9f 04 cb 58 d9 d2 6c Data Ascii: I2<Gmvlu21I',RI&IJ%kbalH^?^np&h?GV}Z6Z~ ?eH%$uLJF%$dI2$RI$wz@Uygv%TRBQWFF&Yo1cwCg[MgwR*~_Vd&zq9C5Xl
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 45 36 41 44 44 34 39 38 30 45 46 44 46 44 33 34 42 44 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 35 42 46 37 44 30 45 45 31 35 45 45 36 31 31 42 31 34 44 38 45 34 38 39 44 38 30 44 37 45 46 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 31 2b 30 32 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 30 32 2b 30 32 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 30 32 2b Data Ascii: E6ADD4980EFDFD34BD" xmpMM:InstanceID="xmp.iid:45BF7D0EE15EE611B14D8E489D80D7EF" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmp:CreateDate="2016-08-10T12:01+02:00" xmp:ModifyDate="2016-08-10T12:02:02+02:00" xmp:MetadataDate="2016-08-10T12:02:02+
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 30 32 2b 30 32 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Evt:when="2016-08-10T12:02:02+02:00" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-09-30 22:40:58 UTC	1369	IN	Data Raw: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 c1 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 26 03 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 12 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 30 00 07 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 48 44 90 00 00 03 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 12 89 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 13 00 Data Ascii: D0&&0@HD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49758	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:59 UTC	790	OUT	GET /fileadmin/user_upload/Park_Domains/Domain-Parking-Profis.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:40:59 UTC	492	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:59 GMT Content-Type: image/jpeg Content-Length: 52602 Connection: close Cf-Bgj: h2pri ETag: "6321aef7-cd7a" Last-Modified: Wed, 14 Sep 2022 10:37:43 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-706f3b790b60e4c1f03f4346fe51a7d0 CF-Cache-Status: HIT Age: 6323 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7c3fa967281-EWR
2024-09-30 22:40:59 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0e 20 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 07 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 62 00 00 00 1b 01 05 00 01 00 00 00 6a 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 72 00 00 00 32 01 02 00 14 00 00 00 8e 00 00 00 69 87 04 00 01 00 00 00 a4 00 00 00 d0 00 00 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 00 32 30 31 36 3a 30 38 3a 31 30 20 31 32 3a 30 32 3a 35 39 00 00 00 03 00 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 8c 05 00 00 03 a0 04 00 01 00 00 00 3a 04 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 Data Ascii: JFIFHH ExifII*bj(1r2i''Adobe Photoshop CS4 Windows2016:08:10 12:02:59:
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 12 49 25 7d ce 52 49 24 92 94 92 49 24 a5 24 92 b5 4e 35 4c ab ed 19 5a 30 fd 06 77 3e 1f e7 7e ea 06 40 6e 98 c4 9d 9a 89 2b 9f 69 c1 76 8e c6 da df 11 13 ff 00 47 6a 5f 67 c2 b7 5a 6f d8 7f 75 ff 00 f9 9e c7 21 c7 5b 82 3f 1f fa 2b b8 2f 62 0f e1 ff 00 49 a6 92 b9 f6 4c 4a f5 bb 20 1f 26 c7 f0 f5 1c 9b ed 1d 3d 9a 57 8f bf f9 4e ff 00 cc f7 25 c7 7b 02 7f 97 f5 91 c1 5b 91 1f c7 fe 8b 51 25 71 d4 63 e4 d6 6c c4 1b 2c 6f d2 ab c7 fd 7f 35 52 44 48 1f a6 e1 12 89 1e 37 b1 0a 49 24 91 5a a4 93 24 92 94 92 49 24 a7 ff d0 ec 12 49 25 7d ce 52 49 26 49 4b a6 ef 1d cf 64 7c 5c 61 7b 9c e7 9d b5 57 ab cf f0 45 39 b4 d3 ed c5 a8 0f e5 bb 49 ff 00 bf ff 00 9c e4 d3 2d 68 0b 2b 84 74 b2 68 7e 2c 71 f0 c9 3e ae 40 d9 4b 35 21 da 4f f5 bf 75 88 79 59 07 22 cd dc 31 Data Ascii: I%}RI$I$$N5LZ0w>~@n+ivGj_gZou![?+/bILJ &=WN%{[Q%qcl,o5RDH7I$Z$I$I%}RI&IKd\|\a{WE9I-h+th~,q>@K5!OuyY"1
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 0c 92 d3 e0 63 7f fd 53 55 14 a1 7a 83 fa 3a 2a 60 69 21 a7 10 b5 24 92 49 cb 1f ff d3 eb 92 49 32 be e6 ae ad 60 dc c9 76 35 ba d7 76 83 c9 c7 4f fa 7f f5 6a a2 47 54 24 2c 52 63 2a 36 92 fa 5d 45 a6 b7 6b 1a b5 de 23 f7 95 86 7e 93 a5 3d bd ea 7c fc a4 3f fe a5 c9 f2 1c 6f e9 f5 de ed 6c ad db 4b bc 75 d8 ef fb e3 94 3a 75 ad 6d ce a5 ff 00 42 e1 b6 3c c7 fe 49 a9 84 93 1b eb 03 af f8 2c 80 01 3a fd 19 8d 3f c3 6d 74 e7 ee c5 0d ef 5b 8b 4f cf de df fa a5 69 66 62 bc e1 e5 ba 8b 0f b1 d0 d2 ee df f0 56 2d 35 16 41 52 be 92 d4 33 63 37 1a eb 1f 49 6a 75 32 d1 8c 01 00 b8 bc 06 93 c8 fc e7 16 ac b5 77 aa 3c 9b aa a8 6a 43 77 40 e4 97 18 d3 fc d4 f8 fd 31 c6 1f 91 ed 1f e8 c7 3f db 77 e6 a9 60 44 60 09 eb ab 0c c1 9c c8 03 6d 1a 2a ff 00 49 73 7f 4a d8 1b Data Ascii: cSUz:`i!$II2`v5vOjGT$,Rc6]Ek#~=\|?olKu:umB<I,:?mt[OifbV-5AR3c7Iju2w<jCw@1?w`D`m*IsJ
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 49 32 7f 14 c9 24 92 14 92 49 24 a5 24 92 49 29 49 24 92 4a 7f ff d9 ff ed 12 e8 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 07 1c 02 00 00 02 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 e8 f1 5c f3 2f c1 18 a1 a2 7b 67 ad c5 64 d5 ba 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 02 00 48 00 00 00 01 00 02 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 Data Ascii: I2$I$$I)I$JPhotoshop 3.08BIM8BIM%\/{gd8BIMHH8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 00 00 38 42 49 4d 04 11 00 00 00 00 00 01 01 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 00 00 01 38 42 49 4d 04 0c 00 00 00 00 0d 06 00 00 00 01 00 00 00 a0 00 00 00 7a 00 00 01 e0 00 00 e4 c0 00 00 0c ea 00 18 00 01 ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 48 00 48 00 00 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: 8BIM8BIM8BIMzJFIFHHAdobe_CMAdobed
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: f8 96 42 44 47 80 6c 44 28 d9 5d 76 b7 6d ad 0f 1e 7c 8f 83 be 93 55 4e 99 6e ea dd 49 3a d7 ee 6f f5 4f fe 45 ca ea 32 06 32 ae ca 89 12 8d f7 73 6f c5 b7 15 de be 3b 8e d6 f2 7f 39 a3 f9 5f bf 5a 9b 83 3a 85 45 ec 01 b9 55 8d 5b fb c3 ff 00 23 fb 9f b8 af ac bc 86 3b 0b 25 b7 54 3f 46 e9 2d 6f fe 7c ab ff 00 20 9f 19 19 7f 7c 7c a7 bf f5 4b 1c a2 23 fd c3 f3 0f dd fe b4 5a 9f eb 0a ee 37 bb a7 65 34 f0 dd 47 dc d7 7f df 54 7a 8d 6d de cc 9a ff 00 9b bc 4c ff 00 2a 26 7f b6 d5 2c 10 6c c5 ca a9 ba b9 c2 40 f8 82 3f ef aa 49 1b 80 3e 23 f3 63 8c 6a 66 3e 07 fe 8b 49 24 c0 c8 94 93 d8 d4 92 49 24 a7 ff d2 eb d2 49 32 be e7 2e 8d 89 8f f6 8b 76 9d 2b 6e af 3e 5f bb fd a4 05 71 84 b3 a5 bd cc e5 ef 87 9f 22 76 7f d4 a6 cc 90 34 dc 9e 1f b5 74 00 27 5d 80 e2 Data Ascii: BDGlD(]vm\|UNnI:oOE22so;9_Z:EU[#;%T?F-o\| \|\|K#Z7e4GTzmL*&,l@?I>#cjf>I$I$I2.v+n>_q"v4t']
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 04 f9 9d 41 94 83 5d 24 3a de 0b b9 6b 7f f2 4f 42 c6 a9 b8 75 9c cc 90 7d 43 fc dd 67 e9 49 f1 ff 00 84 7f fe 06 c4 e2 bc 3e 9f 0e b4 fa d9 03 e8 b0 70 df 97 e6 7f 5d ea 96 46 45 97 bf d4 b4 f1 a3 5a 38 68 f0 6a 7c 63 62 a3 f2 f5 97 ef 79 31 ca 54 6e 5f 30 f9 63 d2 1f de 63 65 8f b5 ee b1 e6 5c f3 25 5c c4 ff 00 93 b3 0f fa fd 15 5e 9c 3c ab a3 65 64 34 fe 7b bd ad fc 7f ef aa ce 51 af 13 13 ec 4c 76 fb 5e 66 d2 3b 77 fe cf d1 da d6 a7 48 83 51 1d c7 d0 05 b1 04 5c 8e d4 77 ea 64 d0 49 24 93 d8 d4 92 64 92 53 ff d5 eb 12 49 32 be e6 ae 99 24 92 52 91 aa cc c9 a6 03 1e 76 8e 1a ef 70 fc 50 52 48 80 77 d5 20 91 b1 a7 41 97 63 e7 fe 8a f6 0a ef 3f 42 c6 f7 3e 5f fa 4d ea 8d d5 3e ab 1d 55 83 dc de 7c 08 ec e1 fc 97 28 6b c8 d0 8d 41 1d 88 5a 23 67 52 a4 34 Data Ascii: A]$:kOBu}CgI>p]FEZ8hj\|cby1Tn_0cce\%\^<ed4{QLv^f;wHQ\wdI$dSI2$RvpPRHw Ac?B>_M>U\|(kAZ#gR4
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 66 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 69 66 66 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 65 32 36 38 30 64 33 38 2d 66 36 32 35 2d 34 39 36 62 2d 39 39 34 35 2d 30 39 64 35 66 63 30 62 64 65 34 39 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 43 38 41 42 37 32 38 31 38 43 38 31 31 45 36 41 44 44 34 39 38 30 45 46 44 46 44 33 34 42 44 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 39 42 46 37 44 30 45 45 31 35 45 45 36 31 31 42 31 34 Data Ascii: ff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmpMM:OriginalDocumentID="xmp.did:e2680d38-f625-496b-9945-09d5fc0bde49" xmpMM:DocumentID="xmp.did:6C8AB72818C811E6ADD4980EFDFD34BD" xmpMM:InstanceID="xmp.iid:49BF7D0EE15EE611B14
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 61 36 34 62 65 63 35 2d 36 30 65 66 2d 31 31 37 39 2d 38 63 66 34 2d 65 31 66 36 63 31 38 61 34 65 65 34 22 2f 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 39 42 46 37 44 30 45 45 31 35 45 45 36 31 31 42 31 34 44 38 45 34 38 39 44 38 30 44 37 45 46 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 35 39 2b 30 32 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 Data Ascii: f:documentID="adobe:docid:photoshop:ca64bec5-60ef-1179-8cf4-e1f6c18a4ee4"/> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:49BF7D0EE15EE611B14D8E489D80D7EF" stEvt:when="2016-08-10T12:02:59+02:00" stEvt:softwareAgent="Adob
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49759	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:59 UTC	556	OUT	GET /fileadmin/user_upload/Park_Domains/Domain-Parking.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:40:59 UTC	492	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:59 GMT Content-Type: image/jpeg Content-Length: 42237 Connection: close Cf-Bgj: h2pri ETag: "6321aef7-a4fd" Last-Modified: Wed, 14 Sep 2022 10:37:43 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-3885ed6b65ff720ea15ff4d730a0ceaa CF-Cache-Status: HIT Age: 1465 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7c41cb072b7-EWR
2024-09-30 22:40:59 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0b 1b 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 07 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 62 00 00 00 1b 01 05 00 01 00 00 00 6a 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 72 00 00 00 32 01 02 00 14 00 00 00 8e 00 00 00 69 87 04 00 01 00 00 00 a4 00 00 00 d0 00 00 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 00 32 30 31 36 3a 30 38 3a 31 30 20 31 32 3a 30 32 3a 30 32 00 00 00 03 00 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 8c 05 00 00 03 a0 04 00 01 00 00 00 3a 04 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 Data Ascii: JFIFHHExifII*bj(1r2i''Adobe Photoshop CS4 Windows2016:08:10 12:02:02:
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 12 49 25 7d ce 52 49 24 92 94 92 49 24 a5 24 99 24 94 ba 64 92 49 4a 49 25 63 1b 0d f7 c3 dd ec ab f7 bb 9f ea 7f e4 d2 24 01 65 20 12 68 06 ba 4a ce 76 35 54 6c 35 c8 df 20 b4 99 e3 f3 95 54 22 41 16 15 28 98 9a 2a 49 24 91 5a a4 93 24 92 94 92 49 24 a7 ff d0 ec 12 49 25 7d ce 52 49 26 49 4b a6 49 24 94 a4 92 49 25 29 20 09 20 00 49 3a 00 35 25 25 7b a6 7a 7b 5f 1f cf 03 a9 ef b0 fe ef f6 be 92 12 97 08 26 ad 30 8f 14 80 ba 5f 1b a7 86 c3 ef 1b 9d da be 40 fe bf ef a9 e5 67 b2 a2 59 5c 3e de 09 fc d6 fc 7f 7b fa aa c5 8d 6b 98 5a e7 16 83 cc 3b 69 f8 6e 55 ff 00 67 e1 bb 46 cf f6 5f 3f f9 25 00 90 26 e7 67 c3 a3 60 c4 81 50 a1 e2 77 73 5e f7 bd c5 ef 25 ce 3c 92 99 5e b3 a5 ff 00 a3 b3 5f 07 8f fb f3 7f f2 2a a5 d4 5b 49 8b 5b b4 1e 1d c8 3f 07 29 a3 38 Data Ascii: I%}RI$I$$$dIJI%c$e hJv5Tl5 T"A(I$Z$I$I%}RI&IKI$I%) I:5%%{z{_&0_@gY\>{kZ;inUgF_?%&g`Pws^%<^_[I[?)8
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 55 26 91 8f 94 c2 fa db f4 1c de 5a aa a4 81 00 ee 98 c8 8d 9b 7f 66 e9 ae d5 99 25 83 c1 c3 fb da d4 85 5d 2a af 73 ac 75 e7 f7 40 d3 f0 0d ff 00 ab 55 25 32 1c 27 f7 a4 bb 8c 7e ec 53 e4 e5 be f7 b4 81 e9 b2 bf e6 da 3b 79 ff 00 d1 46 76 46 16 58 07 2d a6 bb 62 0d 8c d4 1f fa af fa 4d 55 a8 f4 7d 66 8b e7 d2 3a 38 83 11 3f 44 9f e4 ab 59 bd 3c 56 df 52 80 76 b4 7b d9 24 98 fd f6 ff 00 df 90 3c 20 88 eb 1f dd 21 23 88 89 4b 49 7e f4 4b 0f b2 f4 ee d9 7a 78 40 fe e5 26 59 d3 71 4e fa 43 af b4 7d 12 74 00 f8 f0 df fa 95 49 32 3c 17 bc 89 47 1d 6d 18 86 76 d8 fb 6c 75 af 32 e7 99 31 c2 82 49 27 2c 52 49 26 49 4a 25 6b e1 b0 62 61 9b 6c 10 48 f5 5e 3f f3 db 15 5e 9f 86 6e 70 ba c1 fa 26 9f 68 3f 9e 47 fd f1 a9 fa a6 56 f7 7d 9d 86 5a c3 36 1f 17 0f cd fe c7 Data Ascii: U&Zf%]*su@U%2'~S;yFvFX-bMU}f:8?DY<VRv{$< !#KI~Kzx@&YqNC}tI2<Gmvlu21I',RI&IJ%kbalH^?^np&h?GV}Z6
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 69 63 65 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 07 67 72 6f 75 70 49 44 6c 6f 6e 67 00 00 00 00 00 00 00 06 6f 72 69 67 69 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 04 3a 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 05 8c 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 Data Ascii: iceIDlonggroupIDlongoriginenumESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlong:RghtlongurlTEXTnullTEXTMsgeTEX
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 7f 7b fa aa c5 8d 6b 98 5a e7 16 83 cc 3b 69 f8 6e 55 ff 00 67 e1 bb 46 cf f6 5f 3f f9 25 00 90 26 e7 67 c3 a3 60 c4 81 50 a1 e2 77 73 5e f7 bd c5 ef 25 ce 3c 92 99 5e b3 a5 ff 00 a3 b3 5f 07 8f fb f3 7f f2 2a a5 d4 5b 49 8b 5b b4 1e 1d c8 3f 07 29 a3 38 9d 8f d1 82 50 90 dc 7d 51 a4 92 49 cb 14 92 64 92 52 92 49 32 4a 7f ff d1 ec 13 24 92 be e7 29 24 92 49 4a 49 24 c9 29 74 d2 9d ad 2e 70 6b 79 71 00 7c 4e 8b 56 ac 2c 7a 87 d1 0f 77 77 b8 4f dc df a2 d4 d9 cc 47 75 d0 81 96 ce 46 e1 e2 a7 55 ae a9 ed b2 b3 ee 6f dc 7c 5a 7f ac b6 a0 71 02 3e 01 0e dc 5c 7b 47 bd 80 1f de 6f b5 df 78 4c f7 81 d0 8d 19 3d 82 35 12 d5 67 36 9c dc 6f e4 bf 50 79 2d 70 ff 00 c8 ac 87 d4 6b 79 63 c0 0e 69 83 fe c5 6a 9b 0e 16 53 e9 79 9a 89 01 c7 e2 25 96 7f e4 d5 9c fc 5f 59 Data Ascii: {kZ;inUgF_?%&g`Pws^%<^_*[I[?)8P}QIdRI2J$)$IJI$)t.pkyq\|NV,zwwOGuFUo\|Zq>\{GoxL=5g6oPy-pkycijSy%_Y
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: f8 f0 df fa 95 49 32 3c 17 bc 89 47 1d 6d 18 86 76 d8 fb 6c 75 af 32 e7 99 31 c2 82 49 27 2c 52 49 26 49 4a 25 6b e1 b0 62 61 9b 6c 10 48 f5 5e 3f f3 db 15 5e 9f 86 6e 70 ba c1 fa 26 9f 68 3f 9e 47 fd f1 a9 fa a6 56 f7 7d 9d 86 5a c3 36 1f 17 0f cd fe c7 fd 5a 8e 7e a2 20 3f c2 65 80 e0 89 99 f2 8b 48 b9 ce 25 ce d5 ce 24 bb e2 75 4c 92 4a 46 25 24 92 64 94 ff 00 ff d5 eb 12 49 32 be e6 ae 99 24 92 52 92 49 24 94 a5 77 0b a8 7a 40 55 79 f6 0f a1 67 76 ff 00 25 df c8 54 52 42 51 12 14 57 46 46 26 c3 a9 93 d3 59 6f e9 31 c8 63 9d ae df cc 77 f2 9b 1f 43 fe a1 67 5b 4d b4 98 b5 85 9e 67 83 f0 77 d1 52 a3 2a fc 7f e6 dd ed ee c3 ab 7e ef cd fe ca bd 5f 56 a4 88 b5 8e 64 f3 b7 dc df bb e9 26 7a e3 fd 71 ff 00 39 7f ea e7 fd 43 ff 00 35 cc 9f 04 cb 58 d9 d2 6c Data Ascii: I2<Gmvlu21I',RI&IJ%kbalH^?^np&h?GV}Z6Z~ ?eH%$uLJF%$dI2$RI$wz@Uygv%TRBQWFF&Yo1cwCg[MgwR*~_Vd&zq9C5Xl
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 45 36 41 44 44 34 39 38 30 45 46 44 46 44 33 34 42 44 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 35 42 46 37 44 30 45 45 31 35 45 45 36 31 31 42 31 34 44 38 45 34 38 39 44 38 30 44 37 45 46 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 31 2b 30 32 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 30 32 2b 30 32 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 30 32 2b Data Ascii: E6ADD4980EFDFD34BD" xmpMM:InstanceID="xmp.iid:45BF7D0EE15EE611B14D8E489D80D7EF" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmp:CreateDate="2016-08-10T12:01+02:00" xmp:ModifyDate="2016-08-10T12:02:02+02:00" xmp:MetadataDate="2016-08-10T12:02:02+
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 30 32 2b 30 32 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Evt:when="2016-08-10T12:02:02+02:00" stEvt:softwareAgent="Adobe Photoshop CS4 Windows" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 c1 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 26 03 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 12 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 30 00 07 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 48 44 90 00 00 03 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 12 89 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 13 00 Data Ascii: D0&&0@HD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49760	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:59 UTC	823	OUT	GET /fileadmin/images/legacy/images/icons/icn-check-blue.svg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.sedo.com/dist/css/typo3/main.css?1724922195 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:40:59 UTC	487	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:59 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Wed, 14 Sep 2022 10:45:46 GMT ETag: W/"6321b0da-26c" X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-c2daad4a5afb5a10dcb788edf38f8d3a X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4701 Server: cloudflare CF-RAY: 8cb7b7c5d8830fa8-EWR
2024-09-30 22:40:59 UTC	627	IN	Data Raw: 32 36 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 Data Ascii: 26c<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"
2024-09-30 22:40:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	49764	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:59 UTC	795	OUT	GET /fileadmin/user_upload/Park_Domains/Parking_50-50_1420x1082_EN.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:40:59 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:59 GMT Content-Type: image/jpeg Content-Length: 192363 Connection: close Cf-Bgj: h2pri ETag: "6321aef7-2ef6b" Last-Modified: Wed, 14 Sep 2022 10:37:43 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-90e33b6e2998f08cc0321cd4ce411156 CF-Cache-Status: HIT Age: 4949 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7c5df73420b-EWR
2024-09-30 22:40:59 UTC	875	IN	Data Raw: ff d8 ff e1 10 b9 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 36 3a 30 35 3a 33 31 20 31 34 3a 32 32 3a 35 38 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 05 8c a0 03 00 04 00 00 00 01 00 00 04 3a 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2016:05:31 14:22:58:
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 89 74 4f f9 67 0b fe 37 fe fa e5 e8 78 86 e7 62 36 a6 b3 19 ec 0e 79 68 b8 fb a4 c7 a9 df f3 5b f4 14 f8 b1 46 71 32 24 e8 6b 43 4c 19 72 ca 13 11 00 6a 38 b5 17 d5 f3 cf d8 5d 67 fe e1 bf ef 67 fe 94 4b f6 17 59 ff 00 b8 6f fb d9 ff 00 a5 17 a4 6d bf 74 8a f0 4e e2 1a d7 10 06 ae 2c 77 d1 8f de 7f bb ff 00 49 a1 d4 cb 4d 0c 01 98 a4 86 ed 0e b2 37 fb 0b 9a 7f 93 ee db fc e2 93 ee f8 fb 9f b6 3f f7 ab 3e f1 93 b0 ff 00 16 5f f7 cf 9d fe c2 eb 5f f7 0e cf bd 9f fa 51 2f d8 5d 6b fe e1 d9 f7 b3 ff 00 4a 2f 42 bf 1a eb c6 f8 c7 ac d4 eb 18 f1 59 0d d5 a4 3d cf 8f cf 6f bb db b5 40 f4 dc 86 b8 31 cf a4 3a 48 8f 50 12 0b 77 ef 69 81 f9 be 93 d1 fb be 2e b2 23 eb 1f fb d5 a7 98 cb d2 20 fd 25 ff 00 7c f9 ce 56 0e 66 19 60 cb a5 d4 9b 01 2c dd 06 63 e9 46 c2 ef Data Ascii: tOg7xb6yh[Fq2$kCLrj8]ggKYomtN,wIM7?>__Q/]kJ/BY=o@1:HPwi.# %\|Vf`,cF
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: fe b1 f4 3d de ff 00 f4 2b 4b a4 7f c9 1d 43 ff 00 0c 62 ff 00 e7 ae a0 b2 a9 f4 79 b6 d7 d5 05 b1 b1 bb 89 1f 9e 67 7d 7b 5c cf cc ff 00 be 26 64 d8 ef f4 e2 ff 00 b8 f5 24 6c db 2c 79 3f f2 51 6e c9 de d1 eb 6b 23 6f 7f dc 77 bb d8 a0 7d 26 30 d8 ee 9c 43 01 da 5c eb 2d 00 3b f7 7f 93 f4 94 7f 57 88 fd a1 64 7f c5 d9 1a ff 00 d7 13 b8 62 58 77 db 9b 61 7b e4 bf 75 4e 71 24 4b 58 e9 df fb 9b 14 00 77 e3 af 01 cc da bf 97 56 1e be 28 24 8c 36 41 6c 41 b2 c3 07 f7 c3 b7 27 19 18 5c 1c 21 1a ea 2d b3 77 1a 6a e4 2b 99 4b 0b 7d 1b 7d 60 e1 24 ec 2c 2d 32 46 c7 35 db bf 37 de a0 a5 10 89 17 73 fa cf 2c 7f e9 49 2d 8c 7a ac 75 6d 23 08 e4 08 7c d8 05 9e e0 0d 7b e3 63 b6 7e 83 fe 0f fe e4 7e 93 fc 1a 2b 59 ec 73 87 4b 73 9a 1f a3 a6 e3 04 01 fa 17 7e f7 fa 45 Data Ascii: =+KCbyg}{\&d$l,y?Qnk#ow}&0C\-;WdbXwa{uNq$KXwV($6AlA'\!-wj+K}}`$,-2F57s,I-zum#\|{c~~+YsKs~E
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: c8 04 41 12 3c 0a 8f a7 5f ee b7 ee 09 52 6d ee bf e6 e5 3f f9 77 d3 3f ed e1 fd e9 7f cd ca 7f f2 ef a6 7f db c3 fb d7 0b e9 d7 fb ad fb 82 5e 9d 7f ba df b8 21 4a b7 ba ff 00 9b 94 ff 00 e5 df 4c ff 00 b7 87 f7 a5 ff 00 37 29 ff 00 cb be 99 ff 00 6f 0f ef 5c 2f a7 5f ee b7 ee 09 7a 75 fe eb 7e e0 95 2a de eb fe 6e 53 ff 00 97 7d 33 fe de 1f de 97 fc dc a7 ff 00 2e fa 67 fd bc 3f bd 70 be 9d 7f ba df b8 25 e9 d7 fb ad fb 82 54 ab 7b d1 d1 ab ae 97 e3 0e a7 83 63 72 08 27 21 96 03 55 7e 9c 3b 6e 43 e7 d8 eb a7 f4 2a 1f f3 72 9f fc bb e9 9f f6 f0 fe f5 cd f4 dc 5b 2f e8 7d 4e 9c 7a 4d b6 3e dc 78 ad 8d 92 76 bb 71 f6 ff 00 25 aa 7d 1f a0 3d d9 b1 d4 b0 1e dc 61 5b cf e9 1a 58 dd fe dd 9e e6 ed 52 fb 66 5e d8 03 f4 6a fa 7c f3 61 f7 23 0f 70 93 b4 ae bf 4b Data Ascii: A<_Rm?w?^!JL7)o\/_zu~nS}3.g?p%T{cr'!U~;nCr[/}NzM>xvq%}=a[XRf^j\|a#pK
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 40 52 00 00 00 00 00 00 00 00 00 0a 76 65 63 74 6f 72 44 61 74 61 62 6f 6f 6c 01 00 00 00 00 50 67 50 73 65 6e 75 6d 00 00 00 00 50 67 50 73 00 00 00 00 50 67 50 43 00 00 00 00 4c 65 66 74 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 54 6f 70 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 53 63 6c 20 55 6e 74 46 23 50 72 63 40 59 00 00 00 00 00 00 00 00 00 10 63 72 6f 70 57 68 65 6e 50 72 69 6e 74 69 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d Data Ascii: @RvectorDataboolPgPsenumPgPsPgPCLeftUntF#RltTop UntF#RltScl UntF#Prc@YcropWhenPrintingboolcropRectBottomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIM
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 48 6f 72 7a 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 09 76 65 72 74 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 56 65 72 74 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 0b 62 67 43 6f 6c 6f 72 54 79 70 65 65 6e 75 6d 00 00 00 11 45 53 6c 69 63 65 42 47 43 6f 6c 6f 72 54 79 70 65 00 00 00 00 4e 6f 6e 65 00 00 00 09 74 6f 70 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0a 6c 65 66 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0c 62 6f 74 74 6f 6d 4f 75 74 Data Ascii: agTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenumESliceVertAligndefaultbgColorTypeenumESliceBGColorTypeNonetopOutsetlongleftOutsetlongbottomOut
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 31 89 dc 03 e6 1e 9f ea af 4e ea ff 00 58 ae ca 69 ea b7 62 d5 88 d6 17 96 80 f7 b9 d6 9b 36 35 ad 76 c6 ed 6f a2 fd eb a2 ff 00 98 b9 dd fe b0 e5 ff 00 db 55 ff 00 e4 d7 37 f5 47 aa 59 d3 30 ba 9d d5 d4 cb fd 6b 71 29 73 2c 2e 02 0b 73 6d 9f d1 fb be 95 6b 74 7d 74 cf 26 46 05 04 97 17 f3 6f d2 3c bb 94 0e 49 fe f4 be d5 0c 70 fd c8 fd 81 b1 ff 00 31 33 ff 00 f2 ff 00 33 4e 3f 42 ce df db 4b fe 62 67 ff 00 e5 fe 66 bc fe 85 9f f9 35 1f fc 70 7a c7 fd c4 a3 ff 00 04 4d ff 00 8e 17 57 ff 00 b8 b8 ff 00 7b ff 00 bd 2f 72 7f bd 2f b5 5e de 3f dc 8f d8 c3 23 fc 5c 59 94 5a 72 7a ce 4d c5 80 86 6f a1 a6 01 fa 5b 7f 48 83 ff 00 8d 6d 1f f9 67 77 fe c3 b7 ff 00 4a 2b 3f f8 e1 75 7f fb 8b 8f f7 bf fb d2 ff 00 c7 0b ab ff 00 dc 5c 7f bd ff 00 de 9a 64 4e a4 da e0 Data Ascii: 1NXib65voU7GY0kq)s,.smkt}t&Fo<Ip133N?BKbgf5pzMW{/r/^?#\YZrzMo[HmgwJ+?u\dN
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 30 58 e6 bd a0 83 f4 a4 b9 ef 6a d2 c0 ff 00 90 ba 97 fe 13 77 fe dc e1 29 a0 49 16 7b fe ec a1 f8 4d 5d 1c 64 92 49 48 85 24 92 49 29 ff d3 e3 92 49 24 e5 aa 49 24 92 53 b1 d2 3f e4 8e a1 ff 00 86 31 7f f3 d7 50 59 d8 62 f2 7f 42 ca 9e 77 d7 fc e8 ac fb a7 f4 6d 1e b1 1e c7 ff 00 85 db ec ff 00 4a b4 7a 38 9e 93 d4 07 8e 4e 20 ff 00 c0 ba 82 cf fd 9b 97 dd 80 fc c2 64 c5 82 34 fa 8e 21 f6 24 6c db 2c ea 5b ab 9a 70 e7 dd b6 05 3b 4f b7 df ea 43 bd 3f a1 f4 37 ff 00 d6 d4 45 79 ad 71 af ec d8 4e 2d 02 c7 b2 2a d4 49 6f d2 f5 3f 3b 6f e6 2a df b3 32 7f d1 b7 ef 09 7e cc c9 e3 d3 6f de 14 5e c9 fe a7 f8 87 ff 00 56 2a 99 3b a6 e7 12 5c 29 02 77 3b 63 5e c3 00 4b dd 0c df bb 63 1a aa 0d 44 ab 3f b3 32 47 15 b4 7c c2 7f d9 d9 7f b8 3e f0 a4 88 90 f9 88 3e 43 Data Ascii: 0Xjw)I{M]dIH$I)I$I$S?1PYbBwmJz8N d4!$l,[p;OC?7EyqN-Io?;o2~o^V*;\)w;c^KcD?2G\|>>C
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 05 1f 51 11 fd 0e bf dd 93 ca a4 92 4a 06 77 ff d6 e3 92 49 24 e5 aa 49 24 92 52 92 49 24 94 a4 92 49 25 29 24 92 49 4a 49 24 92 52 4a f2 32 29 04 53 6d 95 07 41 70 63 dc d0 63 8d db 08 57 ba 57 57 b3 13 33 d6 cb b2 fb e9 d8 e6 ec de 5d a9 8d ae db 6b f6 76 59 a9 29 31 f1 f1 47 86 f7 d3 b3 1e 4e 0e 19 71 56 da fe f3 d8 b7 eb d6 1b 5a 1b f6 57 10 d8 89 aa b2 74 0c 67 fa 5f f8 3f fa 76 29 0f af 98 41 db be c7 24 19 13 4d 71 ce ef f4 ab 8c 49 4f fa df ea 30 7e ab fa ef 57 67 d6 fc 0b 1e 5e ea 6f 93 13 0d 64 68 03 07 f8 5f e4 aa 9d 4f eb 16 16 67 4f bb 16 aa ae 6d 96 86 80 5e 1a 1a 21 cd 79 9d af 73 bf 35 73 e9 23 2f bc 70 1b e1 e1 e1 3b 7e ea 23 f7 7e 31 5c 5c 5c 43 7f de b5 24 92 4a 9b 71 ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 55 00 00 00 01 01 00 00 00 Data Ascii: QJwI$I$RI$I%)$IJI$RJ2)SmApccWWW3]kvY)1GNqVZWtg_?v)A$MqIO0~Wg^odh_OgOm^!ys5s#/p;~#~1\\\C$Jq8BIM!U
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 31 34 37 39 30 33 38 32 33 32 37 45 36 31 31 39 34 31 38 43 42 37 44 36 31 35 43 43 34 32 45 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 36 2d 30 35 2d 33 31 54 31 34 3a 32 32 3a 34 32 2b 30 32 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 Data Ascii: hotoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:214790382327E6119418CB7D615CC42E" stEvt:when="2016-05-31T14:22:42+02:00" stEvt:softwareAgent="Adobe Photoshop CS6 (Windows)"/> <rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49761	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:59 UTC	787	OUT	GET /fileadmin/user_upload/Park_Domains/Parking_einrichten.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:40:59 UTC	492	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:59 GMT Content-Type: image/jpeg Content-Length: 47523 Connection: close Age: 1068 Cf-Bgj: h2pri ETag: "6321aef7-b9a3" Last-Modified: Wed, 14 Sep 2022 10:37:43 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-4487054963bf0b0976fa0262c9bfd021 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7c5db2f0f64-EWR
2024-09-30 22:40:59 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0c 6a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 07 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 62 00 00 00 1b 01 05 00 01 00 00 00 6a 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 72 00 00 00 32 01 02 00 14 00 00 00 8e 00 00 00 69 87 04 00 01 00 00 00 a4 00 00 00 d0 00 00 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 00 32 30 31 36 3a 30 38 3a 31 30 20 31 32 3a 30 32 3a 32 32 00 00 00 03 00 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 8c 05 00 00 03 a0 04 00 01 00 00 00 3a 04 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 Data Ascii: JFIFHHjExifII*bj(1r2i''Adobe Photoshop CS4 Windows2016:08:10 12:02:22:
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: e8 d8 2f ac bf e8 6e 1b a7 8e 56 d9 99 d7 95 ca 65 f5 21 45 de 93 6b f5 0b 63 79 26 39 d7 6b 74 2b 46 8c fc 87 50 c3 55 8e 15 bd a0 b6 60 90 3c 24 ab 79 71 19 51 1a 79 b4 b0 e7 8c 78 a2 75 f2 65 9b 91 4d b9 af 65 60 87 56 36 bc 91 00 b9 a6 1d 08 29 40 dc 5d f9 ce fa 4e ee 7e 25 24 ec 71 31 8d 13 75 f9 23 24 a3 29 13 11 57 f9 a9 24 92 4e 58 a4 92 4c 92 94 92 49 24 a5 24 92 49 29 49 26 4b 94 94 83 3f 28 e2 e2 be e6 ea fd 1b 58 3c 6e 77 d1 ff 00 37 e9 ae 64 97 39 c5 cf 25 ce 71 97 38 ea 49 3d ca e9 f3 70 59 99 48 a9 ef 75 7b 5d bc 39 a0 1d 60 b7 dc d7 7f 59 73 d9 78 96 e1 de 69 b6 0e 81 cd 70 e1 cd 3f 9c d9 52 61 94 4d 80 75 59 96 13 14 48 d1 02 3e 1e 5b f0 ef 6d cd 9d bc 5a cf de 67 e7 0f eb 7e e2 02 67 46 d3 f0 53 55 b1 5d 3d 76 9d 8c 8e c7 c9 25 1a 9a e6 Data Ascii: /nVe!Ekcy&9kt+FPU`<$yqQyxueMe`V6)@]N~%$q1u#$)W$NXLI$$I)I&K?(X<nw7d9%q8I=pYHu{]9`Ysxip?RaMuYH>[mZg~gFSU]=v%
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: d1 d9 fe 6b 93 1a ed 11 2c 78 93 02 43 b5 3e 01 34 02 05 09 0f b3 ff 00 42 5c 48 26 cc 4f db ff 00 a0 b6 7f 65 66 7f 23 fc e3 ff 00 91 4b f6 56 67 f2 3f ce 3f f9 15 1a da da b1 1f 6d b4 07 bc 58 1a d1 60 70 d0 84 d9 74 9d f5 ba 9a 8b 5a fa 98 e2 18 1c 44 99 25 0b 95 d5 8f 3a ff 00 d0 93 51 ab e1 3e 57 ff 00 a0 ad 7e 06 4d 34 ba c7 86 ed 6f 3b 4c 9d 74 f0 56 3a 8e b8 b8 ee 1c 69 af c5 81 51 15 da e0 0b 58 f7 03 c1 0d 71 05 5e c4 7d 79 58 c7 0e d3 0f 6f d0 3d e0 7d 12 df e5 d7 fb a9 4a c5 48 9b e1 3a d7 62 a8 d1 b8 81 5c 43 4b ee 1c f4 91 ec c1 cb ac c7 a6 5e 3b 39 9a 83 ff 00 7e 6a 9e 26 3b 9b 78 fb 46 3b dd 59 04 6a d3 00 9e 1c ef e4 a7 f1 0a bb b5 82 12 ba 22 bc d1 e1 7f 4c a7 fa e3 f2 15 3e a5 fd 31 df d5 67 e4 4f 99 86 fc 57 8b 6a 27 d2 9d 08 e5 87 c0 Data Ascii: k,xC>4B\H&Oef#KVg??mX`ptZD%:Q>W~M4o;LtV:iQXq^}yXo=}JH:b\CK^;9~j&;xF;Yj"L>1gOWj'
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 10 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 1e 00 00 00 00 00 04 00 00 00 00 38 42 49 4d 04 1a 00 00 00 00 03 59 00 00 00 06 00 00 00 00 00 00 00 00 00 00 04 3a 00 00 05 8c 00 00 00 12 00 50 00 61 00 72 00 6b 00 69 00 6e 00 67 00 5f 00 65 00 69 00 6e 00 72 00 69 00 63 00 68 00 74 00 65 00 6e 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 05 8c 00 00 04 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 00 00 00 02 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 Data Ascii: @@8BIM8BIMY:Parking_einrichten:nullboundsObjcRct1Top longLef
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ec e8 d8 2f ac bf e8 6e 1b a7 8e 56 d9 99 d7 95 ca 65 f5 21 45 de 93 6b f5 0b 63 79 26 39 d7 6b 74 2b 46 8c fc 87 50 c3 55 8e 15 bd a0 b6 60 90 3c 24 ab 79 71 19 51 1a 79 b4 b0 e7 8c 78 a2 75 f2 65 9b 91 4d b9 af 65 60 87 56 36 bc 91 00 b9 a6 1d 08 Data Ascii: Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?/nVe!Ekcy&9kt+FPU`<$yqQyxueMe`V6
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: ba 12 f3 dd b5 95 81 65 0d f5 1a 7d 4a c6 a4 f0 40 f1 70 fd df e5 2a aa ef 4d c9 73 6d 18 ee d6 b7 ce d0 7b 18 98 fe ab d5 6c aa 85 39 0f a9 bf 44 19 6f c0 8d cd 4e 89 36 63 2d 4e e0 f7 0b 64 05 09 47 41 b1 1d 8a 34 93 24 9c b1 49 24 92 4a 7f ff d3 eb 92 49 32 be e6 ae 99 24 92 52 95 ea 58 fc 8c 2a d9 43 80 b6 87 ee 20 fc 5c 5a 7f e9 2a 20 12 60 09 27 80 35 2a 5e 8d df e8 df fe 6b bf b9 09 0b ad 6a b5 5d 13 57 a5 d8 a6 fe 46 37 50 c8 da 1e 2b 68 6e a0 34 9e 4f e7 6a 10 7f 65 e6 7f 23 fc e3 ff 00 91 55 bd 2b ff 00 d1 d9 fe 6b 93 1a ed 11 2c 78 93 02 43 b5 3e 01 34 02 05 09 0f b3 ff 00 42 5c 48 26 cc 4f db ff 00 a0 b6 7f 65 66 7f 23 fc e3 ff 00 91 4b f6 56 67 f2 3f ce 3f f9 15 1a da da b1 1f 6d b4 07 bc 58 1a d1 60 70 d0 84 d9 74 9d f5 ba 9a 8b 5a fa 98 e2 Data Ascii: e}J@pMsm{l9DoN6c-NdGA4$I$JI2$RXC \Z* `'5*^kj]WF7P+hn4Oje#U+k,xC>4B\H&Oef#KVg??mX`ptZ
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 34 2e 32 2e 32 2d 63 30 36 33 20 35 33 2e 33 35 32 36 32 34 2c 20 32 30 30 38 2f 30 37 2f 33 30 2d 31 38 3a 31 32 3a 31 38 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 Data Ascii: :xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 2c 33 37 31 32 31 2c 33 37 31 32 32 2c 34 30 39 36 32 2c 34 30 39 36 33 2c 33 37 35 31 30 2c 34 30 39 36 34 2c 33 36 38 36 37 2c 33 36 38 36 38 2c 33 33 34 33 34 2c 33 33 34 33 37 2c 33 34 38 35 30 2c 33 34 38 35 32 2c 33 34 38 35 35 2c 33 34 38 35 36 2c 33 37 33 37 37 2c 33 37 33 37 38 2c 33 37 33 37 39 2c 33 37 33 38 30 2c 33 37 33 38 31 2c 33 37 33 38 32 2c 33 37 33 38 33 2c 33 37 33 38 34 2c 33 37 33 38 35 2c 33 37 33 38 36 2c 33 37 33 39 36 2c 34 31 34 38 33 2c 34 31 34 38 34 2c 34 31 34 38 36 2c 34 31 34 38 37 2c 34 31 34 38 38 2c 34 31 34 39 32 2c 34 31 34 39 33 2c 34 31 34 39 35 2c 34 31 37 32 38 2c 34 31 37 32 39 2c 34 31 37 33 30 2c 34 31 39 38 35 2c 34 31 39 38 36 2c 34 31 39 38 37 2c 34 31 39 38 38 2c 34 31 39 38 39 2c 34 31 39 39 30 2c 34 31 Data Ascii: ,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	49763	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:59 UTC	705	OUT	GET /dist/js/typo3/app.min.js?1724922195 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:40:59 UTC	521	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:59 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 29 Aug 2024 09:03:15 GMT X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-4e30bc8413ca8e1d6162b53846b369fd ETag: W/"66d03953-1f646" X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1983 Server: cloudflare CF-RAY: 8cb7b7c608bc4380-EWR
2024-09-30 22:40:59 UTC	848	IN	Data Raw: 37 64 39 35 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: 7d95/! For license information please see app.min.js.LICENSE.txt /!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 6e 2e 64 28 74 2c 22 61 22 2c 74 29 2c 74 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 6e 2e 70 3d 22 2f 64 69 73 74 2f 22 2c 6e 28 6e 2e 73 3d 39 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 65 78 74 65 6e 64 3d 73 2c 74 2e 69 6e 64 65 78 4f 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 Data Ascii: ult}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/dist/",n(n.s=9)}([function(e,t,n){"use strict";t.__esModule=!0,t.extend=s,t.indexOf=function(e,t){for(var n=0,r=e.length;n<r;n++)if(
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 72 69 70 74 69 6f 6e 22 2c 22 66 69 6c 65 4e 61 6d 65 22 2c 22 6c 69 6e 65 4e 75 6d 62 65 72 22 2c 22 65 6e 64 4c 69 6e 65 4e 75 6d 62 65 72 22 2c 22 6d 65 73 73 61 67 65 22 2c 22 6e 61 6d 65 22 2c 22 6e 75 6d 62 65 72 22 2c 22 73 74 61 63 6b 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 6c 6f 63 2c 69 3d 76 6f 69 64 20 30 2c 61 3d 76 6f 69 64 20 30 2c 73 3d 76 6f 69 64 20 30 2c 75 3d 76 6f 69 64 20 30 3b 6e 26 26 28 69 3d 6e 2e 73 74 61 72 74 2e 6c 69 6e 65 2c 61 3d 6e 2e 65 6e 64 2e 6c 69 6e 65 2c 73 3d 6e 2e 73 74 61 72 74 2e 63 6f 6c 75 6d 6e 2c 75 3d 6e 2e 65 6e 64 2e 63 6f 6c 75 6d 6e 2c 65 2b 3d 22 20 2d 20 22 2b 69 2b 22 3a 22 2b 73 29 3b 66 6f 72 28 76 61 72 20 6c 3d 45 72 72 6f 72 2e 70 72 6f 74 6f 74 Data Ascii: ription","fileName","lineNumber","endLineNumber","message","name","number","stack"];function o(e,t){var n=t&&t.loc,i=void 0,a=void 0,s=void 0,u=void 0;n&&(i=n.start.line,a=n.end.line,s=n.start.column,u=n.end.column,e+=" - "+i+":"+s);for(var l=Error.protot
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 5f 43 48 41 4e 47 45 53 3d 7b 31 3a 22 3c 3d 20 31 2e 30 2e 72 63 2e 32 22 2c 32 3a 22 3d 3d 20 31 2e 30 2e 30 2d 72 63 2e 33 22 2c 33 3a 22 3d 3d 20 31 2e 30 2e 30 2d 72 63 2e 34 22 2c 34 3a 22 3d 3d 20 31 2e 78 2e 78 22 2c 35 3a 22 3d 3d 20 32 2e 30 2e 30 2d 61 6c 70 68 61 2e 78 22 2c 36 3a 22 3e 3d 20 32 2e 30 2e 30 2d 62 65 74 61 2e 31 22 2c 37 3a 22 3e 3d 20 34 2e 30 2e 30 20 3c 34 2e 33 2e 30 22 2c 38 3a 22 3e 3d 20 34 2e 33 2e 30 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 68 65 6c 70 65 72 73 3d 65 7c 7c 7b 7d 2c 74 68 69 73 2e 70 61 72 74 69 61 6c 73 3d 74 7c 7c 7b 7d 2c 74 68 69 73 2e 64 65 63 6f 72 61 74 6f 72 73 3d 6e 7c 7c 7b 7d 2c 61 2e 72 65 67 69 73 74 65 72 44 65 66 61 75 6c 74 48 65 6c 70 65 72 73 28 74 Data Ascii: _CHANGES={1:"<= 1.0.rc.2",2:"== 1.0.0-rc.3",3:"== 1.0.0-rc.4",4:"== 1.x.x",5:"== 2.0.0-alpha.x",6:">= 2.0.0-beta.1",7:">= 4.0.0 <4.3.0",8:">= 4.3.0"};function c(e,t,n){this.helpers=e\|\|{},this.partials=t\|\|{},this.decorators=n\|\|{},a.registerDefaultHelpers(t
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 65 3d 21 30 2c 74 2e 72 65 67 69 73 74 65 72 44 65 66 61 75 6c 74 48 65 6c 70 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 2e 64 65 66 61 75 6c 74 28 65 29 2c 69 2e 64 65 66 61 75 6c 74 28 65 29 2c 61 2e 64 65 66 61 75 6c 74 28 65 29 2c 73 2e 64 65 66 61 75 6c 74 28 65 29 2c 75 2e 64 65 66 61 75 6c 74 28 65 29 2c 6c 2e 64 65 66 61 75 6c 74 28 65 29 2c 63 2e 64 65 66 61 75 6c 74 28 65 29 7d 2c 74 2e 6d 6f 76 65 48 65 6c 70 65 72 54 6f 48 6f 6f 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 68 65 6c 70 65 72 73 5b 74 5d 26 26 28 65 2e 68 6f 6f 6b 73 5b 74 5d 3d 65 2e 68 65 6c 70 65 72 73 5b 74 5d 2c 6e 7c 7c 64 65 6c 65 74 65 20 65 2e 68 65 6c 70 65 72 73 5b 74 5d 29 7d 3b 76 61 72 20 6f 3d 72 28 6e 28 31 37 29 29 2c 69 3d 72 28 6e 28 Data Ascii: e=!0,t.registerDefaultHelpers=function(e){o.default(e),i.default(e),a.default(e),s.default(e),u.default(e),l.default(e),c.default(e)},t.moveHelperToHooks=function(e,t,n){e.helpers[t]&&(e.hooks[t]=e.helpers[t],n\|\|delete e.helpers[t])};var o=r(n(17)),i=r(n(
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 6f 66 20 65 3f 74 2e 6d 65 74 68 6f 64 73 3a 74 2e 70 72 6f 70 65 72 74 69 65 73 2c 6e 29 7d 2c 74 2e 72 65 73 65 74 4c 6f 67 67 65 64 50 72 6f 70 65 72 74 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 65 6c 65 74 65 20 73 5b 65 5d 7d 29 29 7d 3b 76 61 72 20 72 2c 6f 3d 6e 28 32 36 29 2c 69 3d 6e 28 37 29 2c 61 3d 28 72 3d 69 29 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 72 3a 7b 64 65 66 61 75 6c 74 3a 72 7d 2c 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 2e 77 68 69 74 65 6c 69 73 74 5b 74 5d 3f 21 30 3d 3d 3d 65 2e 77 68 69 Data Ascii: of e?t.methods:t.properties,n)},t.resetLoggedProperties=function(){Object.keys(s).forEach((function(e){delete s[e]}))};var r,o=n(26),i=n(7),a=(r=i)&&r.__esModule?r:{default:r},s=Object.create(null);function u(e,t){return void 0!==e.whitelist[t]?!0===e.whi
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 65 72 73 46 72 6f 6d 55 72 6c 28 74 68 69 73 2e 24 72 73 73 42 6f 78 44 6f 6d 45 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 64 61 74 61 2d 73 6f 75 72 63 65 22 29 29 3b 74 68 69 73 2e 72 61 6e 64 6f 6d 69 7a 65 3d 21 30 3d 3d 3d 74 2e 72 61 6e 64 6f 6d 69 7a 65 52 65 66 72 65 73 68 3b 76 61 72 20 75 3d 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 24 72 73 73 42 6f 78 44 6f 6d 45 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 64 61 74 61 2d 63 6f 75 6e 74 22 29 2c 31 30 29 3b 21 69 73 4e 61 4e 28 75 29 26 26 75 3e 30 26 26 28 74 68 69 73 2e 6d 61 78 49 74 65 6d 43 6f 75 6e 74 3d 75 29 3b 76 61 72 20 6c 3d 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 24 72 73 73 42 6f 78 44 6f 6d 45 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 64 61 74 61 2d 74 79 70 65 22 29 2c 31 30 29 3b 69 73 Data Ascii: ersFromUrl(this.$rssBoxDomElement.attr("data-source"));this.randomize=!0===t.randomizeRefresh;var u=parseInt(this.$rssBoxDomElement.attr("data-count"),10);!isNaN(u)&&u>0&&(this.maxItemCount=u);var l=parseInt(this.$rssBoxDomElement.attr("data-type"),10);is
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 3b 72 3d 5b 6e 2c 74 2c 6e 28 33 29 2c 6e 28 31 33 29 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6e 28 31 35 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 68 69 73 2e 24 72 73 73 42 6f 78 44 6f 6d 45 6c 65 6d 65 6e 74 3d 65 2c 74 68 69 73 2e 74 79 70 65 3d 74 2c 74 68 69 73 2e 6c 61 6e 67 75 61 67 65 3d 72 2e 63 6f 6e 76 65 72 74 4c 61 6e 67 75 61 67 65 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 6c 61 6e 67 5d 22 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 29 2c 74 Data Ascii: nction(e,t,n){var r,o;r=[n,t,n(3),n(13)],void 0===(o=function(e,t,r,o){"use strict";var i=n(15);return function(){function e(e,t){this.$rssBoxDomElement=e,this.type=t,this.language=r.convertLanguage(document.querySelector("[lang]").getAttribute("lang")),t
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 73 2e 6f 62 73 65 72 76 65 72 5b 65 5d 5b 74 5d 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 68 69 73 2e 6f 62 73 65 72 76 65 72 5b 65 5d 5b 74 5d 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 74 68 69 73 2e 6f 62 73 65 72 76 65 72 5b 65 5d 5b 74 5d 5b 72 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 41 70 70 6c 69 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6f 3b 74 68 69 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 73 5b 65 5d 26 26 74 68 69 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 73 5b 65 5d 5b 74 5d 26 26 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 68 69 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 73 5b 65 5d 5b 74 5d 29 3b 74 72 79 7b 6f 3d 4a 53 4f 4e 2e 70 61 Data Ascii: s.observer[e][t].length>0)for(var r=0;r<this.observer[e][t].length;r++)this.observer[e][t][r].call(this,n)},e.prototype.loadApplication=function(e,t,r){var o;this.applications[e]&&this.applications[e][t]&&r.call(this,this.applications[e][t]);try{o=JSON.pa
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 69 6f 6e 73 5b 65 5d 2e 72 65 70 6c 61 63 65 28 2f 23 28 2e 2a 3f 29 23 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 74 26 26 74 5b 72 5d 3f 74 5b 72 5d 3a 65 7d 29 29 3a 65 7d 2c 65 7d 28 29 7d 2e 61 70 70 6c 79 28 74 2c 5b 6e 2c 74 5d 29 29 7c 7c 28 65 2e 65 78 70 6f 72 74 73 3d 72 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 28 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 2e 64 65 66 61 75 6c 74 3a 65 29 7d 65 2e 65 78 70 6f 72 74 73 3d 28 72 2e 64 65 66 61 75 6c 74 7c 7c 72 29 2e 74 65 6d 70 6c 61 74 65 28 7b 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 69 2c 61 2c 73 2c 75 29 7b 76 Data Ascii: ranslations[e].replace(/#(.*?)#/g,(function(n,r){return t&&t[r]?t[r]:e})):e},e}()}.apply(t,[n,t]))\|\|(e.exports=r)},function(e,t,n){var r=n(4);function o(e){return e&&(e.__esModule?e.default:e)}e.exports=(r.default\|\|r).template({1:function(e,t,r,i,a,s,u){v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49762	104.16.141.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:59 UTC	833	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/us/park-domains/?tracked=&partnerid=&language=us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8
2024-09-30 22:40:59 UTC	469	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:59 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Thu, 26 Sep 2024 09:13:42 GMT ETag: "66f525c6-4d7" Strict-Transport-Security: max-age=2592000 Server: cloudflare CF-RAY: 8cb7b7c60eba4288-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Wed, 02 Oct 2024 22:40:59 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-09-30 22:40:59 UTC	900	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-09-30 22:40:59 UTC	339	IN	Data Raw: 2c 6e 3d 30 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 72 79 7b 69 28 72 5b 6e 5d 2e 63 6f 6e 74 65 6e 74 29 7d 63 61 74 63 68 28 63 29 7b 65 28 63 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 72 79 7b 63 28 74 29 2c 6f 28 74 29 2c 61 28 74 29 7d 63 61 74 63 68 28 72 29 7b 65 28 72 29 7d 7d 76 61 72 20 6c 3d 22 2f 63 64 6e 2d 63 67 69 2f 6c 2f 65 6d 61 69 6c 2d 70 72 6f 74 65 63 74 69 6f 6e 23 22 2c 75 3d 22 2e 5f 5f 63 66 5f 65 6d 61 69 6c 5f 5f 22 2c 66 3d 22 64 61 74 61 2d 63 66 65 6d 61 69 6c 22 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 28 64 6f 63 75 6d 65 6e 74 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 Data Ascii: ,n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r)}}var l="/cdn-cgi/l/email-protection#",u=".__cf_email__",f="data-cfemail",d=document.createElement("div");i(document),function(){var e=document.currentScr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49766	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:59 UTC	576	OUT	GET /fileadmin_git/resources/public/JavaScripts/jquery-3.7.1.min.js?1724921946 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:40:59 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:40:59 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 29 Aug 2024 08:59:06 GMT X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-f790b2e3dfd363f7e95a62dc424349da ETag: W/"66d0385a-155ec" X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 113 Server: cloudflare CF-RAY: 8cb7b7c65f004402-EWR
2024-09-30 22:40:59 UTC	849	IN	Data Raw: 37 64 39 36 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7d96/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 7c 43 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 75 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6e 5b 69 2e 63 61 6c 6c 28 65 29 5d 7c 7c Data Ascii: \|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[i.call(e)]\|\|
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 73 2c 73 6f 72 74 3a 6f 65 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 6f 65 2e 73 70 6c 69 63 65 7d 2c 63 65 2e 65 78 74 65 6e 64 3d 63 65 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 76 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 Data Ascii: bject\|\|this.constructor()},push:s,sort:oe.sort,splice:oe.splice},ce.extend=ce.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|v(a)\|\|(a={}),s===u&
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 29 3a 73 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 73 65 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 69 73 58 4d 4c 44 6f 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 6c 2e 74 65 73 74 28 74 7c 7c 6e 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 48 54 4d 4c 22 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e Data Ascii: ):s.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:se.call(t,e,n)},isXMLDoc:function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|\|e).documentElement;return!l.test(t\|\|n&&n.nodeName\|\|"HTML")},merge:function(e,t){for(var n=+t.length,r=0,i=e.len
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 6b 3d 6d 65 2c 53 3d 63 65 2e 65 78 70 61 6e 64 6f 2c 45 3d 30 2c 6e 3d 30 2c 73 3d 57 28 29 2c 63 3d 57 28 29 2c 75 3d 57 28 29 2c 68 3d 57 28 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 26 26 28 61 3d 21 30 29 2c 30 7d 2c 66 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 74 3d 22 28 3f 3a 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 67 65 2b 22 3f 7c 5c 5c 5c 5c Data Ascii: k=me,S=ce.expando,E=0,n=0,s=W(),c=W(),u=W(),h=W(),l=function(e,t){return e===t&&(a=!0),0},f="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",t="(?:\\\\[\\da-fA-F]{1,6}"+ge+"?\|\\\\
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 56 28 29 7d 2c 52 3d 4a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 66 65 28 65 2c 22 66 69 65 6c 64 73 65 74 22 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 6b 2e 61 70 70 6c 79 28 6f 65 3d 61 65 2e 63 61 6c 6c 28 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 79 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 6f Data Ascii: return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},M=function(){V()},R=J(function(e){return!0===e.disabled&&fe(e,"fieldset")},{dir:"parentNode",next:"legend"});try{k.apply(oe=ae.call(ye.childNodes),ye.childNodes),o
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 76 61 72 20 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function F(e){return e[S]=!0,e}function $(e){var t=T.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function B(t){return
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 22 29 7d 29 2c 6c 65 2e 63 73 73 48 61 73 3d 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 3a 68 61 73 28 2a 2c 3a 6a 71 66 61 6b 65 29 22 29 2c 21 31 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 30 7d 7d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3f 28 62 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 4f 2c 50 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 74 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 Data Ascii: ")}),le.cssHas=$(function(){try{return T.querySelector(":has(*,:jqfake)"),!1}catch(e){return!0}}),le.getById?(b.filter.ID=function(e){var t=e.replace(O,P);return function(e){return e.getAttribute("id")===t}},b.find.ID=function(e,t){if("undefined"!=typeof
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 28 74 3d 54 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 64 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 Data Ascii: erySelectorAll(":checked").length\|\|d.push(":checked"),(t=T.createElement("input")).setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),r.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&d.push(":enabled",":disable
2024-09-30 22:40:59 UTC	1369	IN	Data Raw: 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 7d 2c 49 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 64 20 65 78 70 72 65 73 73 69 6f 6e 3a 20 22 2b 65 29 7d 2c 63 65 2e 75 6e 69 71 75 65 53 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 5b 5d 2c 72 3d 30 2c 69 3d 30 3b 69 66 28 61 3d 21 6c 65 2e 73 6f 72 74 53 74 61 62 6c 65 2c 6f 3d 21 6c 65 2e 73 6f 72 74 53 74 61 62 6c 65 26 26 61 65 2e 63 61 6c 6c 28 65 2c 30 29 2c 64 65 2e 63 61 6c 6c 28 65 2c 6c 29 2c 61 29 7b 77 68 69 6c 65 28 74 3d 65 5b 69 2b 2b 5d 29 74 3d 3d 3d 65 5b 69 5d 26 26 Data Ascii: urn void 0!==r?r:e.getAttribute(t)},I.error=function(e){throw new Error("Syntax error, unrecognized expression: "+e)},ce.uniqueSort=function(e){var t,n=[],r=0,i=0;if(a=!le.sortStable,o=!le.sortStable&&ae.call(e,0),de.call(e,l),a){while(t=e[i++])t===e[i]&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49767	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:40:59 UTC	735	OUT	GET /c7r/assets/static/dist/js/deprecated/typescript/static/app.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:00 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:00 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 20 Aug 2024 09:50:15 GMT ETag: W/"66c466d7-345f7" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-decade9f0f0d519e095663308dd70ef8 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 114 Server: cloudflare CF-RAY: 8cb7b7c77b281a28-EWR
2024-09-30 22:41:00 UTC	849	IN	Data Raw: 37 64 39 37 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 31 34 32 34 3a 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 76 61 6c 28 22 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 72 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 29 3b 5c 6e 2f 2a 20 68 61 72 6d 6f 6e 79 20 65 78 70 6f 72 74 20 2a 2f 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 20 7b 5c 6e 2f 2a 20 68 61 72 6d 6f 6e 79 20 65 78 70 Data Ascii: 7d97(()=>{var __webpack_modules__={1424:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{"use strict";eval("__webpack_require__.r(__webpack_exports__);\n/* harmony export / __webpack_require__.d(__webpack_exports__, {\n/ harmony exp
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 73 5f 56 69 65 77 50 6f 72 74 48 65 6c 70 65 72 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 31 5f 5f 29 3b 5c 6e 2f 2a 20 68 61 72 6d 6f 6e 79 20 69 6d 70 6f 72 74 20 2a 2f 20 76 61 72 20 5f 68 65 6c 70 65 72 73 5f 44 65 62 6f 75 6e 63 65 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 32 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 36 36 35 32 29 3b 5c 6e 2f 2a 20 68 61 72 6d 6f 6e 79 20 69 6d 70 6f 72 74 20 2a 2f 20 76 61 72 20 5f 68 65 6c 70 65 72 73 5f 44 65 62 6f 75 6e 63 65 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 32 5f 5f 5f 64 65 66 61 75 6c 74 20 3d 20 2f 2a 23 5f 5f 50 55 52 45 5f 5f 2a 2f 5f 5f 77 65 62 70 61 63 6b Data Ascii: s_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1__);\n/* harmony import / var _helpers_Debounce__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(6652);\n/ harmony import / var _helpers_Debounce__WEBPACK_IMPORTED_MODULE_2___default = /#__PURE__*/__webpack
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 65 73 20 47 54 4d 2d 54 72 61 63 6b 69 6e 67 5c 6e 20 20 20 2a 2f 5c 6e 20 20 69 6e 69 74 28 29 20 7b 5c 6e 20 20 20 20 63 6f 6e 73 74 20 24 64 61 74 61 47 54 4d 4f 6e 4c 6f 61 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 67 74 6d 2d 6f 6e 6c 6f 61 64 5d 27 29 3b 5c 6e 5c 6e 20 20 20 20 2f 2a 2a 5c 6e 20 20 20 20 20 2a 20 61 64 64 69 74 69 6f 6e 61 6c 20 70 75 73 68 65 73 20 62 61 73 65 64 20 6f 6e 20 70 61 67 65 54 79 70 65 5c 6e 20 20 20 20 20 2a 2f 5c 6e 20 20 20 20 69 66 20 28 74 68 69 73 2e 70 75 73 68 45 76 65 6e 74 50 61 67 65 54 79 70 65 28 29 29 20 7b 5c 6e 20 20 20 20 20 20 73 77 69 74 63 68 20 28 74 68 69 73 2e 70 61 67 65 54 79 70 65 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 63 61 Data Ascii: es GTM-Tracking\n /\n init() {\n const $dataGTMOnLoad = document.querySelectorAll('[data-gtm-onload]');\n\n /\n additional pushes based on pageType\n */\n if (this.pushEventPageType()) {\n switch (this.pageType) {\n ca
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 61 67 65 29 20 7b 5c 6e 20 20 20 20 20 20 74 68 69 73 2e 70 75 73 68 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 44 61 74 61 4c 61 79 65 72 28 29 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2f 2a 2a 5c 6e 20 20 20 20 20 2a 20 54 68 69 73 20 69 73 20 61 6e 20 65 78 70 6c 69 63 69 74 20 63 61 6c 6c 20 66 6f 72 20 74 68 65 20 68 6f 6d 65 20 70 61 67 65 2e 5c 6e 20 20 20 20 20 2a 20 69 74 20 77 61 73 20 6e 6f 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 61 64 64 20 6d 75 6c 74 69 70 6c 65 20 64 61 74 61 2d 61 74 74 72 69 62 75 74 65 73 20 61 6e 64 20 70 61 73 73 20 6f 62 6a 65 63 74 2d 6c 69 6b 65 20 73 74 72 69 6e 67 73 20 61 73 20 76 61 6c 75 65 2e 5c 6e 20 20 20 20 20 2a 20 40 73 65 65 20 63 6f 6e 74 65 6e 74 2d 74 65 61 73 65 72 2d 6d 75 6c 74 69 67 72 69 64 2e Data Ascii: age) {\n this.pushConfirmationDataLayer();\n }\n\n /*\n This is an explicit call for the home page.\n * it was not possible to add multiple data-attributes and pass object-like strings as value.\n * @see content-teaser-multigrid.
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 20 69 64 3a 20 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 69 74 6d 5f 63 61 6d 70 61 69 67 6e 27 29 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 3a 20 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 69 74 6d 5f 63 6f 6e 74 65 6e 74 27 29 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 72 65 61 74 69 76 65 3a 20 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 69 74 6d 5f 73 6f 75 72 63 65 27 29 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 74 61 72 67 65 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 67 74 6d 2d 70 72 6f 6d 6f 74 69 6f 6e 27 29 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: id: searchParams.get('itm_campaign'),\n name: searchParams.get('itm_content'),\n creative: searchParams.get('itm_source'),\n position: target.getAttribute('data-gtm-promotion'),\n }],\n
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 6f 62 6a 65 63 74 20 66 6f 72 20 70 72 6f 64 75 63 74 73 20 74 72 61 63 6b 65 64 20 69 66 20 74 68 65 79 20 77 68 65 72 65 20 69 6e 20 76 69 65 77 70 6f 72 74 5c 6e 20 20 20 2a 20 6f 6e 20 73 65 61 72 63 68 20 72 65 73 75 6c 74 20 70 61 67 65 2e 5c 6e 20 20 20 2a 2f 5c 6e 20 20 70 75 73 68 53 65 61 72 63 68 52 65 73 75 6c 74 56 69 65 77 50 6f 72 74 45 76 65 6e 74 73 28 29 20 7b 5c 6e 20 20 20 20 63 6f 6e 73 74 20 24 69 6e 56 69 65 77 50 6f 72 74 45 6c 65 6d 65 6e 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 67 74 6d 2d 69 6e 2d 76 69 65 77 70 6f 72 74 5d 3a 6e 6f 74 28 2e 67 74 6d 2d 76 69 73 69 74 65 64 29 27 29 3b 5c 6e 20 20 20 20 63 6f 6e 73 74 20 69 6d 70 72 65 73 73 69 6f 6e 73 41 Data Ascii: object for products tracked if they where in viewport\n * on search result page.\n */\n pushSearchResultViewPortEvents() {\n const $inViewPortElements = document.querySelectorAll('[data-gtm-in-viewport]:not(.gtm-visited)');\n const impressionsA
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 68 65 72 20 69 6e 70 75 74 20 66 69 65 6c 64 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 68 69 64 64 65 6e 20 69 6e 70 75 74 2d 65 6c 65 6d 65 6e 74 29 5c 6e 20 20 20 2a 20 54 68 69 73 20 6d 65 74 68 6f 64 20 73 65 61 72 63 68 65 73 20 66 6f 72 20 6f 62 6a 65 63 74 2d 70 72 6f 70 65 72 74 79 20 77 69 74 68 20 76 61 6c 75 65 3d 5c 22 67 74 6d 52 65 70 6c 61 63 65 7b 3c 73 65 6c 65 63 74 6f 72 3e 7d 5c 22 5c 6e 20 20 20 2a 20 61 6e 64 20 72 65 70 6c 61 63 65 73 20 69 74 20 77 69 74 68 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 3c 73 65 6c 65 63 74 6f 72 3e 5c 6e 20 20 20 2a 5c 6e 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 64 61 74 61 20 2d 20 69 6e 70 75 74 20 64 61 74 61 2d 6f 62 6a 65 63 74 5c 6e 20 20 20 2a 20 40 72 65 74 75 Data Ascii: her input field (for example hidden input-element)\n * This method searches for object-property with value=\"gtmReplace{<selector>}\"\n * and replaces it with the value of the <selector>\n \n @param {Object} data - input data-object\n * @retu
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 5d 20 66 6f 72 6d 5c 6e 20 20 20 2a 20 40 6c 69 73 74 65 6e 73 20 74 6f 20 63 75 73 74 6f 6d 20 65 76 65 6e 74 20 5c 22 63 75 73 74 6f 6d 47 54 4d 53 75 62 6d 69 74 5c 22 5c 6e 20 20 20 2a 20 40 6c 69 73 74 65 6e 73 20 74 6f 20 68 61 73 68 63 68 61 6e 67 65 5c 6e 20 20 20 2a 20 7b 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 64 65 2f 64 6f 63 73 2f 57 65 62 2f 41 50 49 2f 57 69 6e 64 6f 77 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 2f 6f 6e 68 61 73 68 63 68 61 6e 67 65 20 7c 20 6f 6e 68 61 73 68 63 68 61 6e 67 65 7d 5c 6e 20 20 20 2a 2f 5c 6e 20 20 62 69 6e 64 45 76 65 6e 74 73 28 29 20 7b 5c 6e 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: ] form\n * @listens to custom event \"customGTMSubmit\"\n * @listens to hashchange\n * {@link https://developer.mozilla.org/de/docs/Web/API/WindowEventHandlers/onhashchange \| onhashchange}\n */\n bindEvents() {\n document.body.addEventListener
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 2e 67 74 6d 2d 76 69 73 69 74 65 64 29 27 29 3b 5c 6e 20 20 20 20 20 20 20 20 69 66 20 28 67 74 6d 50 72 6f 6d 6f 74 69 6f 6e 65 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 70 75 73 68 50 72 6f 6d 6f 74 69 6f 6e 45 76 65 6e 74 73 28 65 76 65 6e 74 29 3b 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 7d 29 3b 5c 6e 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 5c 6e 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 67 74 6d 50 72 6f 6d 6f 74 69 6f 6e 65 6c 65 6d 65 6e 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 67 74 6d 2d Data Ascii: .gtm-visited)');\n if (gtmPromotionelements.length) {\n this.pushPromotionEvents(event);\n }\n });\n window.addEventListener('click', (event) => {\n const gtmPromotionelements = document.querySelectorAll('[data-gtm-
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 73 63 72 6f 6c 6c 27 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 5c 6e 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 67 74 6d 56 69 65 77 50 6f 72 74 65 6c 65 6d 65 6e 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 67 74 6d 2d 70 72 6f 6d 6f 74 69 6f 6e 5d 3a 6e 6f 74 28 2e 67 74 6d 2d 76 69 73 69 74 65 64 29 27 29 3b 5c 6e 20 20 20 20 20 20 20 20 69 66 20 28 67 74 6d 56 69 65 77 50 6f 72 74 65 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 70 75 73 68 50 72 6f 6d 6f 74 69 6f 6e 45 76 65 6e 74 73 28 65 76 65 6e 74 29 3b 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e Data Ascii: window.addEventListener('scroll', (event) => {\n const gtmViewPortelements = document.querySelectorAll('[data-gtm-promotion]:not(.gtm-visited)');\n if (gtmViewPortelements.length) {\n this.pushPromotionEvents(event);\n }\n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	49765	52.222.236.60	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:00 UTC	552	OUT	GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:00 UTC	665	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 7514 Connection: close Date: Mon, 30 Sep 2024 22:41:01 GMT Last-Modified: Mon, 16 Sep 2024 09:19:53 GMT ETag: "149f8b397fe711244ef204823190cb86" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 89e34e3fd814f1393ef77867b93dd12e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: K2Na6MHb1T89S_WXtFcEz88r3CYDRMPZOgsxl1yJoT5lBJAAAoWiKA== X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-09-30 22:41:00 UTC	7514	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 3c 4d 6f e3 48 76 f7 fd 15 32 17 d1 90 71 89 96 fc 6d aa 09 6f b7 db b3 e3 5d bb dd b0 bb 67 76 d7 31 1a 94 58 b2 ab 9b 22 b5 64 d1 6e 8f ac c3 62 6f b9 24 40 2e 01 72 0b 10 2c 02 04 7b 09 b2 97 04 c9 61 7e ca 24 b9 e6 2f e4 bd fa 62 51 a2 6c f7 cc 2c 90 04 69 18 2d b2 3e 5f bd 7a df f5 8a ff f5 cf ff b6 32 2a d3 21 67 59 da 4a dd 82 64 24 f7 a6 a6 24 72 39 a1 de 94 8d dc 95 ec 82 5f ca a7 42 3c dd 44 79 8b 85 8e 6e ea 84 21 bf 9b d0 6c d4 ca e9 af 4b 96 d3 76 5b 3d f4 b1 0f bc 32 2f a7 bc cc d3 16 83 41 57 ba 1e 96 27 ba 2c 51 65 fc 3a cf 6e 5d 1a a6 f4 b6 75 98 e7 59 ee 3a 07 51 9a 66 bc 35 62 69 dc 1a 67 71 99 d0 d6 67 ce 2a 5f 75 3e 73 3c cf 1f 66 31 0d 9d 93 d3 97 6f 8f 0f df bd 3a 7d f3 ee f3 d3 b7 af 5e 3a 84 ce 58 Data Ascii: <MoHv2qmo]gv1X"dnbo$@.r,{a~$/bQl,i->_z2!gYJd$$r9_B<Dyn!lKv[=2/AW',Qe:n]uY:Qf5bigqg_u>s<f1o:}^:X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	49768	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:00 UTC	546	OUT	GET /fileadmin/user_upload/park-domains_bild.png HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:00 UTC	478	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:00 GMT Content-Type: image/png Content-Length: 537573 Connection: close Last-Modified: Mon, 29 Apr 2024 12:21:40 GMT ETag: "662f90d4-833e5" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-9b84c395abcc4c73ae00dac8eb478e7c X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 6324 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7c7bbb215c3-EWR
2024-09-30 22:41:00 UTC	891	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 f0 00 00 01 f4 08 06 00 00 00 72 e4 0c 72 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 08 33 7a 49 44 41 54 78 01 ec fd 49 af 6d 4b 92 26 86 99 fb da a7 ef ee 7b 2f 22 23 b2 8a 59 44 55 b1 8a c9 6a 12 20 04 15 41 40 84 04 8e 05 70 20 fd 06 fd 13 cd f4 03 38 d1 0f 10 c0 a9 40 0d 34 12 20 80 92 08 65 15 ab 90 ca cc ca ca 2e e2 bd 77 fb e6 dc d3 9f bd 96 6b 59 6f ee 7b df c8 cb d9 1d d8 f7 e2 c6 39 67 ef d5 b8 9b 9b 77 9f 99 9b 95 7f f0 9f ff ef 1b 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 f8 96 d0 2a 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 f8 e6 90 04 7e 22 Data Ascii: PNGIHDRrrpHYssRGBgAMAa3zIDATxImK&{/"#YDUj A@p 8@4 e.wkYo{9gw$D"H$D"H$D"*$D"H$D"H$D"~"
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 3f 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 6f 10 49 e0 27 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 f1 0d 22 09 fc 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 be 41 24 81 9f 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 c4 37 88 24 f0 13 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 f8 06 91 04 7e 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 df 20 92 c0 4f 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 e2 1b 44 12 f8 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 7c 83 48 02 3f 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 6f 10 49 e0 27 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 f1 0d 22 09 fc 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 Data Ascii: ?H$D"H$D"H$oI'D"H$D"H$D""D"H$D"H$D"H$A$H$D"H$D"H$7$D"H$D"H$D"~"H$D"H$D"H$ O$D"H$D"H$DDD"H$D"H$D"H\|H?H$D"H$D"H$oI'D"H$D"H$D""D"H$D"H$D"H
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 5a 5b 4c 0e 5a 26 6b 8b c6 05 18 c7 e8 16 06 99 12 fe e6 f1 18 ba 49 b5 68 1f d6 37 d3 02 81 e7 37 c4 bc ea 5c 9d 64 ae 6f 3e 6e c5 36 fc d2 5c d5 a4 bf ab 6c 62 1d 54 66 fb c6 23 fb 9b d6 2f 45 aa c9 eb 11 d5 cd 5e 92 10 d6 51 a1 af 4b 81 f5 da 12 be 5f a8 3e 8d fa 56 53 bd 92 6b e7 f5 f3 cd fa f9 76 9d 8b 1e 1e 1f e1 fe f1 61 ed 7f cf 70 b0 d9 c0 c9 aa 2b c7 47 47 a4 73 51 d6 dc 5e 71 ec 2b f2 99 3e ba 9a ae 8c f3 7c 94 85 cb 30 ea 0e d8 fa 12 8b ca 55 5b 86 f1 11 cb c3 6d c4 b3 14 ca 6d b1 25 59 9d 0a 8d e9 74 3d 3e a3 ca d4 89 ed 24 e3 44 a1 7b b4 3c 33 a8 8e aa 1f 38 cb 4b db 8b eb 44 f3 02 3f 80 d7 c5 74 cf b4 ea cd 16 df ee ed 10 e4 8f df bb 0e 45 fd 69 dc c7 97 6d e8 7b 53 98 bb d6 af d6 36 79 7a 5a db 63 ed c3 a8 0b db ed 96 7e 16 7a 37 2b 30 5e Data Ascii: Z[LZ&kIh77\do>n6\lbTf#/E^QK_>VSkvap+GGsQ^q+>\|0U[mm%Yt=>$D{<38KD?tEim{S6yzZc~z7+0^
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 79 ef 1b 7d 3b 21 11 3c e0 f6 91 c3 91 8c e3 8d 58 ac c7 ae 87 a1 7b 46 17 fb 7d c7 20 20 65 d0 cd b0 d6 ad 23 44 a0 27 c3 87 aa ee 10 90 4b 5b e0 4b e0 cd 3a 18 31 af cf 8c e4 6f 7c e6 78 2f c9 a9 b4 fe be 20 fe f1 39 b1 8c f1 1e 25 9e 89 b0 2f 4a c8 33 35 c4 44 91 7b ea 29 19 40 9f 69 5b e2 7f 75 b7 8c d1 4b 53 09 30 7b 67 a8 6f 47 ae c6 f2 2a a1 1b 3d 1c ab d0 e6 45 36 ec 81 18 63 52 61 11 af 3c f1 9e eb 08 4a 21 8a 02 89 14 e5 c0 46 05 30 d2 68 a7 ad 58 28 5c 2e 21 2b fc da 62 9e 8f 9d 91 ad ec 39 31 d1 5c b6 f1 fd 5e 34 bd a7 f7 d4 ec 8d 0a 60 5e 8b a0 9e be 10 9c d0 f1 e3 d2 ec 39 4c 2e 80 8d 79 8a d1 b8 b3 63 24 b0 71 6b 8f 21 01 db 4e 84 d0 44 2e 4d 0c 03 4c 60 35 23 09 47 bd 1e 3f 8b 24 62 35 2f f2 de b8 68 de f7 41 3f 44 98 61 7c 15 ef 48 ab 53 Data Ascii: y};!<X{F} e#D'K[K:1o\|x/ 9%/J35D{)@i[uKS0{goG*=E6cRa<J!F0hX(\.!+b91\^4`^9L.yc$qk!ND.ML`5#G?$b5/hA?Da\|HS
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: d5 2c 43 f0 f9 cc 8c 76 c1 18 12 0c d4 ea 01 2c 25 02 3d 3d a8 64 24 cb 6d e9 d6 1f d3 14 bd 99 bd bd 6b 29 3b e1 6b e2 4f 26 30 1b f8 c8 c2 cf 46 c3 60 2d 1a ea 25 18 3f c1 c7 17 1d 8b 47 c3 41 2c 1f 04 0d 00 7d 46 18 cb b5 cd 62 f9 f6 3d a3 ca 82 6c 3c 41 34 55 3f c1 30 ce da ae e3 ae 0f aa 9f da 1e 6d 28 83 af 3b 42 39 9a 7b 65 ab ac 7d ec 52 dd 66 3d f6 f5 4a 08 3f 24 3a 58 b8 39 65 88 6d a0 64 bb 1a 05 d8 38 cc 9e ea dd 38 a5 f3 97 cc 7b 4a d4 eb 6c d9 64 2c 69 a6 2f 71 0d d1 80 4f c4 49 db ad ff 36 eb 1a 99 8d b0 b2 26 d5 f7 4c ae 2b fa 9e 2a 0e 1c 8b 18 7a 54 57 e8 24 d3 6a 10 dd a2 c7 3d 92 d9 aa b2 58 1f f0 75 db 66 2d d7 01 ae 27 6b e1 d3 47 e4 08 40 34 7f 37 c6 e8 f8 46 c6 11 e0 6b d1 90 86 c0 75 fd 22 c6 91 7e 5c f1 fa 92 61 a9 ec d7 f1 7e 7c Data Ascii: ,Cv,%==d$mk);kO&0F`-%?GA,}Fb=l<A4U?0m(;B9{e}Rf=J?$:X9emd88{Jld,i/qOI6&L+*zTW$j=Xuf-'kG@47Fku"~\a~\|
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 9b cc be 40 90 59 a1 87 67 33 4f 5d ba 67 8e 75 8e cf 19 89 93 91 70 19 7f 1f bf 8f 84 c8 2e 01 0c a6 0b 00 1e 26 22 9a 08 6a 47 4c e1 47 e2 c5 5a 9c a0 28 ac 44 64 b0 6a 31 ef c3 60 80 29 45 13 70 2a d9 d1 cb c6 33 05 47 72 57 14 b5 a3 a2 43 fd 84 2c 86 36 78 73 83 90 07 a3 bc 28 04 01 b6 21 ca 55 c9 09 7f 16 c8 a7 f8 51 2d 91 90 e8 8d 4c fb 88 4f 85 86 7b 8a ed b1 2c 91 bc d7 b6 58 4c 36 f1 a7 dd 63 61 a7 fa 3a ab 4c b9 6d 47 32 11 a4 ef 16 88 d2 a4 ef c5 6b 9b c9 89 66 7a c8 c9 b7 7b f4 64 51 b1 0e d8 87 f1 00 23 e1 e2 33 9b c4 44 6f fb ca 0d e0 3a 35 c8 54 43 c1 e8 e5 63 e8 0e 8c cd 0c ad 74 84 c9 3e 42 d9 08 b6 ea 2c 8a cb 1c 4c df b5 80 b5 f4 a1 40 f6 f5 11 95 2b ca b0 12 71 af b1 4b f8 f3 e7 a7 2d 7c bc be 81 db 4f 37 f0 ee dd 7b 78 f5 f3 cf f0 f2 Data Ascii: @Yg3O]gup.&"jGLGZ(Ddj1`)Ep*3GrWC,6xs(!UQ-LO{,XL6ca:LmG2kfz{dQ#3Do:5TCct>B,L@+qK-\|O7{x
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 06 33 1d f5 a3 97 76 ec df dd 89 31 e9 57 5a 36 90 67 2d 41 f6 1e c2 64 b1 d0 45 10 ca 36 12 f7 51 0f 4d f6 2e 51 88 a7 9f 54 b9 58 4e da 7f 79 0c e3 5c 01 52 b4 b6 98 87 be 87 b0 81 41 df b4 ad d8 70 c7 de da e2 f8 51 c0 42 12 ba 8c 8b e8 e1 04 dd da a4 ca fc 33 c9 89 4b 4d 8e 4c e5 a9 64 e4 13 91 b0 1e 36 10 03 89 9c 5a b4 6e 23 c9 e4 9b ce 79 ad 9f db 21 7a a9 17 1b 5f 77 e7 27 10 b2 1c 24 9f 13 3f 7b cc 51 03 81 7c 56 5d 42 4c 75 cc 1f a0 65 59 4d 69 2b 69 8f 09 6a 31 39 2d 9d 19 5a 38 49 ad 26 86 d6 02 a0 0c 0e 0f 78 bd 7d 50 ab 8d 79 8b 18 bc d0 d9 06 74 cc 07 2d af f7 03 57 09 ae b7 e5 72 22 39 bb 5e 8f fa 15 f5 1c a0 75 46 3d d5 27 0f 7b e4 06 94 89 4e c2 14 c9 29 13 e6 c7 f5 9f 26 fa dd 37 7e b9 2e 4f 49 e0 27 12 89 44 22 91 48 24 12 5f 83 ff f4 Data Ascii: 3v1WZ6g-AdE6QM.QTXNy\RApQB3KMLd6Zn#y!z_w'$?{Q\|V]BLueYMi+ij19-Z8I&x}Pyt-Wr"9^uF='{N)&7~.OI'D"H$_
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: cf 3d 89 a0 3f e3 46 7e 24 24 74 f3 a5 24 fe 48 78 8f c4 d5 3e 22 5d af df 31 8c 94 9e e8 8d d7 1a c1 59 60 87 34 1b 61 04 45 01 f3 78 d3 ba c5 67 ff 2e 8f 5a dd 98 ea df bd 3c 5b 47 74 f5 a4 55 ff 1c fa 09 ee 21 0e 42 d3 fa 95 be 61 37 82 77 61 86 5d 65 0c 42 1c 6a 38 0a 90 47 2d 5d 98 0e 25 ee 41 b8 5a 39 66 cf 81 93 57 bd ab 42 6e c9 e7 aa 8c fa 30 a9 a3 cb 1c 49 af c6 11 70 16 6d f7 22 fa e8 45 1f 4f 24 08 bb ab 34 2e 87 02 80 de eb 93 f4 44 05 5c 5c 1a a3 2e 2a 19 ba 4f a6 46 a8 06 99 17 d3 0d 7f f4 ef d2 13 97 35 0b d9 0d 4d 0d 4a 69 c3 fb 00 f6 19 75 74 c0 f0 d8 f7 ee 51 b8 70 00 6e bb ae 8c ef 6e bb 06 a5 f8 9d d4 12 4c d6 ad 75 c4 ce 6e bd 94 1c 25 49 0b 21 13 74 b9 ed 69 af 7d 32 31 f2 55 c3 e5 84 44 df 6d ec 7f 52 8f e6 49 2d 15 44 e4 88 6e fd Data Ascii: =?F~$$t$Hx>"]1Y`4aExg.Z<[GtU!Ba7wa]eBj8G-]%AZ9fWBn0Ipm"EO$4.D\\.*OF5MJiutQpnnLun%I!ti}21UDmRI-Dn
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: b5 99 d7 ba 1a be e6 b9 37 40 f7 73 54 38 f9 d3 d8 83 7c 5e 7a 8f fc da 95 d5 f3 1e f4 61 72 98 f8 d4 10 21 d3 a8 0b cd 4d 3a 71 9e 55 a2 3f d6 6f aa 4a cc 2e 56 0e ec cf d3 e4 b2 37 cd 09 7a 59 8b e7 cf 19 e7 e1 28 43 d7 d9 5d 23 91 b6 31 13 bc 4f 54 57 0a 57 65 84 7c 9f 1b 40 1b df c7 6d 4d 38 de bc fd c3 18 c7 75 9a 64 8d 25 f1 ed e7 7e 9d 32 2f 9e 34 9b 4e fd 28 89 0f 3e 0a 57 e9 a7 b5 1b ab 54 a6 b6 d4 eb ea df a4 90 be 56 19 8c 37 9d 3c 5d f6 d1 d0 a0 ba a5 c9 62 91 68 5f 9a 1b cd e8 dd b3 38 81 c8 b3 31 39 ed 76 5d 0f ce 5b 8e 71 4f 6d 59 78 86 a9 72 cc 0b c7 41 4c 04 7d 74 b0 8e 61 94 23 a9 9a 9e ab 91 47 cb 5e aa f7 65 3d 41 a5 63 8b 8e bf da 0f 26 31 00 e0 3a dd 8d 8b 0b 1b 7b 64 fc e2 2e 2a 27 6d e4 44 a0 9f 08 12 63 72 e8 07 18 7e cb e7 9b 4a Data Ascii: 7@sT8\|^zar!M:qU?oJ.V7zY(C]#1OTWWe\|@mM8ud%~2/4N(>WTV7<]bh_819v][qOmYxrAL}ta#G^e=Ac&1:{d.*'mDcr~J
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 21 b5 7b e7 97 da 76 dc d4 ef 12 28 11 d1 cb 4a bd ef 0a ec f1 3a 25 19 39 f7 37 12 60 b6 e9 83 dd 6b ec 7b db b4 97 bd 65 f6 7a f7 a4 a7 3e 78 3c 51 60 c4 be 92 11 e0 9b 74 61 c1 7b d2 23 24 00 d5 8d a7 79 c0 89 21 00 02 41 21 0f 84 51 e2 ca 8f 18 71 04 4a a0 82 91 75 fb 42 25 d0 73 17 97 91 f6 ac 28 b7 26 84 04 13 18 fe 85 93 84 51 5f b8 20 5a 17 eb c7 e2 19 59 7a 5a bf ab 47 24 7d f4 b9 2a ff e8 c1 19 f5 48 09 2c d3 7d e8 8d 0b f6 96 f2 77 1b 83 c6 36 d6 7f cb 40 be f7 84 5c 24 8f 96 ae 0d 8d ec b0 93 04 e1 3d ad 7f a7 1a e8 30 29 37 85 2a 59 42 8e 8d b2 6b 64 8a ba de 79 bd ba 12 78 dd 43 60 fb 9e 5c ed fb 8a 86 bc 31 cf 7d fe c2 3c 3a a3 17 ee a8 47 91 fc f7 f1 45 9f 0d a0 c9 25 61 0f b1 a9 61 5e d4 4b b2 05 85 57 ef 69 25 eb 0a 00 8c 84 31 8e eb 77 Data Ascii: !{v(J:%97`k{ez>x<Q`ta{#$y!A!QqJuB%s(&Q_ ZYzZG$}H,}w6@\$=0)7YBkdyxC`\1}<:GE%aa^KWi%1w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49770	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:00 UTC	563	OUT	GET /fileadmin/user_upload/Park_Domains/Domain-Parking-Profis.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:00 UTC	492	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:00 GMT Content-Type: image/jpeg Content-Length: 52602 Connection: close Cf-Bgj: h2pri ETag: "6321aef7-cd7a" Last-Modified: Wed, 14 Sep 2022 10:37:43 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-706f3b790b60e4c1f03f4346fe51a7d0 CF-Cache-Status: HIT Age: 6324 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7c9efd04244-EWR
2024-09-30 22:41:00 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0e 20 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 07 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 62 00 00 00 1b 01 05 00 01 00 00 00 6a 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 72 00 00 00 32 01 02 00 14 00 00 00 8e 00 00 00 69 87 04 00 01 00 00 00 a4 00 00 00 d0 00 00 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 00 32 30 31 36 3a 30 38 3a 31 30 20 31 32 3a 30 32 3a 35 39 00 00 00 03 00 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 8c 05 00 00 03 a0 04 00 01 00 00 00 3a 04 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 Data Ascii: JFIFHH ExifII*bj(1r2i''Adobe Photoshop CS4 Windows2016:08:10 12:02:59:
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 12 49 25 7d ce 52 49 24 92 94 92 49 24 a5 24 92 b5 4e 35 4c ab ed 19 5a 30 fd 06 77 3e 1f e7 7e ea 06 40 6e 98 c4 9d 9a 89 2b 9f 69 c1 76 8e c6 da df 11 13 ff 00 47 6a 5f 67 c2 b7 5a 6f d8 7f 75 ff 00 f9 9e c7 21 c7 5b 82 3f 1f fa 2b b8 2f 62 0f e1 ff 00 49 a6 92 b9 f6 4c 4a f5 bb 20 1f 26 c7 f0 f5 1c 9b ed 1d 3d 9a 57 8f bf f9 4e ff 00 cc f7 25 c7 7b 02 7f 97 f5 91 c1 5b 91 1f c7 fe 8b 51 25 71 d4 63 e4 d6 6c c4 1b 2c 6f d2 ab c7 fd 7f 35 52 44 48 1f a6 e1 12 89 1e 37 b1 0a 49 24 91 5a a4 93 24 92 94 92 49 24 a7 ff d0 ec 12 49 25 7d ce 52 49 26 49 4b a6 ef 1d cf 64 7c 5c 61 7b 9c e7 9d b5 57 ab cf f0 45 39 b4 d3 ed c5 a8 0f e5 bb 49 ff 00 bf ff 00 9c e4 d3 2d 68 0b 2b 84 74 b2 68 7e 2c 71 f0 c9 3e ae 40 d9 4b 35 21 da 4f f5 bf 75 88 79 59 07 22 cd dc 31 Data Ascii: I%}RI$I$$N5LZ0w>~@n+ivGj_gZou![?+/bILJ &=WN%{[Q%qcl,o5RDH7I$Z$I$I%}RI&IKd\|\a{WE9I-h+th~,q>@K5!OuyY"1
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 0c 92 d3 e0 63 7f fd 53 55 14 a1 7a 83 fa 3a 2a 60 69 21 a7 10 b5 24 92 49 cb 1f ff d3 eb 92 49 32 be e6 ae ad 60 dc c9 76 35 ba d7 76 83 c9 c7 4f fa 7f f5 6a a2 47 54 24 2c 52 63 2a 36 92 fa 5d 45 a6 b7 6b 1a b5 de 23 f7 95 86 7e 93 a5 3d bd ea 7c fc a4 3f fe a5 c9 f2 1c 6f e9 f5 de ed 6c ad db 4b bc 75 d8 ef fb e3 94 3a 75 ad 6d ce a5 ff 00 42 e1 b6 3c c7 fe 49 a9 84 93 1b eb 03 af f8 2c 80 01 3a fd 19 8d 3f c3 6d 74 e7 ee c5 0d ef 5b 8b 4f cf de df fa a5 69 66 62 bc e1 e5 ba 8b 0f b1 d0 d2 ee df f0 56 2d 35 16 41 52 be 92 d4 33 63 37 1a eb 1f 49 6a 75 32 d1 8c 01 00 b8 bc 06 93 c8 fc e7 16 ac b5 77 aa 3c 9b aa a8 6a 43 77 40 e4 97 18 d3 fc d4 f8 fd 31 c6 1f 91 ed 1f e8 c7 3f db 77 e6 a9 60 44 60 09 eb ab 0c c1 9c c8 03 6d 1a 2a ff 00 49 73 7f 4a d8 1b Data Ascii: cSUz:`i!$II2`v5vOjGT$,Rc6]Ek#~=\|?olKu:umB<I,:?mt[OifbV-5AR3c7Iju2w<jCw@1?w`D`m*IsJ
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 49 32 7f 14 c9 24 92 14 92 49 24 a5 24 92 49 29 49 24 92 4a 7f ff d9 ff ed 12 e8 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 07 1c 02 00 00 02 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 e8 f1 5c f3 2f c1 18 a1 a2 7b 67 ad c5 64 d5 ba 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 02 00 48 00 00 00 01 00 02 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 Data Ascii: I2$I$$I)I$JPhotoshop 3.08BIM8BIM%\/{gd8BIMHH8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 00 00 38 42 49 4d 04 11 00 00 00 00 00 01 01 00 38 42 49 4d 04 14 00 00 00 00 00 04 00 00 00 01 38 42 49 4d 04 0c 00 00 00 00 0d 06 00 00 00 01 00 00 00 a0 00 00 00 7a 00 00 01 e0 00 00 e4 c0 00 00 0c ea 00 18 00 01 ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 48 00 48 00 00 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: 8BIM8BIM8BIMzJFIFHHAdobe_CMAdobed
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: f8 96 42 44 47 80 6c 44 28 d9 5d 76 b7 6d ad 0f 1e 7c 8f 83 be 93 55 4e 99 6e ea dd 49 3a d7 ee 6f f5 4f fe 45 ca ea 32 06 32 ae ca 89 12 8d f7 73 6f c5 b7 15 de be 3b 8e d6 f2 7f 39 a3 f9 5f bf 5a 9b 83 3a 85 45 ec 01 b9 55 8d 5b fb c3 ff 00 23 fb 9f b8 af ac bc 86 3b 0b 25 b7 54 3f 46 e9 2d 6f fe 7c ab ff 00 20 9f 19 19 7f 7c 7c a7 bf f5 4b 1c a2 23 fd c3 f3 0f dd fe b4 5a 9f eb 0a ee 37 bb a7 65 34 f0 dd 47 dc d7 7f df 54 7a 8d 6d de cc 9a ff 00 9b bc 4c ff 00 2a 26 7f b6 d5 2c 10 6c c5 ca a9 ba b9 c2 40 f8 82 3f ef aa 49 1b 80 3e 23 f3 63 8c 6a 66 3e 07 fe 8b 49 24 c0 c8 94 93 d8 d4 92 49 24 a7 ff d2 eb d2 49 32 be e7 2e 8d 89 8f f6 8b 76 9d 2b 6e af 3e 5f bb fd a4 05 71 84 b3 a5 bd cc e5 ef 87 9f 22 76 7f d4 a6 cc 90 34 dc 9e 1f b5 74 00 27 5d 80 e2 Data Ascii: BDGlD(]vm\|UNnI:oOE22so;9_Z:EU[#;%T?F-o\| \|\|K#Z7e4GTzmL*&,l@?I>#cjf>I$I$I2.v+n>_q"v4t']
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 04 f9 9d 41 94 83 5d 24 3a de 0b b9 6b 7f f2 4f 42 c6 a9 b8 75 9c cc 90 7d 43 fc dd 67 e9 49 f1 ff 00 84 7f fe 06 c4 e2 bc 3e 9f 0e b4 fa d9 03 e8 b0 70 df 97 e6 7f 5d ea 96 46 45 97 bf d4 b4 f1 a3 5a 38 68 f0 6a 7c 63 62 a3 f2 f5 97 ef 79 31 ca 54 6e 5f 30 f9 63 d2 1f de 63 65 8f b5 ee b1 e6 5c f3 25 5c c4 ff 00 93 b3 0f fa fd 15 5e 9c 3c ab a3 65 64 34 fe 7b bd ad fc 7f ef aa ce 51 af 13 13 ec 4c 76 fb 5e 66 d2 3b 77 fe cf d1 da d6 a7 48 83 51 1d c7 d0 05 b1 04 5c 8e d4 77 ea 64 d0 49 24 93 d8 d4 92 64 92 53 ff d5 eb 12 49 32 be e6 ae 99 24 92 52 91 aa cc c9 a6 03 1e 76 8e 1a ef 70 fc 50 52 48 80 77 d5 20 91 b1 a7 41 97 63 e7 fe 8a f6 0a ef 3f 42 c6 f7 3e 5f fa 4d ea 8d d5 3e ab 1d 55 83 dc de 7c 08 ec e1 fc 97 28 6b c8 d0 8d 41 1d 88 5a 23 67 52 a4 34 Data Ascii: A]$:kOBu}CgI>p]FEZ8hj\|cby1Tn_0cce\%\^<ed4{QLv^f;wHQ\wdI$dSI2$RvpPRHw Ac?B>_M>U\|(kAZ#gR4
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 66 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 74 69 66 66 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 65 78 69 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 65 78 69 66 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 65 32 36 38 30 64 33 38 2d 66 36 32 35 2d 34 39 36 62 2d 39 39 34 35 2d 30 39 64 35 66 63 30 62 64 65 34 39 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 43 38 41 42 37 32 38 31 38 43 38 31 31 45 36 41 44 44 34 39 38 30 45 46 44 46 44 33 34 42 44 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 39 42 46 37 44 30 45 45 31 35 45 45 36 31 31 42 31 34 Data Ascii: ff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmpMM:OriginalDocumentID="xmp.did:e2680d38-f625-496b-9945-09d5fc0bde49" xmpMM:DocumentID="xmp.did:6C8AB72818C811E6ADD4980EFDFD34BD" xmpMM:InstanceID="xmp.iid:49BF7D0EE15EE611B14
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 61 36 34 62 65 63 35 2d 36 30 65 66 2d 31 31 37 39 2d 38 63 66 34 2d 65 31 66 36 63 31 38 61 34 65 65 34 22 2f 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 39 42 46 37 44 30 45 45 31 35 45 45 36 31 31 42 31 34 44 38 45 34 38 39 44 38 30 44 37 45 46 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 32 3a 30 32 3a 35 39 2b 30 32 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 Data Ascii: f:documentID="adobe:docid:photoshop:ca64bec5-60ef-1179-8cf4-e1f6c18a4ee4"/> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:49BF7D0EE15EE611B14D8E489D80D7EF" stEvt:when="2016-08-10T12:02:59+02:00" stEvt:softwareAgent="Adob
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	49769	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:00 UTC	712	OUT	GET /components/p9HJ4M2Uz7U4/full.header.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:00 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:00 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2024 11:04:16 GMT ETag: W/"66e2cab0-6c285" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-9e7271b3cba826828d1ff854a606be44 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 114 Server: cloudflare CF-RAY: 8cb7b7c9ea82438d-EWR
2024-09-30 22:41:00 UTC	849	IN	Data Raw: 37 64 39 36 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 22 2e 2f 73 72 63 2f 46 75 6c 6c 48 65 61 64 65 72 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 46 75 6c 6c 48 65 61 64 65 72 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 6e 29 3b 76 61 72 20 74 3d 72 28 2f 2a 21 20 2e 2f 75 74 69 6c 73 2f 4c 6f 67 69 6e 53 65 72 76 69 63 65 20 2a 2f 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 4c 6f 67 69 6e 53 65 72 76 69 63 65 2e 6a 73 22 29 2c 6f 3d 72 28 2f 2a 21 20 Data Ascii: 7d96!function(){var e={"./src/FullHeader.js":/!*************************!\ !* ./src/FullHeader.js ! \*************************/function(e,n,r){"use strict";r.r(n);var t=r(/! ./utils/LoginService /"./src/utils/LoginService.js"),o=r(/!
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 67 67 65 64 22 29 2c 74 68 69 73 2e 24 77 61 74 63 68 6c 69 73 74 53 74 61 74 75 73 4c 6f 67 67 65 64 4f 66 66 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 77 61 74 63 68 6c 69 73 74 2d 73 74 61 74 75 73 2d 6c 6f 67 67 65 64 2d 6f 66 66 22 29 2c 74 68 69 73 2e 24 77 61 74 63 68 6c 69 73 74 53 74 61 74 75 73 4c 6f 67 67 65 64 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 77 61 74 63 68 6c 69 73 74 2d 73 74 61 74 75 73 2d 6c 6f 67 67 65 64 22 29 2c 74 68 69 73 2e 24 72 65 73 70 6f 6e 73 69 76 65 4c 6f 67 69 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 72 65 73 70 6f 6e 73 69 76 65 2d 6c 6f 67 69 6e 22 29 2c 74 68 69 73 2e 24 73 65 61 72 63 68 62 61 72 3d 64 Data Ascii: gged"),this.$watchlistStatusLoggedOff=document.querySelector("#watchlist-status-logged-off"),this.$watchlistStatusLogged=document.querySelector("#watchlist-status-logged"),this.$responsiveLogin=document.querySelector("#responsive-login"),this.$searchbar=d
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 74 65 6d 2e 61 63 74 69 76 65 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 65 63 6f 6e 64 6e 61 76 2d 69 74 65 6d 2e 61 63 74 69 76 65 22 29 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 65 63 6f 6e 64 6e 61 76 2d 69 74 65 6d 2e 61 63 74 69 76 65 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 29 2c 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 22 61 63 74 69 76 65 22 29 7d 29 29 7d 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 73 65 63 6f 6e 64 6e 61 76 2d 69 74 Data Ascii: tem.active").classList.remove("active"),document.querySelector(".secondnav-item.active")&&document.querySelector(".secondnav-item.active").classList.remove("active"),e.currentTarget.classList.toggle("active")}))})),document.querySelectorAll(".secondnav-it
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 67 67 65 64 4f 66 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 69 64 64 65 6e 22 29 2c 74 68 69 73 2e 24 77 61 74 63 68 6c 69 73 74 53 74 61 74 75 73 4c 6f 67 67 65 64 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 68 69 64 64 65 6e 22 29 2c 74 68 69 73 2e 24 6c 6f 67 69 6e 53 74 61 74 75 73 4c 6f 67 67 65 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 69 6e 70 75 74 22 29 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 6e 2e 66 69 72 73 74 6e 61 6d 65 2c 74 68 69 73 2e 24 72 65 73 70 6f 6e 73 69 76 65 4c 6f 67 69 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 6c 6f 67 67 65 64 2d 6f 66 66 22 29 2c 74 68 69 73 2e 24 72 65 73 70 6f 6e 73 69 76 65 4c 6f 67 69 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6c 6f 67 67 65 64 Data Ascii: ggedOff.classList.add("hidden"),this.$watchlistStatusLogged.classList.remove("hidden"),this.$loginStatusLogged.querySelector(".input").textContent=n.firstname,this.$responsiveLogin.classList.remove("logged-off"),this.$responsiveLogin.classList.add("logged
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 6e 29 3b 76 61 72 20 74 3d 72 28 2f 2a 21 20 2e 2f 75 74 69 6c 73 2f 54 65 6d 70 6c 61 74 65 20 2a 2f 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 54 65 6d 70 6c 61 74 65 2e 6a 73 22 29 2c 6f 3d 72 28 2f 2a 21 20 2e 2f 75 74 69 6c 73 2f 4c 61 6e 67 75 61 67 65 73 20 2a 2f 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 4c 61 6e 67 75 61 67 65 73 2e 6a 73 22 29 3b 6e 2e 64 65 66 61 75 6c 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 6e 29 7b 74 68 69 73 2e 76 61 72 69 61 6e 74 3d 65 2c 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 3d 6e 65 77 20 74 2e 64 65 66 61 75 6c 74 2c 74 68 69 73 2e 68 65 61 64 65 72 3d 74 68 69 73 2e 74 65 6d 70 6c 61 Data Ascii: ****/function(e,n,r){"use strict";r.r(n);var t=r(/! ./utils/Template /"./src/utils/Template.js"),o=r(/! ./utils/Languages */"./src/utils/Languages.js");n.default=class{constructor(e,n){this.variant=e,this.template=new t.default,this.header=this.templa
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 67 69 6e 26 66 3d 67 65 74 5f 73 74 61 74 75 73 26 6c 61 6e 67 75 61 67 65 3d 24 7b 74 68 69 73 2e 6c 61 6e 67 7d 60 3b 6c 65 74 20 74 3d 7b 6c 6f 67 69 6e 3a 30 2c 75 73 65 72 49 64 3a 31 2c 73 65 64 6f 70 72 6f 3a 21 31 2c 66 69 72 73 74 6e 61 6d 65 3a 22 22 2c 70 61 72 74 6e 65 72 69 64 3a 22 22 2c 69 6f 6e 6f 73 5f 73 75 72 76 65 79 3a 7b 74 6f 6b 65 6e 3a 6e 75 6c 6c 2c 74 65 6e 61 6e 74 3a 6e 75 6c 6c 2c 6c 6f 63 61 6c 65 3a 6e 75 6c 6c 7d 7d 3b 74 68 69 73 2e 78 6d 6c 68 74 74 70 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 22 2f 73 65 72 76 69 63 65 2f 63 6f 6d 6d 6f 6e 2e 70 68 70 22 2c 21 30 29 2c 74 68 69 73 2e 78 6d 6c 68 74 74 70 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 28 29 3d 3e 7b 69 66 28 34 3d 3d 3d 74 68 69 73 2e 78 6d 6c Data Ascii: gin&f=get_status&language=${this.lang}`;let t={login:0,userId:1,sedopro:!1,firstname:"",partnerid:"",ionos_survey:{token:null,tenant:null,locale:null}};this.xmlhttp.open("POST","/service/common.php",!0),this.xmlhttp.onreadystatechange=()=>{if(4===this.xml
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 6e 73 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 66 69 72 73 74 43 68 69 6c 64 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 68 69 73 2e 68 65 61 64 65 72 2c 6e 29 2c 74 68 69 73 2e 61 64 64 65 64 54 6f 42 6f 64 79 3d 21 30 2c 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 74 65 6d 70 6c 61 74 65 41 64 64 65 64 22 29 29 7d 7d 7d 2c 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 68 65 6c 70 65 72 2f 67 65 74 50 61 67 65 4c 61 6e 67 75 61 67 65 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 Data Ascii: nst n=document.body.firstChild;n.parentNode.insertBefore(this.header,n),this.addedToBody=!0,document.dispatchEvent(new CustomEvent("templateAdded"))}}},"./src/utils/helper/getPageLanguage.js":/!*******************************************!\ !*** ./s
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 65 2e 74 72 69 6d 28 29 3b 69 66 28 21 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 22 73 65 61 72 63 68 22 29 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 22 64 65 74 61 69 6c 73 22 29 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 22 2e 70 68 70 22 29 29 7b 69 66 28 6e 29 7b 6c 65 74 20 65 3d 22 22 3b 65 2b 3d 74 3f 60 6b 65 79 77 6f 72 64 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 60 3a 22 22 2c 65 2b 3d 65 3f 22 26 22 3a 22 22 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 65 2b 3d 6e 3e 30 3f 22 26 22 Data Ascii: e.trim();if(!window.location.pathname.includes("search")\|\|window.location.pathname.includes("details")\|\|window.location.pathname.includes(".php")){if(n){let e="";e+=t?`keyword=${encodeURIComponent(t)}`:"",e+=e?"&":"";for(let n=0;n<r.length;n+=1)e+=n>0?"&"
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 73 2f 76 36 2f 73 2d 42 69 79 77 65 55 50 56 30 76 2d 79 52 62 2d 63 6a 63 69 41 7a 79 44 4d 58 68 64 44 38 73 41 6a 36 4f 41 4a 54 46 73 42 49 2e 77 6f 66 66 32 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 64 72 6f 69 64 73 61 6e 73 2f 76 36 2f 73 2d 42 69 79 77 65 55 50 56 30 76 2d 79 52 62 2d 63 6a 63 69 41 7a 79 44 4d 58 68 64 44 38 73 41 6a 36 4f 41 4a 54 46 73 42 49 2e 77 6f 66 66 32 22 29 2c 72 2e 62 29 2c 70 3d 6e 65 77 20 55 52 4c 28 72 28 2f 2a 21 20 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 Data Ascii: s/v6/s-BiyweUPV0v-yRb-cjciAzyDMXhdD8sAj6OAJTFsBI.woff2 /"./node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/droidsans/v6/s-BiyweUPV0v-yRb-cjciAzyDMXhdD8sAj6OAJTFsBI.woff2"),r.b),p=new URL(r(/! ../../node_modules/@sedo/legacy-shared-asset
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2f 76 31 35 2f 37 6d 38 6c 37 54 6c 46 4f 2d 53 33 56 6b 68 48 75 52 30 61 74 34 67 70 39 51 38 67 62 59 72 68 71 47 6c 52 61 76 5f 49 58 66 6b 2e 77 6f 66 66 32 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2f 76 31 35 2f 37 6d 38 6c 37 54 6c 46 4f 2d 53 33 56 6b 68 48 75 52 30 61 74 34 67 70 39 51 38 67 62 59 72 68 71 47 6c 52 61 76 5f 49 58 66 6b 2e Data Ascii: /../node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/roboto/v15/7m8l7TlFO-S3VkhHuR0at4gp9Q8gbYrhqGlRav_IXfk.woff2 */"./node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/roboto/v15/7m8l7TlFO-S3VkhHuR0at4gp9Q8gbYrhqGlRav_IXfk.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	49771	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:00 UTC	712	OUT	GET /components/zkLxDsbw1hz2/full.footer.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:00 UTC	521	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:00 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2024 08:56:06 GMT ETag: W/"66e2aca6-6250f" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-843af75abefdfd4b21a2950177b13608 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4219 Server: cloudflare CF-RAY: 8cb7b7c9eadb4405-EWR
2024-09-30 22:41:00 UTC	848	IN	Data Raw: 37 64 39 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 22 2e 2f 73 72 63 2f 46 6f 6f 74 65 72 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 46 6f 6f 74 65 72 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 6e 29 3b 76 61 72 20 74 3d 6f 28 2f 2a 21 20 40 73 65 64 6f 2f 76 75 65 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 6c 69 62 72 61 72 79 2f 75 74 69 6c 73 2f 73 65 64 6f 43 6f 6f 6b 69 65 4d 61 6e 61 67 65 72 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 76 75 Data Ascii: 7d95!function(){var e={"./src/Footer.js":/!*********************!\ !* ./src/Footer.js ! \*********************/function(e,n,o){"use strict";o.r(n);var t=o(/! @sedo/vue-component-library/utils/sedoCookieManager */"./node_modules/@sedo/vu
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 2e 64 65 66 61 75 6c 74 29 28 6e 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 6d 70 6c 61 74 65 41 64 64 65 64 46 6f 6f 74 65 72 22 2c 28 28 29 3d 3e 7b 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 49 6e 69 74 28 6e 29 7d 29 29 2c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 2e 61 64 64 54 65 6d 70 6c 61 74 65 54 6f 42 6f 64 79 28 29 3a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 28 28 29 3d 3e 7b 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 2e 61 64 64 54 65 6d 70 6c 61 74 65 54 6f 42 6f 64 79 28 29 7d 29 29 7d 74 65 6d 70 6c 61 74 65 49 Data Ascii: .default)(n)),document.addEventListener("templateAddedFooter",(()=>{this.templateInit(n)})),"loading"!==document.readyState?this.template.addTemplateToBody():document.addEventListener("DOMContentLoaded",(()=>{this.template.addTemplateToBody()}))}templateI
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 28 22 23 66 6f 6f 74 65 72 2d 6e 65 77 73 6c 65 74 74 65 72 2d 73 69 67 6e 75 70 2d 63 68 65 63 6b 62 6f 78 2d 77 72 61 70 70 65 72 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 65 72 72 6f 72 22 29 3b 63 6f 6e 73 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 22 29 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 2e 67 65 74 41 74 Data Ascii: ("#footer-newsletter-signup-checkbox-wrapper").classList.remove("error");const n=document.querySelector("[data-footer-host]")&&document.querySelector("[data-footer-host]").getAttribute("data-footer-host")?document.querySelector("[data-footer-host]").getAt
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 26 26 28 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 6d 61 69 6e 6e 61 76 2e 70 75 73 68 28 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 73 65 63 6f 6e 64 6e 61 76 5b 65 5d 29 2c 64 65 6c 65 74 65 20 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 73 65 63 6f 6e 64 6e 61 76 5b 65 5d 29 3b 69 66 28 6e 2e 63 75 72 72 65 6e 74 59 65 61 72 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 6e 2e 64 61 74 61 46 6f 6f 74 65 72 48 6f 73 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 Data Ascii: &&(n.navigation.mainnav.push(n.navigation.secondnav[e]),delete n.navigation.secondnav[e]);if(n.currentYear=(new Date).getFullYear(),n.dataFooterHost=document.querySelector("[data-footer-host]")&&document.querySelector("[data-footer-host]").getAttribute("d
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 4e 65 77 73 6c 65 74 74 65 72 53 65 72 76 69 63 65 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 6e 29 2c 6e 2e 64 65 66 61 75 6c 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 78 6d 6c 68 74 74 70 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 6d 61 6b 65 52 65 71 75 65 73 74 28 65 2c 6e 2c 6f 29 7b 63 6f Data Ascii: /!**************************************!\ !* ./src/utils/NewsletterService.js ! \***************************************/function(e,n,o){"use strict";o.r(n),n.default=class{constructor(){this.xmlhttp=new XMLHttpRequest}makeRequest(e,n,o){co
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 6e 29 3b 76 61 72 20 74 3d 6f 28 2f 2a 21 20 2e 2e 2f 74 65 6d 70 6c 61 74 65 73 2f 66 75 6c 6c 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 20 2a 2f 22 2e 2f 73 72 63 2f 74 65 6d 70 6c 61 74 65 73 2f 66 75 6c 6c 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 22 29 2c 72 3d 6f 2e 6e 28 74 29 2c 69 3d 6f 28 2f 2a 21 20 2e 2e 2f 74 65 6d 70 6c 61 74 65 73 2f 72 65 64 75 63 65 64 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 20 2a 2f 22 2e 2f 73 72 63 2f 74 65 6d 70 6c 61 74 65 73 2f 72 65 64 75 63 65 64 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 22 29 2c 73 3d 6f 2e 6e 28 69 29 2c 61 3d 6f 28 2f 2a 21 20 2e 2e 2f 74 65 6d 70 6c 61 74 65 73 2f 6d 69 6e 69 6d 61 6c 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 20 2a 2f 22 2e 2f 73 72 63 2f 74 65 6d 70 6c Data Ascii: n,o){"use strict";o.r(n);var t=o(/! ../templates/full-footer.njk /"./src/templates/full-footer.njk"),r=o.n(t),i=o(/! ../templates/reduced-footer.njk /"./src/templates/reduced-footer.njk"),s=o.n(i),a=o(/! ../templates/minimal-footer.njk /"./src/templ
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 67 65 74 50 61 67 65 4c 61 6e 67 75 61 67 65 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 6e 29 2c 6f 2e 64 28 6e 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 74 3d 6f 28 2f 2a 21 20 40 73 65 64 6f 2f 76 75 65 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 6c 69 62 72 61 72 79 2f 75 74 69 6c 73 2f 73 65 64 6f 43 6f 6f 6b 69 65 4d 61 6e 61 67 65 72 20 2a 2f 22 2e 2f Data Ascii: **********************!\ !* ./src/utils/getPageLanguage.js ! \************************************/function(e,n,o){"use strict";o.r(n),o.d(n,{default:function(){return i}});var t=o(/! @sedo/vue-component-library/utils/sedoCookieManager */"./
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 73 73 2d 6c 6f 61 64 65 72 2f 64 69 73 74 2f 72 75 6e 74 69 6d 65 2f 67 65 74 55 72 6c 2e 6a 73 22 29 2c 6c 3d 6f 2e 6e 28 61 29 2c 63 3d 6e 65 77 20 55 52 4c 28 6f 28 2f 2a 21 20 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 64 72 6f 69 64 73 61 6e 73 2f 76 36 2f 73 2d 42 69 79 77 65 55 50 56 30 76 2d 79 52 62 2d 63 6a 63 69 41 7a 79 44 4d 58 68 64 44 38 73 41 6a 36 4f 41 4a 54 46 73 42 49 2e 77 6f 66 66 32 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 Data Ascii: /node_modules/css-loader/dist/runtime/getUrl.js"),l=o.n(a),c=new URL(o(/! ../../node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/droidsans/v6/s-BiyweUPV0v-yRb-cjciAzyDMXhdD8sAj6OAJTFsBI.woff2 /"./node_modules/@sedo/legacy-shared-assets-b
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2f 76 31 35 2f 6f 4d 4d 67 66 5a 4d 51 74 68 4f 72 79 51 6f 39 6e 32 32 64 63 75 76 76 44 69 6e 31 70 4b 38 61 4b 74 65 4c 70 65 5a 35 63 30 41 2e 77 6f 66 66 32 22 29 2c 6f 2e 62 29 2c 66 3d 6e 65 77 20 55 52 4c 28 6f 28 2f 2a 21 20 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2f 76 31 35 2f 37 6d 38 6c 37 54 6c 46 4f 2d 53 33 56 6b 68 48 75 52 30 61 74 Data Ascii: "./node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/roboto/v15/oMMgfZMQthOryQo9n22dcuvvDin1pK8aKteLpeZ5c0A.woff2"),o.b),f=new URL(o(/*! ../../node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/roboto/v15/7m8l7TlFO-S3VkhHuR0at
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 73 6f 75 72 63 65 73 61 6e 73 70 72 6f 2f 76 39 2f 4f 44 65 6c 49 31 61 48 42 59 44 42 71 67 65 49 41 48 32 7a 6c 4a 62 50 46 64 75 49 59 74 6f 4c 7a 77 53 54 36 38 75 68 7a 5f 59 2e 77 6f 66 66 32 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 73 6f 75 72 63 65 73 61 6e 73 70 72 6f 2f 76 39 2f 4f 44 65 6c 49 31 61 48 42 59 44 42 71 67 65 49 41 48 32 7a 6c 4a 62 50 46 64 75 49 59 74 6f 4c 7a 77 53 54 36 38 75 68 7a 5f 59 2e 77 6f 66 66 32 22 29 2c 6f 2e 62 29 2c 45 3d 6e 65 77 20 55 52 4c 28 6f 28 2f 2a 21 20 2e 2e 2f 2e 2e 2f Data Ascii: dle/fonts/googlefonts/sourcesanspro/v9/ODelI1aHBYDBqgeIAH2zlJbPFduIYtoLzwST68uhz_Y.woff2 /"./node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/sourcesanspro/v9/ODelI1aHBYDBqgeIAH2zlJbPFduIYtoLzwST68uhz_Y.woff2"),o.b),E=new URL(o(/! ../../

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	49772	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:00 UTC	558	OUT	GET /fileadmin/images/legacy/images/icons/icn-check-blue.svg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:00 UTC	487	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:00 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Wed, 14 Sep 2022 10:45:46 GMT ETag: W/"6321b0da-26c" X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-c2daad4a5afb5a10dcb788edf38f8d3a X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4702 Server: cloudflare CF-RAY: 8cb7b7ca9d0b8ce8-EWR
2024-09-30 22:41:00 UTC	627	IN	Data Raw: 32 36 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 Data Ascii: 26c<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"
2024-09-30 22:41:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	49773	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:00 UTC	616	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8
2024-09-30 22:41:00 UTC	469	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:00 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Thu, 26 Sep 2024 09:13:42 GMT ETag: "66f525c6-4d7" Strict-Transport-Security: max-age=2592000 Server: cloudflare CF-RAY: 8cb7b7caaa29426b-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Wed, 02 Oct 2024 22:41:00 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-09-30 22:41:00 UTC	900	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2024-09-30 22:41:00 UTC	339	IN	Data Raw: 2c 6e 3d 30 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 72 79 7b 69 28 72 5b 6e 5d 2e 63 6f 6e 74 65 6e 74 29 7d 63 61 74 63 68 28 63 29 7b 65 28 63 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 72 79 7b 63 28 74 29 2c 6f 28 74 29 2c 61 28 74 29 7d 63 61 74 63 68 28 72 29 7b 65 28 72 29 7d 7d 76 61 72 20 6c 3d 22 2f 63 64 6e 2d 63 67 69 2f 6c 2f 65 6d 61 69 6c 2d 70 72 6f 74 65 63 74 69 6f 6e 23 22 2c 75 3d 22 2e 5f 5f 63 66 5f 65 6d 61 69 6c 5f 5f 22 2c 66 3d 22 64 61 74 61 2d 63 66 65 6d 61 69 6c 22 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 28 64 6f 63 75 6d 65 6e 74 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 Data Ascii: ,n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r)}}var l="/cdn-cgi/l/email-protection#",u=".__cf_email__",f="data-cfemail",d=document.createElement("div");i(document),function(){var e=document.currentScr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	49774	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:00 UTC	714	OUT	GET /components/TfcP3WYRyZ9A/cookie-banner.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:00 UTC	519	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:00 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 20 Aug 2024 14:15:00 GMT ETag: W/"66c4a4e4-1d83" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-c9e9a4a405dfe9c9e2f60f5af5cd2436 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 113 Server: cloudflare CF-RAY: 8cb7b7caaf4c0cc4-EWR
2024-09-30 22:41:00 UTC	850	IN	Data Raw: 31 64 38 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 22 2e 2f 73 72 63 2f 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 3b 76 61 72 20 61 3d 6e 28 2f 2a 21 20 2e 2f 75 74 69 6c 73 2f 43 6f 6f 6b 69 65 48 61 6e 64 6c 65 72 20 2a 2f 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 43 6f 6f 6b 69 65 48 61 6e 64 6c 65 72 2e 6a 73 22 Data Ascii: 1d83!function(){"use strict";var e={"./src/CookieBanner.js":/!***************************!\ !* ./src/CookieBanner.js ! \***************************/function(e,t,n){n.r(t);var a=n(/! ./utils/CookieHandler */"./src/utils/CookieHandler.js"
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 3d 27 64 61 74 61 4c 61 79 65 72 27 3f 27 26 6c 3d 27 2b 6c 3a 27 27 3b 6a 2e 61 73 79 6e 63 3d 74 72 75 65 3b 6a 2e 73 72 63 3d 5c 6e 20 20 20 20 20 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 6d 2e 6a 73 3f 69 64 3d 27 2b 69 2b 64 6c 3b 66 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6a 2c 66 29 3b 5c 6e 20 20 20 20 20 20 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 64 61 74 61 4c 61 79 65 72 27 2c 27 24 7b 74 68 69 73 2e 67 74 6d 49 64 7d 27 29 3b 60 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 63 53 65 74 74 69 6e Data Ascii: createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=\n 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);\n })(window,document,'script','dataLayer','${this.gtmId}');`;window.addEventListener("ucSettin
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 62 2c 20 73 29 3b 7d 29 28 29 3b 22 7d 2c 7b 64 65 74 61 69 6c 73 4e 61 6d 65 3a 22 48 6f 74 6a 61 72 22 2c 69 64 4e 61 6d 65 3a 22 68 6f 74 6a 61 72 53 6e 69 70 70 65 74 22 2c 69 6e 6e 65 72 48 74 6d 6c 3a 22 28 66 75 6e 63 74 69 6f 6e 20 28 68 2c 20 6f 2c 20 74 2c 20 6a 2c 20 61 2c 20 72 29 20 7b 5c 6e 20 20 20 20 20 20 68 2e 68 6a 20 3d 20 68 2e 68 6a 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 28 68 2e 68 6a 2e 71 20 3d 20 68 2e 68 6a 2e 71 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 5c 6e 20 20 20 20 20 20 7d 3b 5c 6e 20 20 20 20 20 20 68 2e 5f 68 6a 53 65 74 74 69 6e 67 73 20 3d 20 7b 5c 6e 20 20 20 20 20 20 20 20 68 Data Ascii: parentNode.insertBefore(b, s);})();"},{detailsName:"Hotjar",idName:"hotjarSnippet",innerHtml:"(function (h, o, t, j, a, r) {\n h.hj = h.hj \|\| function () {\n (h.hj.q = h.hj.q \|\| []).push(arguments)\n };\n h._hjSettings = {\n h
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 74 2e 61 73 79 6e 63 3d 21 30 2c 74 2e 69 64 3d 65 2e 69 64 4e 61 6d 65 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 2e 69 6e 6e 65 72 48 74 6d 6c 2c 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 22 21 3d 3d 65 2e 64 65 74 61 69 6c 73 4e 61 6d 65 7c 7c 61 29 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 28 74 29 7d 7d 65 6c 73 65 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 23 24 7b 65 2e 69 64 4e 61 6d 65 7d 60 29 3b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 23 24 7b 65 2e 69 64 4e 61 6d 65 7d 60 29 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 72 65 6d 6f Data Ascii: ocument.createElement("script");t.async=!0,t.id=e.idName,t.innerHTML=e.innerHtml,("Facebook Pixel"!==e.detailsName\|\|a)&&document.body.append(t)}}else{const t=document.querySelector(`#${e.idName}`);document.querySelector(`#${e.idName}`)&&document.body.remo
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 74 2e 64 65 66 61 75 6c 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 3d 65 7d 77 72 69 74 65 28 65 2c 74 2c 6e 3d 7b 7d 29 7b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 60 24 7b 65 7d 3d 24 7b 74 7d 3b 24 7b 74 68 69 73 2e 6d 61 6e 67 6c 65 4f 70 74 69 6f 6e 73 28 6e 29 7d 60 7d 72 65 61 64 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 60 28 5e 7c 20 29 24 7b 65 7d 3d 28 5b 5e 3b 5d 2b 29 60 29 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 6c 65 6e 67 74 68 3e 31 3f 74 5b 32 5d 3a 6e 75 6c 6c 7d 65 78 69 73 74 73 28 Data Ascii: ction(e,t,n){n.r(t),t.default=class{constructor(e){this.document=e}write(e,t,n={}){this.document.cookie=`${e}=${t};${this.mangleOptions(n)}`}read(e){const t=this.document.cookie.match(new RegExp(`(^\| )${e}=([^;]+)`));return t&&t.length>1?t[2]:null}exists(
2024-09-30 22:41:00 UTC	1237	IN	Data Raw: 28 74 29 2c 6e 2e 64 28 74 2c 7b 65 78 70 69 72 65 44 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 67 65 74 48 6f 73 74 6e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 7d 2c 22 2e 2f 73 72 63 2f 69 31 38 6e 2f 6c 61 6e 67 75 61 67 65 4d 61 70 70 69 6e 67 2e 6a 73 6f 6e 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 69 31 38 6e 2f 6c 61 6e 67 75 61 67 65 4d 61 70 70 69 6e 67 2e 6a 73 6f 6e 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e Data Ascii: (t),n.d(t,{expireDate:function(){return a},getHostname:function(){return i}})},"./src/i18n/languageMapping.json":/!*************************************!\ !* ./src/i18n/languageMapping.json ! \**************************************/function
2024-09-30 22:41:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	49775	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:00 UTC	560	OUT	GET /fileadmin/user_upload/Park_Domains/Parking_einrichten.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:00 UTC	492	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:00 GMT Content-Type: image/jpeg Content-Length: 47523 Connection: close Age: 1069 Cf-Bgj: h2pri ETag: "6321aef7-b9a3" Last-Modified: Wed, 14 Sep 2022 10:37:43 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-4487054963bf0b0976fa0262c9bfd021 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7caadeb42c3-EWR
2024-09-30 22:41:00 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0c 6a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 07 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 62 00 00 00 1b 01 05 00 01 00 00 00 6a 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 72 00 00 00 32 01 02 00 14 00 00 00 8e 00 00 00 69 87 04 00 01 00 00 00 a4 00 00 00 d0 00 00 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 00 32 30 31 36 3a 30 38 3a 31 30 20 31 32 3a 30 32 3a 32 32 00 00 00 03 00 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 8c 05 00 00 03 a0 04 00 01 00 00 00 3a 04 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 Data Ascii: JFIFHHjExifII*bj(1r2i''Adobe Photoshop CS4 Windows2016:08:10 12:02:22:
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: e8 d8 2f ac bf e8 6e 1b a7 8e 56 d9 99 d7 95 ca 65 f5 21 45 de 93 6b f5 0b 63 79 26 39 d7 6b 74 2b 46 8c fc 87 50 c3 55 8e 15 bd a0 b6 60 90 3c 24 ab 79 71 19 51 1a 79 b4 b0 e7 8c 78 a2 75 f2 65 9b 91 4d b9 af 65 60 87 56 36 bc 91 00 b9 a6 1d 08 29 40 dc 5d f9 ce fa 4e ee 7e 25 24 ec 71 31 8d 13 75 f9 23 24 a3 29 13 11 57 f9 a9 24 92 4e 58 a4 92 4c 92 94 92 49 24 a5 24 92 49 29 49 26 4b 94 94 83 3f 28 e2 e2 be e6 ea fd 1b 58 3c 6e 77 d1 ff 00 37 e9 ae 64 97 39 c5 cf 25 ce 71 97 38 ea 49 3d ca e9 f3 70 59 99 48 a9 ef 75 7b 5d bc 39 a0 1d 60 b7 dc d7 7f 59 73 d9 78 96 e1 de 69 b6 0e 81 cd 70 e1 cd 3f 9c d9 52 61 94 4d 80 75 59 96 13 14 48 d1 02 3e 1e 5b f0 ef 6d cd 9d bc 5a cf de 67 e7 0f eb 7e e2 02 67 46 d3 f0 53 55 b1 5d 3d 76 9d 8c 8e c7 c9 25 1a 9a e6 Data Ascii: /nVe!Ekcy&9kt+FPU`<$yqQyxueMe`V6)@]N~%$q1u#$)W$NXLI$$I)I&K?(X<nw7d9%q8I=pYHu{]9`Ysxip?RaMuYH>[mZg~gFSU]=v%
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: d1 d9 fe 6b 93 1a ed 11 2c 78 93 02 43 b5 3e 01 34 02 05 09 0f b3 ff 00 42 5c 48 26 cc 4f db ff 00 a0 b6 7f 65 66 7f 23 fc e3 ff 00 91 4b f6 56 67 f2 3f ce 3f f9 15 1a da da b1 1f 6d b4 07 bc 58 1a d1 60 70 d0 84 d9 74 9d f5 ba 9a 8b 5a fa 98 e2 18 1c 44 99 25 0b 95 d5 8f 3a ff 00 d0 93 51 ab e1 3e 57 ff 00 a0 ad 7e 06 4d 34 ba c7 86 ed 6f 3b 4c 9d 74 f0 56 3a 8e b8 b8 ee 1c 69 af c5 81 51 15 da e0 0b 58 f7 03 c1 0d 71 05 5e c4 7d 79 58 c7 0e d3 0f 6f d0 3d e0 7d 12 df e5 d7 fb a9 4a c5 48 9b e1 3a d7 62 a8 d1 b8 81 5c 43 4b ee 1c f4 91 ec c1 cb ac c7 a6 5e 3b 39 9a 83 ff 00 7e 6a 9e 26 3b 9b 78 fb 46 3b dd 59 04 6a d3 00 9e 1c ef e4 a7 f1 0a bb b5 82 12 ba 22 bc d1 e1 7f 4c a7 fa e3 f2 15 3e a5 fd 31 df d5 67 e4 4f 99 86 fc 57 8b 6a 27 d2 9d 08 e5 87 c0 Data Ascii: k,xC>4B\H&Oef#KVg??mX`ptZD%:Q>W~M4o;LtV:iQXq^}yXo=}JH:b\CK^;9~j&;xF;Yj"L>1gOWj'
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 10 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 1e 00 00 00 00 00 04 00 00 00 00 38 42 49 4d 04 1a 00 00 00 00 03 59 00 00 00 06 00 00 00 00 00 00 00 00 00 00 04 3a 00 00 05 8c 00 00 00 12 00 50 00 61 00 72 00 6b 00 69 00 6e 00 67 00 5f 00 65 00 69 00 6e 00 72 00 69 00 63 00 68 00 74 00 65 00 6e 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 05 8c 00 00 04 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 00 00 00 02 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 Data Ascii: @@8BIM8BIMY:Parking_einrichten:nullboundsObjcRct1Top longLef
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ec e8 d8 2f ac bf e8 6e 1b a7 8e 56 d9 99 d7 95 ca 65 f5 21 45 de 93 6b f5 0b 63 79 26 39 d7 6b 74 2b 46 8c fc 87 50 c3 55 8e 15 bd a0 b6 60 90 3c 24 ab 79 71 19 51 1a 79 b4 b0 e7 8c 78 a2 75 f2 65 9b 91 4d b9 af 65 60 87 56 36 bc 91 00 b9 a6 1d 08 Data Ascii: Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?/nVe!Ekcy&9kt+FPU`<$yqQyxueMe`V6
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: ba 12 f3 dd b5 95 81 65 0d f5 1a 7d 4a c6 a4 f0 40 f1 70 fd df e5 2a aa ef 4d c9 73 6d 18 ee d6 b7 ce d0 7b 18 98 fe ab d5 6c aa 85 39 0f a9 bf 44 19 6f c0 8d cd 4e 89 36 63 2d 4e e0 f7 0b 64 05 09 47 41 b1 1d 8a 34 93 24 9c b1 49 24 92 4a 7f ff d3 eb 92 49 32 be e6 ae 99 24 92 52 95 ea 58 fc 8c 2a d9 43 80 b6 87 ee 20 fc 5c 5a 7f e9 2a 20 12 60 09 27 80 35 2a 5e 8d df e8 df fe 6b bf b9 09 0b ad 6a b5 5d 13 57 a5 d8 a6 fe 46 37 50 c8 da 1e 2b 68 6e a0 34 9e 4f e7 6a 10 7f 65 e6 7f 23 fc e3 ff 00 91 55 bd 2b ff 00 d1 d9 fe 6b 93 1a ed 11 2c 78 93 02 43 b5 3e 01 34 02 05 09 0f b3 ff 00 42 5c 48 26 cc 4f db ff 00 a0 b6 7f 65 66 7f 23 fc e3 ff 00 91 4b f6 56 67 f2 3f ce 3f f9 15 1a da da b1 1f 6d b4 07 bc 58 1a d1 60 70 d0 84 d9 74 9d f5 ba 9a 8b 5a fa 98 e2 Data Ascii: e}J@pMsm{l9DoN6c-NdGA4$I$JI2$RXC \Z* `'5*^kj]WF7P+hn4Oje#U+k,xC>4B\H&Oef#KVg??mX`ptZ
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 34 2e 32 2e 32 2d 63 30 36 33 20 35 33 2e 33 35 32 36 32 34 2c 20 32 30 30 38 2f 30 37 2f 33 30 2d 31 38 3a 31 32 3a 31 38 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 Data Ascii: :xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 2c 33 37 31 32 31 2c 33 37 31 32 32 2c 34 30 39 36 32 2c 34 30 39 36 33 2c 33 37 35 31 30 2c 34 30 39 36 34 2c 33 36 38 36 37 2c 33 36 38 36 38 2c 33 33 34 33 34 2c 33 33 34 33 37 2c 33 34 38 35 30 2c 33 34 38 35 32 2c 33 34 38 35 35 2c 33 34 38 35 36 2c 33 37 33 37 37 2c 33 37 33 37 38 2c 33 37 33 37 39 2c 33 37 33 38 30 2c 33 37 33 38 31 2c 33 37 33 38 32 2c 33 37 33 38 33 2c 33 37 33 38 34 2c 33 37 33 38 35 2c 33 37 33 38 36 2c 33 37 33 39 36 2c 34 31 34 38 33 2c 34 31 34 38 34 2c 34 31 34 38 36 2c 34 31 34 38 37 2c 34 31 34 38 38 2c 34 31 34 39 32 2c 34 31 34 39 33 2c 34 31 34 39 35 2c 34 31 37 32 38 2c 34 31 37 32 39 2c 34 31 37 33 30 2c 34 31 39 38 35 2c 34 31 39 38 36 2c 34 31 39 38 37 2c 34 31 39 38 38 2c 34 31 39 38 39 2c 34 31 39 39 30 2c 34 31 Data Ascii: ,37121,37122,40962,40963,37510,40964,36867,36868,33434,33437,34850,34852,34855,34856,37377,37378,37379,37380,37381,37382,37383,37384,37385,37386,37396,41483,41484,41486,41487,41488,41492,41493,41495,41728,41729,41730,41985,41986,41987,41988,41989,41990,41
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-09-30 22:41:00 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	49776	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	718	OUT	GET /c7r/assets/static/libs/external/jquery-ui.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:01 UTC	521	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 20 Aug 2024 09:45:32 GMT ETag: W/"66c465bc-3e3f1" X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-3bc5650fc1eebb7f4604ffa2c80f4753 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1036 Server: cloudflare CF-RAY: 8cb7b7cdd996c35b-EWR
2024-09-30 22:41:01 UTC	848	IN	Data Raw: 37 64 39 35 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 33 20 2d 20 32 30 32 34 2d 30 36 2d 31 31 0a 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6a 71 75 65 72 79 2d 70 61 74 63 68 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 Data Ascii: 7d95/! jQuery UI - v1.13.3 - 2024-06-11 https://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, wi
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 2f 65 66 66 65 63 74 2d 66 6f 6c 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 68 69 67 68 6c 69 67 68 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 70 75 66 66 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 70 75 6c 73 61 74 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 63 61 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 68 61 6b 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 69 7a 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 6c 69 64 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 74 72 61 6e 73 66 65 72 2e 6a 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e Data Ascii: /effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js* Copyright OpenJS Foundation an
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 65 72 2c 69 3d 74 68 69 73 2e 5f 73 75 70 65 72 41 70 70 6c 79 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 75 70 65 72 3d 6e 2c 74 68 69 73 2e 5f 73 75 70 65 72 41 70 70 6c 79 3d 6f 2c 74 3d 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 5f 73 75 70 65 72 3d 65 2c 74 68 69 73 2e 5f 73 75 70 65 72 41 70 70 6c 79 3d 69 2c 74 7d 7d 29 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 6f 2c 7b 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 73 26 26 6f 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 7c 7c 74 7d 2c 61 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 6e 61 6d 65 73 70 61 63 65 3a 72 2c 77 69 64 67 65 74 4e 61 6d 65 3a 74 2c 77 69 64 67 65 74 46 75 6c 6c 4e Data Ascii: er,i=this._superApply;return this._super=n,this._superApply=o,t=s.apply(this,arguments),this._super=e,this._superApply=i,t}}),n.prototype=V.widget.extend(o,{widgetEventPrefix:s&&o.widgetEventPrefix\|\|t},a,{constructor:n,namespace:r,widgetName:t,widgetFullN
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 6f 6e 28 69 7c 7c 7b 7d 29 2c 74 2e 5f 69 6e 69 74 26 26 74 2e 5f 69 6e 69 74 28 29 29 3a 56 2e 64 61 74 61 28 74 68 69 73 2c 61 2c 6e 65 77 20 65 28 69 2c 74 68 69 73 29 29 7d 29 29 2c 6e 7d 7d 2c 56 2e 57 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 56 2e 57 69 64 67 65 74 2e 5f 63 68 69 6c 64 43 6f 6e 73 74 72 75 63 74 6f 72 73 3d 5b 5d 2c 56 2e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 77 69 64 67 65 74 4e 61 6d 65 3a 22 77 69 64 67 65 74 22 2c 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 22 22 2c 64 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 3a 22 3c 64 69 76 3e 22 2c 6f 70 74 69 6f 6e 73 3a 7b 63 6c 61 73 73 65 73 3a 7b 7d 2c 64 69 73 61 62 6c 65 64 3a 21 31 2c 63 72 65 61 74 65 3a 6e 75 6c 6c 7d 2c 5f 63 72 65 61 74 65 Data Ascii: on(i\|\|{}),t._init&&t._init()):V.data(this,a,new e(i,this))})),n}},V.Widget=function(){},V.Widget._childConstructors=[],V.Widget.prototype={widgetName:"widget",widgetEventPrefix:"",defaultElement:"<div>",options:{classes:{},disabled:!1,create:null},_create
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 7d 2c 6f 70 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 73 2c 6e 2c 6f 3d 74 3b 69 66 28 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 69 66 28 6f 3d 7b 7d 2c 74 3d 28 69 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 29 2e 73 68 69 66 74 28 29 2c 69 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 73 3d 6f 5b 74 5d 3d 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 74 5d 29 2c 6e 3d 30 3b 6e 3c 69 2e Data Ascii: t:function(){return this.element},option:function(t,e){var i,s,n,o=t;if(0===arguments.length)return V.widget.extend({},this.options);if("string"==typeof t)if(o={},t=(i=t.split(".")).shift(),i.length){for(s=o[t]=V.widget.extend({},this.options[t]),n=0;n<i.
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 5b 74 5b 73 5d 5d 7c 7c 56 28 29 2c 69 3d 6e 2e 61 64 64 3f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 5b 5d 3b 6e 2e 65 6c 65 6d 65 6e 74 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 56 2e 6d 61 70 28 61 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 29 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 73 28 65 29 7d 29 7c 7c 69 2e 70 75 73 68 28 65 29 7d 29 2c 61 2e 5f 6f 6e 28 56 28 69 29 2c 7b 72 65 6d 6f 76 65 3a 22 5f 75 6e 74 72 61 63 6b 43 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 22 7d 29 7d 28 29 2c 56 28 56 2e 75 6e 69 71 75 65 53 6f 72 74 28 69 2e 67 65 74 28 29 2e 63 Data Ascii: ElementLookup[t[s]]\|\|V(),i=n.add?(function(){var i=[];n.element.each(function(t,e){V.map(a.classesElementLookup,function(t){return t}).some(function(t){return t.is(e)})\|\|i.push(e)}),a._on(V(i),{remove:"_untrackClassesElement"})}(),V(V.uniqueSort(i.get().c
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 6f 66 20 65 3f 72 5b 65 5d 3a 65 29 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 28 69 2e 67 75 69 64 3d 65 2e 67 75 69 64 3d 65 2e 67 75 69 64 7c 7c 69 2e 67 75 69 64 7c 7c 56 2e 67 75 69 64 2b 2b 29 3b 76 61 72 20 74 3d 74 2e 6d 61 74 63 68 28 2f 5e 28 5b 5c 77 3a 2d 5d 2a 29 5c 73 2a 28 2e 2a 29 24 2f 29 2c 73 3d 74 5b 31 5d 2b 72 2e 65 76 65 6e 74 4e 61 6d 65 73 70 61 63 65 2c 74 3d 74 5b 32 5d 3b 74 3f 61 2e 6f 6e 28 73 2c 74 2c 69 29 3a 6f 2e 6f 6e 28 73 2c 69 29 7d 29 7d 2c 5f 6f 66 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 65 3d 28 65 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2e 6a 6f 69 6e 28 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 73 70 61 63 65 2b 22 20 22 Data Ascii: of e?r[e]:e).apply(r,arguments)}"string"!=typeof e&&(i.guid=e.guid=e.guid\|\|i.guid\|\|V.guid++);var t=t.match(/^([\w:-])\s(.*)$/),s=t[1]+r.eventNamespace,t=t[2];t?a.on(s,t,i):o.on(s,i)})},_off:function(t,e){e=(e\|\|"").split(" ").join(this.eventNamespace+" "
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 29 29 7d 7d 2c 56 2e 65 61 63 68 28 7b 73 68 6f 77 3a 22 66 61 64 65 49 6e 22 2c 68 69 64 65 3a 22 66 61 64 65 4f 75 74 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 56 2e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 5b 22 5f 22 2b 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 73 2c 6e 3d 28 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 7b 65 66 66 65 63 74 3a 74 7d 3a 74 29 3f 21 30 21 3d 3d 74 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 65 66 66 65 63 74 7c 7c 61 3a 6f 3b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 74 3d 74 7c 7c 7b 7d 29 3f 74 3d 7b 64 75 72 61 74 69 6f 6e 3a 74 7d 3a 21 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 73 3d 21 56 2e 69 73 45 6d 70 74 79 4f 62 Data Ascii: ))}},V.each({show:"fadeIn",hide:"fadeOut"},function(o,a){V.Widget.prototype["_"+o]=function(e,t,i){var s,n=(t="string"==typeof t?{effect:t}:t)?!0!==t&&"number"!=typeof t&&t.effect\|\|a:o;"number"==typeof(t=t\|\|{})?t={duration:t}:!0===t&&(t={}),s=!V.isEmptyOb
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 74 6f 22 3d 3d 3d 69 26 26 74 2e 68 65 69 67 68 74 3c 74 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3f 56 2e 70 6f 73 69 74 69 6f 6e 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 28 29 3a 30 2c 68 65 69 67 68 74 3a 65 3f 56 2e 70 6f 73 69 74 69 6f 6e 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 28 29 3a 30 7d 7d 2c 67 65 74 57 69 74 68 69 6e 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 56 28 74 7c 7c 77 69 6e 64 6f 77 29 2c 69 3d 49 28 65 5b 30 5d 29 2c 73 3d 21 21 65 5b 30 5d 26 26 39 3d 3d 3d 65 5b 30 5d 2e 6e 6f 64 65 54 79 70 65 3b 72 65 74 75 72 6e 7b 65 6c 65 6d 65 6e 74 3a 65 2c 69 73 57 69 6e 64 6f 77 3a 69 2c 69 73 44 6f 63 75 6d 65 6e 74 3a 73 2c 6f 66 66 73 65 74 3a 21 69 26 26 21 73 3f 56 28 Data Ascii: to"===i&&t.height<t.element[0].scrollHeight?V.position.scrollbarWidth():0,height:e?V.position.scrollbarWidth():0}},getWithinInfo:function(t){var e=V(t\|\|window),i=I(e[0]),s=!!e[0]&&9===e[0].nodeType;return{element:e,isWindow:i,isDocument:s,offset:!i&&!s?V(
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 26 26 28 79 5b 31 5d 3d 79 5b 30 5d 29 2c 22 72 69 67 68 74 22 3d 3d 3d 75 2e 61 74 5b 30 5d 3f 6d 2e 6c 65 66 74 2b 3d 70 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 75 2e 61 74 5b 30 5d 26 26 28 6d 2e 6c 65 66 74 2b 3d 70 2f 32 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 75 2e 61 74 5b 31 5d 3f 6d 2e 74 6f 70 2b 3d 66 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 75 2e 61 74 5b 31 5d 26 26 28 6d 2e 74 6f 70 2b 3d 66 2f 32 29 2c 64 3d 43 28 77 2e 61 74 2c 70 2c 66 29 2c 6d 2e 6c 65 66 74 2b 3d 64 5b 30 5d 2c 6d 2e 74 6f 70 2b 3d 64 5b 31 5d 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 74 2c 61 3d 56 28 74 68 69 73 29 2c 72 3d 61 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 6c 3d 61 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 65 3d 44 28 74 Data Ascii: &&(y[1]=y[0]),"right"===u.at[0]?m.left+=p:"center"===u.at[0]&&(m.left+=p/2),"bottom"===u.at[1]?m.top+=f:"center"===u.at[1]&&(m.top+=f/2),d=C(w.at,p,f),m.left+=d[0],m.top+=d[1],this.each(function(){var i,t,a=V(this),r=a.outerWidth(),l=a.outerHeight(),e=D(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	49777	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	737	OUT	GET /fileadmin_git/resources/public/JavaScripts/splide.min.js?1724921946 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:01 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 29 Aug 2024 08:59:06 GMT X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-fe05afc00c8d315513df8af28c386d22 ETag: W/"66d0385a-746a" X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4220 Server: cloudflare CF-RAY: 8cb7b7ce08221a1f-EWR
2024-09-30 22:41:01 UTC	849	IN	Data Raw: 37 34 36 61 0d 0a 66 75 6e 63 74 69 6f 6e 20 72 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 69 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 72 2e 6b 65 79 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4a 74 28 6e 2c 74 2c 69 29 7b 74 26 26 72 28 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 69 26 26 72 28 6e 2c 69 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 70 72 6f 74 6f 74 79 70 65 Data Ascii: 746afunction r(n,t){for(var i=0;i<t.length;i++){var r=t[i];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(n,r.key,r)}}function Jt(n,t,i){t&&r(n.prototype,t),i&&r(n,i),Object.defineProperty(n,"prototype
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 72 61 79 2e 69 73 41 72 72 61 79 2c 78 3d 52 28 75 2c 22 66 75 6e 63 74 69 6f 6e 22 29 2c 43 3d 52 28 75 2c 22 73 74 72 69 6e 67 22 29 2c 65 6e 3d 52 28 75 2c 22 75 6e 64 65 66 69 6e 65 64 22 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 6e 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 20 69 6e 73 74 61 6e 63 65 6f 66 28 6e 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 6e 29 7b 72 65 74 75 72 6e 20 65 28 6e 29 3f 6e 3a 5b 6e 5d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 6e 2c 74 29 7b 79 28 6e 29 2e Data Ascii: ray.isArray,x=R(u,"function"),C=R(u,"string"),en=R(u,"undefined");function c(n){return null===n}function m(n){try{return n instanceof(n.ownerDocument.defaultView\|\|window).HTMLElement}catch(n){return!1}}function y(n){return e(n)?n:[n]}function g(n,t){y(n).
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 74 29 3a 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 53 74 72 69 6e 67 28 72 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 6e 2c 74 2c 69 29 7b 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6e 29 3b 72 65 74 75 72 6e 20 74 26 26 28 43 28 74 29 3f 4d 3a 49 29 28 6e 2c 74 29 2c 69 26 26 4c 28 69 2c 6e 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 6e 2c 74 2c 69 29 7b 69 66 28 65 6e 28 69 29 29 72 65 74 75 72 6e 20 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 6e 29 5b 74 5d 3b 63 28 69 29 7c 7c 28 6e 2e 73 74 79 6c 65 5b 74 5d 3d 22 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 6e 28 6e 2c 74 29 7b 5f 28 6e 2c 22 64 69 73 70 6c 61 79 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 6e 28 6e 29 7b 6e 2e 73 65 74 41 63 74 Data Ascii: t):n.setAttribute(t,String(r))})}function j(n,t,i){n=document.createElement(n);return t&&(C(t)?M:I)(n,t),i&&L(i,n),n}function _(n,t,i){if(en(i))return getComputedStyle(n)[t];c(i)\|\|(n.style[t]=""+i)}function ln(n,t){_(n,"display",t)}function dn(n){n.setAct
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 63 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 69 2c 72 29 7b 67 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 26 26 67 28 69 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3d 6e 2e 73 70 6c 69 74 28 22 2e 22 29 3b 72 28 74 2c 6e 5b 30 5d 2c 6e 5b 31 5d 29 7d 29 7d 29 7d 29 7d 72 65 74 75 72 6e 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 2c 65 29 7b 69 28 6e 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 3d 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 69 6e 20 6e 2c 6f 3d 72 3f 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2e 62 69 6e 64 28 6e 2c 74 2c 75 2c 65 29 3a 6e Data Ascii: ){var c=[];function i(n,i,r){g(n,function(t){t&&g(i,function(n){n.split(" ").forEach(function(n){n=n.split(".");r(t,n[0],n[1])})})})}return{bind:function(n,t,u,e){i(n,t,function(n,t,i){var r="addEventListener"in n,o=r?n.removeEventListener.bind(n,t,u,e):n
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 6e 20 73 28 29 7b 69 66 28 21 66 29 7b 69 66 28 63 3d 74 3f 59 28 28 65 28 29 2d 6f 29 2f 74 2c 31 29 3a 31 2c 69 26 26 69 28 63 29 2c 31 3c 3d 63 26 26 28 6e 28 29 2c 6f 3d 65 28 29 2c 72 26 26 2b 2b 61 3e 3d 72 29 29 72 65 74 75 72 6e 20 6c 28 29 3b 75 3d 68 28 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 66 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 75 26 26 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 75 29 2c 66 3d 21 28 75 3d 63 3d 30 29 7d 72 65 74 75 72 6e 7b 73 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 7c 7c 64 28 29 2c 6f 3d 65 28 29 2d 28 6e 3f 63 2a 74 3a 30 29 2c 66 3d 21 31 2c 75 3d 68 28 73 29 7d 2c 72 65 77 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 3d 65 28 29 2c 63 3d 30 2c 69 26 26 69 28 Data Ascii: n s(){if(!f){if(c=t?Y((e()-o)/t,1):1,i&&i(c),1<=c&&(n(),o=e(),r&&++a>=r))return l();u=h(s)}}function l(){f=!0}function d(){u&&cancelAnimationFrame(u),f=!(u=c=0)}return{start:function(n){n\|\|d(),o=e()-(n?c*t:0),f=!1,u=h(s)},rewind:function(){o=e(),c=0,i&&i(
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 20 65 2c 6e 3d 51 28 6f 29 2c 69 3d 6e 2e 6f 6e 2c 63 3d 6e 2e 65 6d 69 74 2c 66 3d 6e 2e 62 69 6e 64 2c 61 3d 6f 2e 43 6f 6d 70 6f 6e 65 6e 74 73 2c 73 3d 6f 2e 72 6f 6f 74 2c 6c 3d 6f 2e 6f 70 74 69 6f 6e 73 2c 64 3d 6c 2e 69 73 4e 61 76 69 67 61 74 69 6f 6e 2c 76 3d 6c 2e 75 70 64 61 74 65 4f 6e 4d 6f 76 65 2c 68 3d 6c 2e 69 31 38 6e 2c 70 3d 6c 2e 70 61 67 69 6e 61 74 69 6f 6e 2c 67 3d 6c 2e 73 6c 69 64 65 46 6f 63 75 73 2c 6d 3d 61 2e 44 69 72 65 63 74 69 6f 6e 2e 72 65 73 6f 6c 76 65 2c 79 3d 7a 28 75 2c 22 73 74 79 6c 65 22 29 2c 62 3d 7a 28 75 2c 6e 6e 29 2c 77 3d 2d 31 3c 74 2c 78 3d 66 6e 28 75 2c 22 2e 22 2b 6c 74 29 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 76 61 72 20 6e 3d 6f 2e 73 70 6c 69 64 65 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: e,n=Q(o),i=n.on,c=n.emit,f=n.bind,a=o.Components,s=o.root,l=o.options,d=l.isNavigation,v=l.updateOnMove,h=l.i18n,p=l.pagination,g=l.slideFocus,m=a.Direction.resolve,y=z(u,"style"),b=z(u,nn),w=-1<t,x=fn(u,"."+lt);function k(){var n=o.splides.map(function(
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 74 2c 69 29 7b 5f 28 69 26 26 78 7c 7c 75 2c 6e 2c 74 29 7d 2c 69 73 57 69 74 68 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 3d 55 28 6e 2d 72 29 2c 28 6e 3d 77 7c 7c 21 6c 2e 72 65 77 69 6e 64 26 26 21 6f 2e 69 73 28 50 74 29 3f 6e 3a 59 28 6e 2c 6f 2e 6c 65 6e 67 74 68 2d 6e 29 29 3c 3d 74 7d 7d 3b 72 65 74 75 72 6e 20 4f 7d 76 61 72 20 43 74 3d 66 2b 22 2d 69 6e 74 65 72 76 61 6c 22 3b 76 61 72 20 6a 74 3d 7b 70 61 73 73 69 76 65 3a 21 31 2c 63 61 70 74 75 72 65 3a 21 30 7d 3b 76 61 72 20 4e 74 3d 7b 53 70 61 63 65 62 61 72 3a 22 20 22 2c 52 69 67 68 74 3a 48 6e 2c 4c 65 66 74 3a 42 6e 2c 55 70 3a 74 2c 44 6f 77 6e 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 43 28 6e 29 3f 6e 3a 6e Data Ascii: t,i){_(i&&x\|\|u,n,t)},isWithin:function(n,t){return n=U(n-r),(n=w\|\|!l.rewind&&!o.is(Pt)?n:Y(n,o.length-n))<=t}};return O}var Ct=f+"-interval";var jt={passive:!1,capture:!0};var Nt={Spacebar:" ",Right:Hn,Left:Bn,Up:t,Down:n};function Tt(n){return n=C(n)?n:n
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 65 72 43 61 73 65 28 29 2b 6e 2e 73 6c 69 63 65 28 31 29 3a 6e 7d 29 7d 2c 6f 72 69 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2a 28 22 72 74 6c 22 3d 3d 3d 6f 2e 64 69 72 65 63 74 69 6f 6e 3f 31 3a 2d 31 29 7d 7d 7d 2c 45 6c 65 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 2c 6f 2c 75 2c 65 3d 51 28 6e 29 2c 63 3d 65 2e 6f 6e 2c 66 3d 65 2e 62 69 6e 64 2c 61 3d 6e 2e 72 6f 6f 74 2c 73 3d 69 2e 69 31 38 6e 2c 6c 3d 7b 7d 2c 64 3d 5b 5d 2c 76 3d 5b 5d 2c 68 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 72 3d 79 28 22 2e 22 2b 63 74 29 2c 6f 3d 66 6e 28 72 2c 22 2e 22 2b 66 74 29 2c 62 6e 28 72 26 26 6f 2c 22 41 20 74 72 61 63 6b 2f 6c 69 73 74 20 65 6c 65 6d 65 6e 74 20 69 73 20 6d 69 73 Data Ascii: erCase()+n.slice(1):n})},orient:function(n){return n*("rtl"===o.direction?1:-1)}}},Elements:function(n,t,i){var r,o,u,e=Q(n),c=e.on,f=e.bind,a=n.root,s=i.i18n,l={},d=[],v=[],h=[];function p(){r=y("."+ct),o=fn(r,"."+ft),bn(r&&o,"A track/list element is mis
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 65 6e 74 73 29 2e 73 6c 69 64 65 73 2c 61 3d 6e 2e 6c 69 73 74 2c 73 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 66 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 64 28 6e 2c 74 2c 2d 31 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 64 65 73 74 72 6f 79 28 29 7d 29 2c 44 28 73 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6e 2c 74 2c 69 29 7b 74 3d 52 74 28 72 2c 74 2c 69 2c 6e 29 3b 74 2e 6d 6f 75 6e 74 28 29 2c 73 2e 70 75 73 68 28 74 29 2c 73 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2e 69 6e 64 65 78 2d 74 2e 69 6e 64 65 78 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3f 70 28 66 75 6e 63 74 69 6f 6e 28 6e Data Ascii: ents).slides,a=n.list,s=[];function i(){f.forEach(function(n,t){d(n,t,-1)})}function l(){h(function(n){n.destroy()}),D(s)}function d(n,t,i){t=Rt(r,t,i,n);t.mount(),s.push(t),s.sort(function(n,t){return n.index-t.index})}function v(n){return n?p(function(n
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 69 6e 67 4c 65 66 74 22 29 2c 79 28 21 31 29 29 2c 5f 28 64 2c 73 28 22 70 61 64 64 69 6e 67 52 69 67 68 74 22 29 2c 79 28 21 30 29 29 2c 6d 28 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 6e 29 7b 76 61 72 20 74 3d 4e 28 6c 29 3b 21 6e 26 26 6f 2e 77 69 64 74 68 3d 3d 3d 74 2e 77 69 64 74 68 26 26 6f 2e 68 65 69 67 68 74 3d 3d 3d 74 2e 68 65 69 67 68 74 7c 7c 28 5f 28 64 2c 22 68 65 69 67 68 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 22 22 3b 72 26 26 28 62 6e 28 6e 3d 62 28 29 2c 22 68 65 69 67 68 74 20 6f 72 20 68 65 69 67 68 74 52 61 74 69 6f 20 69 73 20 6d 69 73 73 69 6e 67 2e 22 29 2c 6e 3d 22 63 61 6c 63 28 22 2b 6e 2b 22 20 2d 20 22 2b 79 28 21 31 29 2b 22 20 2d 20 22 2b 79 28 21 30 29 2b 22 29 22 29 3b 72 65 74 75 72 6e 20 6e 7d Data Ascii: ingLeft"),y(!1)),_(d,s("paddingRight"),y(!0)),m(!0)}function m(n){var t=N(l);!n&&o.width===t.width&&o.height===t.height\|\|(_(d,"height",function(){var n="";r&&(bn(n=b(),"height or heightRatio is missing."),n="calc("+n+" - "+y(!1)+" - "+y(!0)+")");return n}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	49778	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	736	OUT	GET /typo3temp/assets/js/4c6258062633129d69aecce4f0023d9c.js?1718178726 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:01 UTC	496	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Wed, 12 Jun 2024 07:52:06 GMT ETag: W/"666953a6-21f" X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-5438d15c3028d47f1ff5189aa42afe03 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1698 Server: cloudflare CF-RAY: 8cb7b7ce0e3c7d00-EWR
2024-09-30 22:41:01 UTC	550	IN	Data Raw: 32 31 66 0d 0a 20 20 20 20 20 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 24 28 20 22 2e 63 65 2d 61 63 63 6f 72 64 69 6f 6e 22 20 29 2e 61 63 63 6f 72 64 69 6f 6e 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6c 61 70 73 69 62 6c 65 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 65 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 63 6f 6e 73 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6c 61 70 73 69 62 6c 65 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 76 65 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 53 74 79 6c 65 3a 20 27 63 6f 6e 74 65 6e 74 27 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a Data Ascii: 21f $(function(){ $( ".ce-accordion" ).accordion({ collapsible: true, animate: false, icons: false, collapsible: true, active: false, heightStyle: 'content' });
2024-09-30 22:41:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	49779	104.16.141.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	935	OUT	GET /service/common.php?v=0.1&m=translate&f=getTexts&language=us&app=com.sedo.translation.global HTTP/1.1 Host: sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sedo.com/us/park-domains/?tracked=&partnerid=&language=us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8
2024-09-30 22:41:01 UTC	548	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:01 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache x-frame-options: sameorigin strict-transport-security: max-age=2592000 x-content-type-options: nosniff x-ua-compatible: IE=edge x-sedo-request-id: ID-848758bd5-kxgbq-d12bce8ace06de2e6a2bc25099307aa0 cache-control: no-store, no-cache, must-revalidate CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8cb7b7ce2e889e04-EWR
2024-09-30 22:41:01 UTC	821	IN	Data Raw: 34 35 62 0d 0a 7b 22 68 22 3a 7b 22 76 22 3a 22 30 2e 31 22 2c 22 73 22 3a 30 7d 2c 22 62 22 3a 7b 22 74 72 61 6e 73 6c 61 74 69 6f 6e 22 3a 7b 22 46 4f 4f 54 45 52 5f 4e 45 57 53 4c 45 54 54 45 52 5f 44 49 53 43 4c 41 49 4d 45 52 22 3a 22 59 65 73 2c 20 49 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 72 65 63 65 69 76 65 20 65 6d 61 69 6c 20 75 70 64 61 74 65 73 20 66 72 6f 6d 20 53 65 64 6f 2c 20 69 6e 63 6c 75 64 69 6e 67 20 64 6f 6d 61 69 6e 20 68 69 6e 74 73 2c 20 70 72 6f 64 75 63 74 20 6e 6f 76 65 6c 74 69 65 73 2c 20 64 6f 6d 61 69 6e 20 61 75 63 74 69 6f 6e 73 20 61 6e 64 20 6f 74 68 65 72 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 73 22 2c 22 46 4f 4f 54 45 52 5f 4e 45 57 53 4c 45 54 54 45 52 5f 45 4d 41 49 4c 5f 50 4c 41 43 45 48 4f 4c 44 45 52 Data Ascii: 45b{"h":{"v":"0.1","s":0},"b":{"translation":{"FOOTER_NEWSLETTER_DISCLAIMER":"Yes, I would like to receive email updates from Sedo, including domain hints, product novelties, domain auctions and other special events","FOOTER_NEWSLETTER_EMAIL_PLACEHOLDER
2024-09-30 22:41:01 UTC	301	IN	Data Raw: 45 52 4c 41 59 5f 53 45 41 52 43 48 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 3a 22 2e 63 6f 6d 2c 20 2e 63 6f 2e 75 6b 2c 20 2e 6e 65 74 2c 20 2e 6f 72 67 22 2c 22 48 45 41 44 45 52 5f 54 4c 44 5f 4f 56 45 52 4c 41 59 5f 54 49 54 4c 45 22 3a 22 44 69 73 70 6c 61 79 20 6f 6e 6c 79 20 64 6f 6d 61 69 6e 73 20 77 69 74 68 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 54 4c 44 73 22 2c 22 52 53 53 5f 46 49 45 4c 44 5f 43 55 52 52 45 4e 54 5f 42 49 44 22 3a 22 43 75 72 72 65 6e 74 20 42 69 64 22 2c 22 52 53 53 5f 46 49 45 4c 44 5f 50 52 49 43 45 22 3a 22 50 72 69 63 65 22 2c 22 52 53 53 5f 46 49 45 4c 44 5f 54 49 4d 45 5f 52 45 4d 41 49 4e 49 4e 47 22 3a 22 54 69 6d 65 20 72 65 6d 61 69 6e 69 6e 67 22 2c 22 74 65 78 74 61 72 65 61 5f 72 65 6d 61 69 6e 69 6e 67 5f Data Ascii: ERLAY_SEARCH_PLACEHOLDER":".com, .co.uk, .net, .org","HEADER_TLD_OVERLAY_TITLE":"Display only domains with the following TLDs","RSS_FIELD_CURRENT_BID":"Current Bid","RSS_FIELD_PRICE":"Price","RSS_FIELD_TIME_REMAINING":"Time remaining","textarea_remaining_
2024-09-30 22:41:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	49780	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	538	OUT	GET /dist/js/typo3/app.min.js?1724922195 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:01 UTC	521	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 29 Aug 2024 09:03:15 GMT X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-4e30bc8413ca8e1d6162b53846b369fd ETag: W/"66d03953-1f646" X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1985 Server: cloudflare CF-RAY: 8cb7b7ce3962c434-EWR
2024-09-30 22:41:01 UTC	848	IN	Data Raw: 37 64 39 35 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: 7d95/! For license information please see app.min.js.LICENSE.txt /!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 6e 2e 64 28 74 2c 22 61 22 2c 74 29 2c 74 7d 2c 6e 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 6e 2e 70 3d 22 2f 64 69 73 74 2f 22 2c 6e 28 6e 2e 73 3d 39 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 65 78 74 65 6e 64 3d 73 2c 74 2e 69 6e 64 65 78 4f 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 Data Ascii: ult}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/dist/",n(n.s=9)}([function(e,t,n){"use strict";t.__esModule=!0,t.extend=s,t.indexOf=function(e,t){for(var n=0,r=e.length;n<r;n++)if(
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 72 69 70 74 69 6f 6e 22 2c 22 66 69 6c 65 4e 61 6d 65 22 2c 22 6c 69 6e 65 4e 75 6d 62 65 72 22 2c 22 65 6e 64 4c 69 6e 65 4e 75 6d 62 65 72 22 2c 22 6d 65 73 73 61 67 65 22 2c 22 6e 61 6d 65 22 2c 22 6e 75 6d 62 65 72 22 2c 22 73 74 61 63 6b 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 6c 6f 63 2c 69 3d 76 6f 69 64 20 30 2c 61 3d 76 6f 69 64 20 30 2c 73 3d 76 6f 69 64 20 30 2c 75 3d 76 6f 69 64 20 30 3b 6e 26 26 28 69 3d 6e 2e 73 74 61 72 74 2e 6c 69 6e 65 2c 61 3d 6e 2e 65 6e 64 2e 6c 69 6e 65 2c 73 3d 6e 2e 73 74 61 72 74 2e 63 6f 6c 75 6d 6e 2c 75 3d 6e 2e 65 6e 64 2e 63 6f 6c 75 6d 6e 2c 65 2b 3d 22 20 2d 20 22 2b 69 2b 22 3a 22 2b 73 29 3b 66 6f 72 28 76 61 72 20 6c 3d 45 72 72 6f 72 2e 70 72 6f 74 6f 74 Data Ascii: ription","fileName","lineNumber","endLineNumber","message","name","number","stack"];function o(e,t){var n=t&&t.loc,i=void 0,a=void 0,s=void 0,u=void 0;n&&(i=n.start.line,a=n.end.line,s=n.start.column,u=n.end.column,e+=" - "+i+":"+s);for(var l=Error.protot
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 5f 43 48 41 4e 47 45 53 3d 7b 31 3a 22 3c 3d 20 31 2e 30 2e 72 63 2e 32 22 2c 32 3a 22 3d 3d 20 31 2e 30 2e 30 2d 72 63 2e 33 22 2c 33 3a 22 3d 3d 20 31 2e 30 2e 30 2d 72 63 2e 34 22 2c 34 3a 22 3d 3d 20 31 2e 78 2e 78 22 2c 35 3a 22 3d 3d 20 32 2e 30 2e 30 2d 61 6c 70 68 61 2e 78 22 2c 36 3a 22 3e 3d 20 32 2e 30 2e 30 2d 62 65 74 61 2e 31 22 2c 37 3a 22 3e 3d 20 34 2e 30 2e 30 20 3c 34 2e 33 2e 30 22 2c 38 3a 22 3e 3d 20 34 2e 33 2e 30 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 68 65 6c 70 65 72 73 3d 65 7c 7c 7b 7d 2c 74 68 69 73 2e 70 61 72 74 69 61 6c 73 3d 74 7c 7c 7b 7d 2c 74 68 69 73 2e 64 65 63 6f 72 61 74 6f 72 73 3d 6e 7c 7c 7b 7d 2c 61 2e 72 65 67 69 73 74 65 72 44 65 66 61 75 6c 74 48 65 6c 70 65 72 73 28 74 Data Ascii: _CHANGES={1:"<= 1.0.rc.2",2:"== 1.0.0-rc.3",3:"== 1.0.0-rc.4",4:"== 1.x.x",5:"== 2.0.0-alpha.x",6:">= 2.0.0-beta.1",7:">= 4.0.0 <4.3.0",8:">= 4.3.0"};function c(e,t,n){this.helpers=e\|\|{},this.partials=t\|\|{},this.decorators=n\|\|{},a.registerDefaultHelpers(t
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 65 3d 21 30 2c 74 2e 72 65 67 69 73 74 65 72 44 65 66 61 75 6c 74 48 65 6c 70 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 2e 64 65 66 61 75 6c 74 28 65 29 2c 69 2e 64 65 66 61 75 6c 74 28 65 29 2c 61 2e 64 65 66 61 75 6c 74 28 65 29 2c 73 2e 64 65 66 61 75 6c 74 28 65 29 2c 75 2e 64 65 66 61 75 6c 74 28 65 29 2c 6c 2e 64 65 66 61 75 6c 74 28 65 29 2c 63 2e 64 65 66 61 75 6c 74 28 65 29 7d 2c 74 2e 6d 6f 76 65 48 65 6c 70 65 72 54 6f 48 6f 6f 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 68 65 6c 70 65 72 73 5b 74 5d 26 26 28 65 2e 68 6f 6f 6b 73 5b 74 5d 3d 65 2e 68 65 6c 70 65 72 73 5b 74 5d 2c 6e 7c 7c 64 65 6c 65 74 65 20 65 2e 68 65 6c 70 65 72 73 5b 74 5d 29 7d 3b 76 61 72 20 6f 3d 72 28 6e 28 31 37 29 29 2c 69 3d 72 28 6e 28 Data Ascii: e=!0,t.registerDefaultHelpers=function(e){o.default(e),i.default(e),a.default(e),s.default(e),u.default(e),l.default(e),c.default(e)},t.moveHelperToHooks=function(e,t,n){e.helpers[t]&&(e.hooks[t]=e.helpers[t],n\|\|delete e.helpers[t])};var o=r(n(17)),i=r(n(
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 6f 66 20 65 3f 74 2e 6d 65 74 68 6f 64 73 3a 74 2e 70 72 6f 70 65 72 74 69 65 73 2c 6e 29 7d 2c 74 2e 72 65 73 65 74 4c 6f 67 67 65 64 50 72 6f 70 65 72 74 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 65 6c 65 74 65 20 73 5b 65 5d 7d 29 29 7d 3b 76 61 72 20 72 2c 6f 3d 6e 28 32 36 29 2c 69 3d 6e 28 37 29 2c 61 3d 28 72 3d 69 29 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 72 3a 7b 64 65 66 61 75 6c 74 3a 72 7d 2c 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 2e 77 68 69 74 65 6c 69 73 74 5b 74 5d 3f 21 30 3d 3d 3d 65 2e 77 68 69 Data Ascii: of e?t.methods:t.properties,n)},t.resetLoggedProperties=function(){Object.keys(s).forEach((function(e){delete s[e]}))};var r,o=n(26),i=n(7),a=(r=i)&&r.__esModule?r:{default:r},s=Object.create(null);function u(e,t){return void 0!==e.whitelist[t]?!0===e.whi
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 65 72 73 46 72 6f 6d 55 72 6c 28 74 68 69 73 2e 24 72 73 73 42 6f 78 44 6f 6d 45 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 64 61 74 61 2d 73 6f 75 72 63 65 22 29 29 3b 74 68 69 73 2e 72 61 6e 64 6f 6d 69 7a 65 3d 21 30 3d 3d 3d 74 2e 72 61 6e 64 6f 6d 69 7a 65 52 65 66 72 65 73 68 3b 76 61 72 20 75 3d 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 24 72 73 73 42 6f 78 44 6f 6d 45 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 64 61 74 61 2d 63 6f 75 6e 74 22 29 2c 31 30 29 3b 21 69 73 4e 61 4e 28 75 29 26 26 75 3e 30 26 26 28 74 68 69 73 2e 6d 61 78 49 74 65 6d 43 6f 75 6e 74 3d 75 29 3b 76 61 72 20 6c 3d 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 24 72 73 73 42 6f 78 44 6f 6d 45 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 64 61 74 61 2d 74 79 70 65 22 29 2c 31 30 29 3b 69 73 Data Ascii: ersFromUrl(this.$rssBoxDomElement.attr("data-source"));this.randomize=!0===t.randomizeRefresh;var u=parseInt(this.$rssBoxDomElement.attr("data-count"),10);!isNaN(u)&&u>0&&(this.maxItemCount=u);var l=parseInt(this.$rssBoxDomElement.attr("data-type"),10);is
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 3b 72 3d 5b 6e 2c 74 2c 6e 28 33 29 2c 6e 28 31 33 29 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 6e 28 31 35 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 68 69 73 2e 24 72 73 73 42 6f 78 44 6f 6d 45 6c 65 6d 65 6e 74 3d 65 2c 74 68 69 73 2e 74 79 70 65 3d 74 2c 74 68 69 73 2e 6c 61 6e 67 75 61 67 65 3d 72 2e 63 6f 6e 76 65 72 74 4c 61 6e 67 75 61 67 65 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 6c 61 6e 67 5d 22 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 29 2c 74 Data Ascii: nction(e,t,n){var r,o;r=[n,t,n(3),n(13)],void 0===(o=function(e,t,r,o){"use strict";var i=n(15);return function(){function e(e,t){this.$rssBoxDomElement=e,this.type=t,this.language=r.convertLanguage(document.querySelector("[lang]").getAttribute("lang")),t
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 73 2e 6f 62 73 65 72 76 65 72 5b 65 5d 5b 74 5d 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 68 69 73 2e 6f 62 73 65 72 76 65 72 5b 65 5d 5b 74 5d 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 74 68 69 73 2e 6f 62 73 65 72 76 65 72 5b 65 5d 5b 74 5d 5b 72 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 41 70 70 6c 69 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6f 3b 74 68 69 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 73 5b 65 5d 26 26 74 68 69 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 73 5b 65 5d 5b 74 5d 26 26 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 68 69 73 2e 61 70 70 6c 69 63 61 74 69 6f 6e 73 5b 65 5d 5b 74 5d 29 3b 74 72 79 7b 6f 3d 4a 53 4f 4e 2e 70 61 Data Ascii: s.observer[e][t].length>0)for(var r=0;r<this.observer[e][t].length;r++)this.observer[e][t][r].call(this,n)},e.prototype.loadApplication=function(e,t,r){var o;this.applications[e]&&this.applications[e][t]&&r.call(this,this.applications[e][t]);try{o=JSON.pa
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 69 6f 6e 73 5b 65 5d 2e 72 65 70 6c 61 63 65 28 2f 23 28 2e 2a 3f 29 23 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 74 26 26 74 5b 72 5d 3f 74 5b 72 5d 3a 65 7d 29 29 3a 65 7d 2c 65 7d 28 29 7d 2e 61 70 70 6c 79 28 74 2c 5b 6e 2c 74 5d 29 29 7c 7c 28 65 2e 65 78 70 6f 72 74 73 3d 72 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 28 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 2e 64 65 66 61 75 6c 74 3a 65 29 7d 65 2e 65 78 70 6f 72 74 73 3d 28 72 2e 64 65 66 61 75 6c 74 7c 7c 72 29 2e 74 65 6d 70 6c 61 74 65 28 7b 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 69 2c 61 2c 73 2c 75 29 7b 76 Data Ascii: ranslations[e].replace(/#(.*?)#/g,(function(n,r){return t&&t[r]?t[r]:e})):e},e}()}.apply(t,[n,t]))\|\|(e.exports=r)},function(e,t,n){var r=n(4);function o(e){return e&&(e.__esModule?e.default:e)}e.exports=(r.default\|\|r).template({1:function(e,t,r,i,a,s,u){v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	49781	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	568	OUT	GET /fileadmin/user_upload/Park_Domains/Parking_50-50_1420x1082_EN.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:01 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:01 GMT Content-Type: image/jpeg Content-Length: 192363 Connection: close Cf-Bgj: h2pri ETag: "6321aef7-2ef6b" Last-Modified: Wed, 14 Sep 2022 10:37:43 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-90e33b6e2998f08cc0321cd4ce411156 CF-Cache-Status: HIT Age: 4951 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7ce39b7de9b-EWR
2024-09-30 22:41:01 UTC	875	IN	Data Raw: ff d8 ff e1 10 b9 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 90 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 36 3a 30 35 3a 33 31 20 31 34 3a 32 32 3a 35 38 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 05 8c a0 03 00 04 00 00 00 01 00 00 04 3a 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS6 (Windows)2016:05:31 14:22:58:
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 89 74 4f f9 67 0b fe 37 fe fa e5 e8 78 86 e7 62 36 a6 b3 19 ec 0e 79 68 b8 fb a4 c7 a9 df f3 5b f4 14 f8 b1 46 71 32 24 e8 6b 43 4c 19 72 ca 13 11 00 6a 38 b5 17 d5 f3 cf d8 5d 67 fe e1 bf ef 67 fe 94 4b f6 17 59 ff 00 b8 6f fb d9 ff 00 a5 17 a4 6d bf 74 8a f0 4e e2 1a d7 10 06 ae 2c 77 d1 8f de 7f bb ff 00 49 a1 d4 cb 4d 0c 01 98 a4 86 ed 0e b2 37 fb 0b 9a 7f 93 ee db fc e2 93 ee f8 fb 9f b6 3f f7 ab 3e f1 93 b0 ff 00 16 5f f7 cf 9d fe c2 eb 5f f7 0e cf bd 9f fa 51 2f d8 5d 6b fe e1 d9 f7 b3 ff 00 4a 2f 42 bf 1a eb c6 f8 c7 ac d4 eb 18 f1 59 0d d5 a4 3d cf 8f cf 6f bb db b5 40 f4 dc 86 b8 31 cf a4 3a 48 8f 50 12 0b 77 ef 69 81 f9 be 93 d1 fb be 2e b2 23 eb 1f fb d5 a7 98 cb d2 20 fd 25 ff 00 7c f9 ce 56 0e 66 19 60 cb a5 d4 9b 01 2c dd 06 63 e9 46 c2 ef Data Ascii: tOg7xb6yh[Fq2$kCLrj8]ggKYomtN,wIM7?>__Q/]kJ/BY=o@1:HPwi.# %\|Vf`,cF
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: fe b1 f4 3d de ff 00 f4 2b 4b a4 7f c9 1d 43 ff 00 0c 62 ff 00 e7 ae a0 b2 a9 f4 79 b6 d7 d5 05 b1 b1 bb 89 1f 9e 67 7d 7b 5c cf cc ff 00 be 26 64 d8 ef f4 e2 ff 00 b8 f5 24 6c db 2c 79 3f f2 51 6e c9 de d1 eb 6b 23 6f 7f dc 77 bb d8 a0 7d 26 30 d8 ee 9c 43 01 da 5c eb 2d 00 3b f7 7f 93 f4 94 7f 57 88 fd a1 64 7f c5 d9 1a ff 00 d7 13 b8 62 58 77 db 9b 61 7b e4 bf 75 4e 71 24 4b 58 e9 df fb 9b 14 00 77 e3 af 01 cc da bf 97 56 1e be 28 24 8c 36 41 6c 41 b2 c3 07 f7 c3 b7 27 19 18 5c 1c 21 1a ea 2d b3 77 1a 6a e4 2b 99 4b 0b 7d 1b 7d 60 e1 24 ec 2c 2d 32 46 c7 35 db bf 37 de a0 a5 10 89 17 73 fa cf 2c 7f e9 49 2d 8c 7a ac 75 6d 23 08 e4 08 7c d8 05 9e e0 0d 7b e3 63 b6 7e 83 fe 0f fe e4 7e 93 fc 1a 2b 59 ec 73 87 4b 73 9a 1f a3 a6 e3 04 01 fa 17 7e f7 fa 45 Data Ascii: =+KCbyg}{\&d$l,y?Qnk#ow}&0C\-;WdbXwa{uNq$KXwV($6AlA'\!-wj+K}}`$,-2F57s,I-zum#\|{c~~+YsKs~E
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: c8 04 41 12 3c 0a 8f a7 5f ee b7 ee 09 52 6d ee bf e6 e5 3f f9 77 d3 3f ed e1 fd e9 7f cd ca 7f f2 ef a6 7f db c3 fb d7 0b e9 d7 fb ad fb 82 5e 9d 7f ba df b8 21 4a b7 ba ff 00 9b 94 ff 00 e5 df 4c ff 00 b7 87 f7 a5 ff 00 37 29 ff 00 cb be 99 ff 00 6f 0f ef 5c 2f a7 5f ee b7 ee 09 7a 75 fe eb 7e e0 95 2a de eb fe 6e 53 ff 00 97 7d 33 fe de 1f de 97 fc dc a7 ff 00 2e fa 67 fd bc 3f bd 70 be 9d 7f ba df b8 25 e9 d7 fb ad fb 82 54 ab 7b d1 d1 ab ae 97 e3 0e a7 83 63 72 08 27 21 96 03 55 7e 9c 3b 6e 43 e7 d8 eb a7 f4 2a 1f f3 72 9f fc bb e9 9f f6 f0 fe f5 cd f4 dc 5b 2f e8 7d 4e 9c 7a 4d b6 3e dc 78 ad 8d 92 76 bb 71 f6 ff 00 25 aa 7d 1f a0 3d d9 b1 d4 b0 1e dc 61 5b cf e9 1a 58 dd fe dd 9e e6 ed 52 fb 66 5e d8 03 f4 6a fa 7c f3 61 f7 23 0f 70 93 b4 ae bf 4b Data Ascii: A<_Rm?w?^!JL7)o\/_zu~nS}3.g?p%T{cr'!U~;nCr[/}NzM>xvq%}=a[XRf^j\|a#pK
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 40 52 00 00 00 00 00 00 00 00 00 0a 76 65 63 74 6f 72 44 61 74 61 62 6f 6f 6c 01 00 00 00 00 50 67 50 73 65 6e 75 6d 00 00 00 00 50 67 50 73 00 00 00 00 50 67 50 43 00 00 00 00 4c 65 66 74 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 54 6f 70 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 53 63 6c 20 55 6e 74 46 23 50 72 63 40 59 00 00 00 00 00 00 00 00 00 10 63 72 6f 70 57 68 65 6e 50 72 69 6e 74 69 6e 67 62 6f 6f 6c 00 00 00 00 0e 63 72 6f 70 52 65 63 74 42 6f 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d Data Ascii: @RvectorDataboolPgPsenumPgPsPgPCLeftUntF#RltTop UntF#RltScl UntF#Prc@YcropWhenPrintingboolcropRectBottomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIM
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 48 6f 72 7a 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 09 76 65 72 74 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 56 65 72 74 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 0b 62 67 43 6f 6c 6f 72 54 79 70 65 65 6e 75 6d 00 00 00 11 45 53 6c 69 63 65 42 47 43 6f 6c 6f 72 54 79 70 65 00 00 00 00 4e 6f 6e 65 00 00 00 09 74 6f 70 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0a 6c 65 66 74 4f 75 74 73 65 74 6c 6f 6e 67 00 00 00 00 00 00 00 0c 62 6f 74 74 6f 6d 4f 75 74 Data Ascii: agTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenumESliceVertAligndefaultbgColorTypeenumESliceBGColorTypeNonetopOutsetlongleftOutsetlongbottomOut
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 31 89 dc 03 e6 1e 9f ea af 4e ea ff 00 58 ae ca 69 ea b7 62 d5 88 d6 17 96 80 f7 b9 d6 9b 36 35 ad 76 c6 ed 6f a2 fd eb a2 ff 00 98 b9 dd fe b0 e5 ff 00 db 55 ff 00 e4 d7 37 f5 47 aa 59 d3 30 ba 9d d5 d4 cb fd 6b 71 29 73 2c 2e 02 0b 73 6d 9f d1 fb be 95 6b 74 7d 74 cf 26 46 05 04 97 17 f3 6f d2 3c bb 94 0e 49 fe f4 be d5 0c 70 fd c8 fd 81 b1 ff 00 31 33 ff 00 f2 ff 00 33 4e 3f 42 ce df db 4b fe 62 67 ff 00 e5 fe 66 bc fe 85 9f f9 35 1f fc 70 7a c7 fd c4 a3 ff 00 04 4d ff 00 8e 17 57 ff 00 b8 b8 ff 00 7b ff 00 bd 2f 72 7f bd 2f b5 5e de 3f dc 8f d8 c3 23 fc 5c 59 94 5a 72 7a ce 4d c5 80 86 6f a1 a6 01 fa 5b 7f 48 83 ff 00 8d 6d 1f f9 67 77 fe c3 b7 ff 00 4a 2b 3f f8 e1 75 7f fb 8b 8f f7 bf fb d2 ff 00 c7 0b ab ff 00 dc 5c 7f bd ff 00 de 9a 64 4e a4 da e0 Data Ascii: 1NXib65voU7GY0kq)s,.smkt}t&Fo<Ip133N?BKbgf5pzMW{/r/^?#\YZrzMo[HmgwJ+?u\dN
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 30 58 e6 bd a0 83 f4 a4 b9 ef 6a d2 c0 ff 00 90 ba 97 fe 13 77 fe dc e1 29 a0 49 16 7b fe ec a1 f8 4d 5d 1c 64 92 49 48 85 24 92 49 29 ff d3 e3 92 49 24 e5 aa 49 24 92 53 b1 d2 3f e4 8e a1 ff 00 86 31 7f f3 d7 50 59 d8 62 f2 7f 42 ca 9e 77 d7 fc e8 ac fb a7 f4 6d 1e b1 1e c7 ff 00 85 db ec ff 00 4a b4 7a 38 9e 93 d4 07 8e 4e 20 ff 00 c0 ba 82 cf fd 9b 97 dd 80 fc c2 64 c5 82 34 fa 8e 21 f6 24 6c db 2c ea 5b ab 9a 70 e7 dd b6 05 3b 4f b7 df ea 43 bd 3f a1 f4 37 ff 00 d6 d4 45 79 ad 71 af ec d8 4e 2d 02 c7 b2 2a d4 49 6f d2 f5 3f 3b 6f e6 2a df b3 32 7f d1 b7 ef 09 7e cc c9 e3 d3 6f de 14 5e c9 fe a7 f8 87 ff 00 56 2a 99 3b a6 e7 12 5c 29 02 77 3b 63 5e c3 00 4b dd 0c df bb 63 1a aa 0d 44 ab 3f b3 32 47 15 b4 7c c2 7f d9 d9 7f b8 3e f0 a4 88 90 f9 88 3e 43 Data Ascii: 0Xjw)I{M]dIH$I)I$I$S?1PYbBwmJz8N d4!$l,[p;OC?7EyqN-Io?;o2~o^V*;\)w;c^KcD?2G\|>>C
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 05 1f 51 11 fd 0e bf dd 93 ca a4 92 4a 06 77 ff d6 e3 92 49 24 e5 aa 49 24 92 52 92 49 24 94 a4 92 49 25 29 24 92 49 4a 49 24 92 52 4a f2 32 29 04 53 6d 95 07 41 70 63 dc d0 63 8d db 08 57 ba 57 57 b3 13 33 d6 cb b2 fb e9 d8 e6 ec de 5d a9 8d ae db 6b f6 76 59 a9 29 31 f1 f1 47 86 f7 d3 b3 1e 4e 0e 19 71 56 da fe f3 d8 b7 eb d6 1b 5a 1b f6 57 10 d8 89 aa b2 74 0c 67 fa 5f f8 3f fa 76 29 0f af 98 41 db be c7 24 19 13 4d 71 ce ef f4 ab 8c 49 4f fa df ea 30 7e ab fa ef 57 67 d6 fc 0b 1e 5e ea 6f 93 13 0d 64 68 03 07 f8 5f e4 aa 9d 4f eb 16 16 67 4f bb 16 aa ae 6d 96 86 80 5e 1a 1a 21 cd 79 9d af 73 bf 35 73 e9 23 2f bc 70 1b e1 e1 e1 3b 7e ea 23 f7 7e 31 5c 5c 5c 43 7f de b5 24 92 4a 9b 71 ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 55 00 00 00 01 01 00 00 00 Data Ascii: QJwI$I$RI$I%)$IJI$RJ2)SmApccWWW3]kvY)1GNqVZWtg_?v)A$MqIO0~Wg^odh_OgOm^!ys5s#/p;~#~1\\\C$Jq8BIM!U
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 31 34 37 39 30 33 38 32 33 32 37 45 36 31 31 39 34 31 38 43 42 37 44 36 31 35 43 43 34 32 45 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 36 2d 30 35 2d 33 31 54 31 34 3a 32 32 3a 34 32 2b 30 32 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 Data Ascii: hotoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:214790382327E6119418CB7D615CC42E" stEvt:when="2016-05-31T14:22:42+02:00" stEvt:softwareAgent="Adobe Photoshop CS6 (Windows)"/> <rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	49783	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	568	OUT	GET /c7r/assets/static/dist/js/deprecated/typescript/static/app.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:01 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 20 Aug 2024 09:50:15 GMT ETag: W/"66c466d7-345f7" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-decade9f0f0d519e095663308dd70ef8 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 115 Server: cloudflare CF-RAY: 8cb7b7ceacee0f7b-EWR
2024-09-30 22:41:01 UTC	849	IN	Data Raw: 37 64 39 37 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 31 34 32 34 3a 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 76 61 6c 28 22 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 72 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 29 3b 5c 6e 2f 2a 20 68 61 72 6d 6f 6e 79 20 65 78 70 6f 72 74 20 2a 2f 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 20 7b 5c 6e 2f 2a 20 68 61 72 6d 6f 6e 79 20 65 78 70 Data Ascii: 7d97(()=>{var __webpack_modules__={1424:(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{"use strict";eval("__webpack_require__.r(__webpack_exports__);\n/* harmony export / __webpack_require__.d(__webpack_exports__, {\n/ harmony exp
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 73 5f 56 69 65 77 50 6f 72 74 48 65 6c 70 65 72 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 31 5f 5f 29 3b 5c 6e 2f 2a 20 68 61 72 6d 6f 6e 79 20 69 6d 70 6f 72 74 20 2a 2f 20 76 61 72 20 5f 68 65 6c 70 65 72 73 5f 44 65 62 6f 75 6e 63 65 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 32 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 36 36 35 32 29 3b 5c 6e 2f 2a 20 68 61 72 6d 6f 6e 79 20 69 6d 70 6f 72 74 20 2a 2f 20 76 61 72 20 5f 68 65 6c 70 65 72 73 5f 44 65 62 6f 75 6e 63 65 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 32 5f 5f 5f 64 65 66 61 75 6c 74 20 3d 20 2f 2a 23 5f 5f 50 55 52 45 5f 5f 2a 2f 5f 5f 77 65 62 70 61 63 6b Data Ascii: s_ViewPortHelper__WEBPACK_IMPORTED_MODULE_1__);\n/* harmony import / var _helpers_Debounce__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(6652);\n/ harmony import / var _helpers_Debounce__WEBPACK_IMPORTED_MODULE_2___default = /#__PURE__*/__webpack
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 65 73 20 47 54 4d 2d 54 72 61 63 6b 69 6e 67 5c 6e 20 20 20 2a 2f 5c 6e 20 20 69 6e 69 74 28 29 20 7b 5c 6e 20 20 20 20 63 6f 6e 73 74 20 24 64 61 74 61 47 54 4d 4f 6e 4c 6f 61 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 67 74 6d 2d 6f 6e 6c 6f 61 64 5d 27 29 3b 5c 6e 5c 6e 20 20 20 20 2f 2a 2a 5c 6e 20 20 20 20 20 2a 20 61 64 64 69 74 69 6f 6e 61 6c 20 70 75 73 68 65 73 20 62 61 73 65 64 20 6f 6e 20 70 61 67 65 54 79 70 65 5c 6e 20 20 20 20 20 2a 2f 5c 6e 20 20 20 20 69 66 20 28 74 68 69 73 2e 70 75 73 68 45 76 65 6e 74 50 61 67 65 54 79 70 65 28 29 29 20 7b 5c 6e 20 20 20 20 20 20 73 77 69 74 63 68 20 28 74 68 69 73 2e 70 61 67 65 54 79 70 65 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 63 61 Data Ascii: es GTM-Tracking\n /\n init() {\n const $dataGTMOnLoad = document.querySelectorAll('[data-gtm-onload]');\n\n /\n additional pushes based on pageType\n */\n if (this.pushEventPageType()) {\n switch (this.pageType) {\n ca
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 61 67 65 29 20 7b 5c 6e 20 20 20 20 20 20 74 68 69 73 2e 70 75 73 68 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 44 61 74 61 4c 61 79 65 72 28 29 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2f 2a 2a 5c 6e 20 20 20 20 20 2a 20 54 68 69 73 20 69 73 20 61 6e 20 65 78 70 6c 69 63 69 74 20 63 61 6c 6c 20 66 6f 72 20 74 68 65 20 68 6f 6d 65 20 70 61 67 65 2e 5c 6e 20 20 20 20 20 2a 20 69 74 20 77 61 73 20 6e 6f 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 61 64 64 20 6d 75 6c 74 69 70 6c 65 20 64 61 74 61 2d 61 74 74 72 69 62 75 74 65 73 20 61 6e 64 20 70 61 73 73 20 6f 62 6a 65 63 74 2d 6c 69 6b 65 20 73 74 72 69 6e 67 73 20 61 73 20 76 61 6c 75 65 2e 5c 6e 20 20 20 20 20 2a 20 40 73 65 65 20 63 6f 6e 74 65 6e 74 2d 74 65 61 73 65 72 2d 6d 75 6c 74 69 67 72 69 64 2e Data Ascii: age) {\n this.pushConfirmationDataLayer();\n }\n\n /*\n This is an explicit call for the home page.\n * it was not possible to add multiple data-attributes and pass object-like strings as value.\n * @see content-teaser-multigrid.
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 20 69 64 3a 20 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 69 74 6d 5f 63 61 6d 70 61 69 67 6e 27 29 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 3a 20 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 69 74 6d 5f 63 6f 6e 74 65 6e 74 27 29 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 72 65 61 74 69 76 65 3a 20 73 65 61 72 63 68 50 61 72 61 6d 73 2e 67 65 74 28 27 69 74 6d 5f 73 6f 75 72 63 65 27 29 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 74 61 72 67 65 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 67 74 6d 2d 70 72 6f 6d 6f 74 69 6f 6e 27 29 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: id: searchParams.get('itm_campaign'),\n name: searchParams.get('itm_content'),\n creative: searchParams.get('itm_source'),\n position: target.getAttribute('data-gtm-promotion'),\n }],\n
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 6f 62 6a 65 63 74 20 66 6f 72 20 70 72 6f 64 75 63 74 73 20 74 72 61 63 6b 65 64 20 69 66 20 74 68 65 79 20 77 68 65 72 65 20 69 6e 20 76 69 65 77 70 6f 72 74 5c 6e 20 20 20 2a 20 6f 6e 20 73 65 61 72 63 68 20 72 65 73 75 6c 74 20 70 61 67 65 2e 5c 6e 20 20 20 2a 2f 5c 6e 20 20 70 75 73 68 53 65 61 72 63 68 52 65 73 75 6c 74 56 69 65 77 50 6f 72 74 45 76 65 6e 74 73 28 29 20 7b 5c 6e 20 20 20 20 63 6f 6e 73 74 20 24 69 6e 56 69 65 77 50 6f 72 74 45 6c 65 6d 65 6e 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 67 74 6d 2d 69 6e 2d 76 69 65 77 70 6f 72 74 5d 3a 6e 6f 74 28 2e 67 74 6d 2d 76 69 73 69 74 65 64 29 27 29 3b 5c 6e 20 20 20 20 63 6f 6e 73 74 20 69 6d 70 72 65 73 73 69 6f 6e 73 41 Data Ascii: object for products tracked if they where in viewport\n * on search result page.\n */\n pushSearchResultViewPortEvents() {\n const $inViewPortElements = document.querySelectorAll('[data-gtm-in-viewport]:not(.gtm-visited)');\n const impressionsA
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 68 65 72 20 69 6e 70 75 74 20 66 69 65 6c 64 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 68 69 64 64 65 6e 20 69 6e 70 75 74 2d 65 6c 65 6d 65 6e 74 29 5c 6e 20 20 20 2a 20 54 68 69 73 20 6d 65 74 68 6f 64 20 73 65 61 72 63 68 65 73 20 66 6f 72 20 6f 62 6a 65 63 74 2d 70 72 6f 70 65 72 74 79 20 77 69 74 68 20 76 61 6c 75 65 3d 5c 22 67 74 6d 52 65 70 6c 61 63 65 7b 3c 73 65 6c 65 63 74 6f 72 3e 7d 5c 22 5c 6e 20 20 20 2a 20 61 6e 64 20 72 65 70 6c 61 63 65 73 20 69 74 20 77 69 74 68 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 3c 73 65 6c 65 63 74 6f 72 3e 5c 6e 20 20 20 2a 5c 6e 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 64 61 74 61 20 2d 20 69 6e 70 75 74 20 64 61 74 61 2d 6f 62 6a 65 63 74 5c 6e 20 20 20 2a 20 40 72 65 74 75 Data Ascii: her input field (for example hidden input-element)\n * This method searches for object-property with value=\"gtmReplace{<selector>}\"\n * and replaces it with the value of the <selector>\n \n @param {Object} data - input data-object\n * @retu
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 5d 20 66 6f 72 6d 5c 6e 20 20 20 2a 20 40 6c 69 73 74 65 6e 73 20 74 6f 20 63 75 73 74 6f 6d 20 65 76 65 6e 74 20 5c 22 63 75 73 74 6f 6d 47 54 4d 53 75 62 6d 69 74 5c 22 5c 6e 20 20 20 2a 20 40 6c 69 73 74 65 6e 73 20 74 6f 20 68 61 73 68 63 68 61 6e 67 65 5c 6e 20 20 20 2a 20 7b 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 64 65 2f 64 6f 63 73 2f 57 65 62 2f 41 50 49 2f 57 69 6e 64 6f 77 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 2f 6f 6e 68 61 73 68 63 68 61 6e 67 65 20 7c 20 6f 6e 68 61 73 68 63 68 61 6e 67 65 7d 5c 6e 20 20 20 2a 2f 5c 6e 20 20 62 69 6e 64 45 76 65 6e 74 73 28 29 20 7b 5c 6e 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: ] form\n * @listens to custom event \"customGTMSubmit\"\n * @listens to hashchange\n * {@link https://developer.mozilla.org/de/docs/Web/API/WindowEventHandlers/onhashchange \| onhashchange}\n */\n bindEvents() {\n document.body.addEventListener
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 2e 67 74 6d 2d 76 69 73 69 74 65 64 29 27 29 3b 5c 6e 20 20 20 20 20 20 20 20 69 66 20 28 67 74 6d 50 72 6f 6d 6f 74 69 6f 6e 65 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 70 75 73 68 50 72 6f 6d 6f 74 69 6f 6e 45 76 65 6e 74 73 28 65 76 65 6e 74 29 3b 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 7d 29 3b 5c 6e 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 5c 6e 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 67 74 6d 50 72 6f 6d 6f 74 69 6f 6e 65 6c 65 6d 65 6e 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 67 74 6d 2d Data Ascii: .gtm-visited)');\n if (gtmPromotionelements.length) {\n this.pushPromotionEvents(event);\n }\n });\n window.addEventListener('click', (event) => {\n const gtmPromotionelements = document.querySelectorAll('[data-gtm-
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 73 63 72 6f 6c 6c 27 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 5c 6e 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 67 74 6d 56 69 65 77 50 6f 72 74 65 6c 65 6d 65 6e 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 5b 64 61 74 61 2d 67 74 6d 2d 70 72 6f 6d 6f 74 69 6f 6e 5d 3a 6e 6f 74 28 2e 67 74 6d 2d 76 69 73 69 74 65 64 29 27 29 3b 5c 6e 20 20 20 20 20 20 20 20 69 66 20 28 67 74 6d 56 69 65 77 50 6f 72 74 65 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 70 75 73 68 50 72 6f 6d 6f 74 69 6f 6e 45 76 65 6e 74 73 28 65 76 65 6e 74 29 3b 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e Data Ascii: window.addEventListener('scroll', (event) => {\n const gtmViewPortelements = document.querySelectorAll('[data-gtm-promotion]:not(.gtm-visited)');\n if (gtmViewPortelements.length) {\n this.pushPromotionEvents(event);\n }\n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	49784	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	787	OUT	GET /fileadmin/user_upload/Sell_Domains/Domain_Auction/FAQ.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:01 UTC	492	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:01 GMT Content-Type: image/jpeg Content-Length: 36978 Connection: close Cf-Bgj: h2pri ETag: "6321af3e-9072" Last-Modified: Wed, 14 Sep 2022 10:38:54 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-5a5936f8bbbe9765e346f389f1b46644 CF-Cache-Status: HIT Age: 1698 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7ceac94430e-EWR
2024-09-30 22:41:01 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0a f3 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 07 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 62 00 00 00 1b 01 05 00 01 00 00 00 6a 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 72 00 00 00 32 01 02 00 14 00 00 00 8e 00 00 00 69 87 04 00 01 00 00 00 a4 00 00 00 d0 00 00 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 00 32 30 31 36 3a 30 38 3a 31 30 20 31 31 3a 32 39 3a 32 38 00 00 00 03 00 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 8c 05 00 00 03 a0 04 00 01 00 00 00 3a 04 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 Data Ascii: JFIFHHExifII*bj(1r2i''Adobe Photoshop CS4 Windows2016:08:10 11:29:28:
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 12 49 25 7d ce 52 49 27 6b 5c f7 06 30 4b 9d a0 09 29 64 95 fa fa 63 63 f4 8f 24 f7 0c d0 0f 99 52 fd 9b 47 8b fe f1 ff 00 91 4c f7 61 dd 90 61 9f 67 39 25 a3 fb 36 8f 17 fd e3 ff 00 22 97 ec ca 3c 5f f7 8f fc 8a 1e f4 3c 55 ec cf c1 cd 49 69 7e cc a3 c5 ff 00 78 ff 00 c8 a5 fb 32 8f 17 fd e3 ff 00 22 97 bd 0f 15 7b 33 f0 73 52 5a 5f b3 28 f1 7f de 3f f2 29 7e cc a3 c5 ff 00 78 ff 00 c8 a5 ef 43 c5 5e cc fc 1c d4 96 97 ec ca 3c 5f f7 8f fc 8a 5f b3 28 f1 7f de 3f f2 29 7b d0 57 b3 3f 07 31 25 a7 fb 2e 8f 17 fd e3 ff 00 22 a1 67 4b 6c 7e 8d ee 69 ec 1f a8 fb db 08 fb b0 ee af 66 7d 9c f4 93 d9 5b ea 79 ae c1 b5 c3 91 fc 42 8a 7b 12 92 49 24 94 ff 00 ff d0 ec 12 49 25 7d ce 52 b9 d3 58 0b ac 7f 70 03 47 cf 9f fa 95 4d 5e e9 9c 5b f1 6f fd f9 33 2f c8 57 e2 Data Ascii: I%}RI'k\0K)dcc$RGLaag9%6"<_<UIi~x2"{3sRZ_(?)~xC^<__(?){W?1%."gKl~if}[yB{I$I%}RXpGM^[o3/W
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: a3 a7 99 80 eb 6c f5 6a 20 39 df 4d ae e0 ff 00 29 ae 0a bf ec cc af 16 7f 9d ff 00 98 a0 d5 97 93 4b 76 d6 ff 00 68 e1 ae 01 c0 7c 37 22 7e d2 cc fd e6 ff 00 9a 14 60 64 1a 02 08 64 32 c4 75 20 82 7b 2f fb 33 2b c5 9f e7 7f e6 29 1e 9b 94 01 23 6b 88 ec 1d a9 f8 68 9b f6 96 5f ef 37 fc d0 a5 4f 54 b8 3c 7a f0 ea ce 87 6b 60 8f e5 0f de 4b f5 bf d5 57 ea bf ac 1a 69 2d 3c cc 36 e4 37 d7 c7 20 d8 44 e9 c3 c7 fe 94 59 7e 5c 11 a1 05 3e 32 12 1f 98 59 38 18 9d 7e 85 b5 5f 4f c8 b6 b6 d8 d2 cd af 12 24 c1 fc 8a 5f b2 f2 fc 59 fe 77 fe 62 ac b6 d7 d5 d2 99 63 20 39 ac 6c 12 24 6a ed aa a7 ed 3c cf de 6f f9 81 30 1c 86 ea b4 24 6a bc c7 18 ab bb 20 1d 17 fd 97 95 e2 cf f3 bf f3 14 bf 65 e5 f8 b3 fc ef fc c5 47 f6 9e 67 ef 37 fc c0 97 ed 3c cf de 6f f9 81 2f d6 Data Ascii: lj 9M)Kvh\|7"~`dd2u {/3+)#kh_7OT<zk`KWi-<67 DY~\>2Y8~_O$_Ywbc 9l$j<o0$j eGg7<o/
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 04 3a 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 05 8c 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 Data Ascii: autoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlong:RghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellText
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: ac 7f 70 03 47 cf 9f fa 95 4d 5e e9 9c 5b f1 6f fd f9 33 2f c8 57 e2 f9 c3 5f 32 e7 d9 73 da 49 d8 c2 5a d6 f6 d3 49 40 85 3b ff 00 9f b7 fa ee fc a9 55 5b ed 78 ad 91 b8 c9 12 63 84 e1 42 23 a0 a5 a6 cc 8f 52 4b 08 4b 45 67 f6 7e 57 83 7f ce 09 bf 67 e5 78 37 fc e0 97 1c 7f 78 7d a9 e0 97 ee 9f b1 ac 94 2b 3f b3 f2 bc 1b fe 70 4b f6 76 57 83 7f ce 09 71 c7 f7 87 da ae 09 7e e9 fb 1a da 25 0a cf ec ec af 06 ff 00 9c 12 fd 9d 95 e0 df f3 82 5c 71 fd e1 f6 a3 82 5f ba 7e c6 b4 04 da 2b 5f b3 b2 fc 1b fe 70 4b f6 76 57 83 7f ce 09 71 c7 f7 87 da af 6e 5f ba 7e c6 ac 04 4a b2 2d a0 ee ad c6 3b b0 fd 13 f1 0a 36 d6 fa ac 35 be 37 08 98 33 c8 95 03 c2 3a 11 dc 14 6a 0f 62 1d 1e a4 d6 be 8a ef 1c c8 8f ea bc 6e 85 9e b4 73 7f e4 fa ff 00 eb 7f f5 2b 35 33 17 cb Data Ascii: pGM^[o3/W_2sIZI@;U[xcB#RKKEg~Wgx7x}+?pKvWq~%\q_~+_pKvWqn_~J-;6573:jbns+53
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: b3 fc ef fc c5 47 f6 9e 67 ef 37 fc c0 97 ed 3c cf de 6f f9 81 2f d6 ff 00 55 5f aa fe b3 2f d9 79 7e 2c ff 00 3b ff 00 31 46 c6 e9 65 af 0f bc 87 46 a2 b6 ea 09 fe 5b 95 7f da 79 9f bc df f3 02 1d b9 b9 57 34 b5 f6 7b 4f 2d 68 0d 07 e3 b5 2a c8 74 b0 3c 95 78 86 a0 13 e6 9b a9 65 36 eb 05 6c 3b 99 59 24 b8 70 5c 7c 3f aa a9 a4 92 7c 40 00 00 c7 29 19 12 4f 55 24 92 64 50 ff 00 ff d5 eb 12 49 32 be e6 ae 99 24 92 52 92 49 24 94 a4 c9 24 92 9b 18 79 8e c6 76 d7 4b a9 71 f7 37 b8 3f be c5 77 2f 0d 99 4d 19 14 10 6c 22 41 1c 3c 7f e4 d6 52 3e 1e 63 f1 9d 06 5d 4b 8f b9 9d c1 fd f6 7f 29 32 51 37 c5 1f 9b fe 93 24 26 2b 86 5f 2f fd 16 e5 cd 73 3a 40 6b c1 6b 9a c6 82 d3 c8 f7 05 96 b6 33 9e c7 f4 f7 bd 84 39 8e 0d 2d 70 ef ee 6a c7 43 16 c7 fb c5 39 85 10 3f Data Ascii: Gg7<o/U_/y~,;1FeF[yW4{O-h*t<xe6l;Y$p\\|?\|@)OU$dPI2$RI$$yvKq7?w/Ml"A<R>c]K)2Q7$&+_/s:@kk39-pjC9?
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 30 3a 33 32 3a 31 31 2b 30 32 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 31 3a 32 39 3a 32 38 2b 30 32 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 31 3a 32 39 3a 32 38 2b 30 32 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3d 22 31 22 20 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3d 22 37 32 30 30 30 30 Data Ascii: Photoshop CC 2015 (Macintosh)" xmp:CreateDate="2016-08-10T10:32:11+02:00" xmp:ModifyDate="2016-08-10T11:29:28+02:00" xmp:MetadataDate="2016-08-10T11:29:28+02:00" dc:format="image/jpeg" photoshop:ColorMode="3" tiff:Orientation="1" tiff:XResolution="720000
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: d="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 08 00 01 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 01 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 4a 00 00 00 07 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 92 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 00 00 07 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 48 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 41 30 00 00 00 00 00 07 60 00 00 00 00 00 00 00 00 00 00 00 00 00 7b f3 be 1e 97 7b 9d 2a 7a 7b b3 bf 39 ed Data Ascii: 00J`0 ` H@A0`{{*z{9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	49782	52.222.236.60	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	384	OUT	GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:01 UTC	665	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 7514 Connection: close Date: Mon, 30 Sep 2024 22:41:02 GMT Last-Modified: Mon, 16 Sep 2024 09:19:53 GMT ETag: "149f8b397fe711244ef204823190cb86" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3d34e163f3f1a0c4a397ad818b79a810.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: FcJ_Zg1t6v1d3a_FLbmPiS9VWnzdzLB5MlwVXA1CMqawNrkDiGpd8Q== X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-09-30 22:41:01 UTC	7514	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 3c 4d 6f e3 48 76 f7 fd 15 32 17 d1 90 71 89 96 fc 6d aa 09 6f b7 db b3 e3 5d bb dd b0 bb 67 76 d7 31 1a 94 58 b2 ab 9b 22 b5 64 d1 6e 8f ac c3 62 6f b9 24 40 2e 01 72 0b 10 2c 02 04 7b 09 b2 97 04 c9 61 7e ca 24 b9 e6 2f e4 bd fa 62 51 a2 6c f7 cc 2c 90 04 69 18 2d b2 3e 5f bd 7a df f5 8a ff f5 cf ff b6 32 2a d3 21 67 59 da 4a dd 82 64 24 f7 a6 a6 24 72 39 a1 de 94 8d dc 95 ec 82 5f ca a7 42 3c dd 44 79 8b 85 8e 6e ea 84 21 bf 9b d0 6c d4 ca e9 af 4b 96 d3 76 5b 3d f4 b1 0f bc 32 2f a7 bc cc d3 16 83 41 57 ba 1e 96 27 ba 2c 51 65 fc 3a cf 6e 5d 1a a6 f4 b6 75 98 e7 59 ee 3a 07 51 9a 66 bc 35 62 69 dc 1a 67 71 99 d0 d6 67 ce 2a 5f 75 3e 73 3c cf 1f 66 31 0d 9d 93 d3 97 6f 8f 0f df bd 3a 7d f3 ee f3 d3 b7 af 5e 3a 84 ce 58 Data Ascii: <MoHv2qmo]gv1X"dnbo$@.r,{a~$/bQl,i->_z2!gYJd$$r9_B<Dyn!lKv[=2/AW',Qe:n]uY:Qf5bigqg_u>s<f1o:}^:X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	49785	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	547	OUT	GET /components/TfcP3WYRyZ9A/cookie-banner.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:01 UTC	519	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 20 Aug 2024 14:15:00 GMT ETag: W/"66c4a4e4-1d83" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-c9e9a4a405dfe9c9e2f60f5af5cd2436 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 114 Server: cloudflare CF-RAY: 8cb7b7d08be70cbd-EWR
2024-09-30 22:41:01 UTC	850	IN	Data Raw: 31 64 38 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 22 2e 2f 73 72 63 2f 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 3b 76 61 72 20 61 3d 6e 28 2f 2a 21 20 2e 2f 75 74 69 6c 73 2f 43 6f 6f 6b 69 65 48 61 6e 64 6c 65 72 20 2a 2f 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 43 6f 6f 6b 69 65 48 61 6e 64 6c 65 72 2e 6a 73 22 Data Ascii: 1d83!function(){"use strict";var e={"./src/CookieBanner.js":/!***************************!\ !* ./src/CookieBanner.js ! \***************************/function(e,t,n){n.r(t);var a=n(/! ./utils/CookieHandler */"./src/utils/CookieHandler.js"
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 3d 27 64 61 74 61 4c 61 79 65 72 27 3f 27 26 6c 3d 27 2b 6c 3a 27 27 3b 6a 2e 61 73 79 6e 63 3d 74 72 75 65 3b 6a 2e 73 72 63 3d 5c 6e 20 20 20 20 20 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 6d 2e 6a 73 3f 69 64 3d 27 2b 69 2b 64 6c 3b 66 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6a 2c 66 29 3b 5c 6e 20 20 20 20 20 20 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 64 61 74 61 4c 61 79 65 72 27 2c 27 24 7b 74 68 69 73 2e 67 74 6d 49 64 7d 27 29 3b 60 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 63 53 65 74 74 69 6e Data Ascii: createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=\n 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);\n })(window,document,'script','dataLayer','${this.gtmId}');`;window.addEventListener("ucSettin
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 62 2c 20 73 29 3b 7d 29 28 29 3b 22 7d 2c 7b 64 65 74 61 69 6c 73 4e 61 6d 65 3a 22 48 6f 74 6a 61 72 22 2c 69 64 4e 61 6d 65 3a 22 68 6f 74 6a 61 72 53 6e 69 70 70 65 74 22 2c 69 6e 6e 65 72 48 74 6d 6c 3a 22 28 66 75 6e 63 74 69 6f 6e 20 28 68 2c 20 6f 2c 20 74 2c 20 6a 2c 20 61 2c 20 72 29 20 7b 5c 6e 20 20 20 20 20 20 68 2e 68 6a 20 3d 20 68 2e 68 6a 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 28 68 2e 68 6a 2e 71 20 3d 20 68 2e 68 6a 2e 71 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 5c 6e 20 20 20 20 20 20 7d 3b 5c 6e 20 20 20 20 20 20 68 2e 5f 68 6a 53 65 74 74 69 6e 67 73 20 3d 20 7b 5c 6e 20 20 20 20 20 20 20 20 68 Data Ascii: parentNode.insertBefore(b, s);})();"},{detailsName:"Hotjar",idName:"hotjarSnippet",innerHtml:"(function (h, o, t, j, a, r) {\n h.hj = h.hj \|\| function () {\n (h.hj.q = h.hj.q \|\| []).push(arguments)\n };\n h._hjSettings = {\n h
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 74 2e 61 73 79 6e 63 3d 21 30 2c 74 2e 69 64 3d 65 2e 69 64 4e 61 6d 65 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 2e 69 6e 6e 65 72 48 74 6d 6c 2c 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 22 21 3d 3d 65 2e 64 65 74 61 69 6c 73 4e 61 6d 65 7c 7c 61 29 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 28 74 29 7d 7d 65 6c 73 65 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 23 24 7b 65 2e 69 64 4e 61 6d 65 7d 60 29 3b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 23 24 7b 65 2e 69 64 4e 61 6d 65 7d 60 29 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 72 65 6d 6f Data Ascii: ocument.createElement("script");t.async=!0,t.id=e.idName,t.innerHTML=e.innerHtml,("Facebook Pixel"!==e.detailsName\|\|a)&&document.body.append(t)}}else{const t=document.querySelector(`#${e.idName}`);document.querySelector(`#${e.idName}`)&&document.body.remo
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 74 2e 64 65 66 61 75 6c 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 3d 65 7d 77 72 69 74 65 28 65 2c 74 2c 6e 3d 7b 7d 29 7b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 60 24 7b 65 7d 3d 24 7b 74 7d 3b 24 7b 74 68 69 73 2e 6d 61 6e 67 6c 65 4f 70 74 69 6f 6e 73 28 6e 29 7d 60 7d 72 65 61 64 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 60 28 5e 7c 20 29 24 7b 65 7d 3d 28 5b 5e 3b 5d 2b 29 60 29 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 6c 65 6e 67 74 68 3e 31 3f 74 5b 32 5d 3a 6e 75 6c 6c 7d 65 78 69 73 74 73 28 Data Ascii: ction(e,t,n){n.r(t),t.default=class{constructor(e){this.document=e}write(e,t,n={}){this.document.cookie=`${e}=${t};${this.mangleOptions(n)}`}read(e){const t=this.document.cookie.match(new RegExp(`(^\| )${e}=([^;]+)`));return t&&t.length>1?t[2]:null}exists(
2024-09-30 22:41:01 UTC	1237	IN	Data Raw: 28 74 29 2c 6e 2e 64 28 74 2c 7b 65 78 70 69 72 65 44 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 67 65 74 48 6f 73 74 6e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 7d 2c 22 2e 2f 73 72 63 2f 69 31 38 6e 2f 6c 61 6e 67 75 61 67 65 4d 61 70 70 69 6e 67 2e 6a 73 6f 6e 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 69 31 38 6e 2f 6c 61 6e 67 75 61 67 65 4d 61 70 70 69 6e 67 2e 6a 73 6f 6e 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e Data Ascii: (t),n.d(t,{expireDate:function(){return a},getHostname:function(){return i}})},"./src/i18n/languageMapping.json":/!*************************************!\ !* ./src/i18n/languageMapping.json ! \**************************************/function
2024-09-30 22:41:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	49786	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	736	OUT	GET /typo3temp/assets/js/cfd16b174d7f7b046e20adbc2e0a1094.js?1689601391 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:01 UTC	519	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 17 Jul 2023 13:43:11 GMT ETag: W/"64b5456f-c5a" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-e3bd12867c77704b6d6493516f7b8076 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1698 Server: cloudflare CF-RAY: 8cb7b7d0a888c335-EWR
2024-09-30 22:41:01 UTC	850	IN	Data Raw: 63 35 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 2f 2a 2a 0a 20 20 20 2a 20 44 65 63 6f 64 69 6e 67 20 68 65 6c 70 65 72 20 66 75 6e 63 74 69 6f 6e 0a 20 20 20 2a 0a 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 6e 75 6d 62 65 72 7d 20 63 68 61 72 43 6f 64 65 0a 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 6e 75 6d 62 65 72 7d 20 73 74 61 72 74 0a 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 6e 75 6d 62 65 72 7d 20 65 6e 64 0a 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 6e 75 6d 62 65 72 7d 20 6f 66 66 73 65 74 0a 20 20 20 2a 20 40 72 65 74 75 72 6e 20 7b 73 74 72 69 6e 67 7d 0a 20 20 20 2a 2f 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 65 63 72 79 70 74 43 68 61 72 63 6f 64 65 28 63 68 61 72 43 6f 64 65 2c 20 73 74 61 72 74 2c 20 65 6e 64 2c 20 6f 66 66 73 65 74 29 20 Data Ascii: c5a(function() { /** * Decoding helper function * * @param {number} charCode * @param {number} start * @param {number} end * @param {number} offset * @return {string} */ function decryptCharcode(charCode, start, end, offset)
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 6c 74 20 2b 3d 20 64 65 63 72 79 70 74 43 68 61 72 63 6f 64 65 28 63 68 61 72 43 6f 64 65 2c 30 78 32 42 2c 30 78 33 41 2c 6f 66 66 73 65 74 29 3b 09 2f 2a 20 30 2d 39 20 2e 20 2c 20 2d 20 2b 20 2f 20 3a 20 2a 2f 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 63 68 61 72 43 6f 64 65 20 3e 3d 20 30 78 34 30 20 26 26 20 63 68 61 72 43 6f 64 65 20 3c 3d 20 30 78 35 41 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 2b 3d 20 64 65 63 72 79 70 74 43 68 61 72 63 6f 64 65 28 63 68 61 72 43 6f 64 65 2c 30 78 34 30 2c 30 78 35 41 2c 6f 66 66 73 65 74 29 3b 09 2f 2a 20 41 2d 5a 20 40 20 2a 2f 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 63 68 61 72 43 6f 64 65 20 3e 3d 20 30 78 36 31 20 26 26 20 63 68 61 72 43 6f 64 65 20 3c 3d 20 30 78 37 Data Ascii: lt += decryptCharcode(charCode,0x2B,0x3A,offset);/* 0-9 . , - + / : / } else if (charCode >= 0x40 && charCode <= 0x5A) { result += decryptCharcode(charCode,0x40,0x5A,offset);/ A-Z @ */ } else if (charCode >= 0x61 && charCode <= 0x7
2024-09-30 22:41:01 UTC	950	IN	Data Raw: 79 70 74 4d 61 69 6c 74 6f 27 5d 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 5b 27 6c 69 6e 6b 54 6f 5f 55 6e 43 72 79 70 74 4d 61 69 6c 74 6f 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 2c 20 6f 66 66 73 65 74 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 46 75 6e 63 74 69 6f 6e 20 6c 69 6e 6b 54 6f 5f 55 6e 43 72 79 70 74 4d 61 69 6c 74 6f 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 20 69 6e 20 54 59 50 4f 33 20 76 31 32 2e 30 27 29 3b 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 26 26 20 6f 66 66 73 65 74 29 20 7b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 Data Ascii: yptMailto'] === 'undefined') { window['linkTo_UnCryptMailto'] = function(value, offset) { console.warn('Function linkTo_UnCryptMailto() is deprecated and will be remove in TYPO3 v12.0'); if (value && offset) { document.location.hre
2024-09-30 22:41:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	49787	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	824	OUT	GET /fileadmin/images/legacy/images/icons/icn-check-beige.svg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.sedo.com/dist/css/typo3/main.css?1724922195 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:01 UTC	486	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:01 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Wed, 14 Sep 2022 10:45:45 GMT ETag: W/"6321b0d9-262" X-Sedo-Request-Id: ID-848758bd5-kxgbq-9d252447f992a840e6a041cb508cee75 Age: 4281 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Server: cloudflare CF-RAY: 8cb7b7d0cef242fb-EWR
2024-09-30 22:41:01 UTC	617	IN	Data Raw: 32 36 32 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 Data Ascii: 262<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"
2024-09-30 22:41:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	49788	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	545	OUT	GET /components/zkLxDsbw1hz2/full.footer.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:01 UTC	521	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2024 08:56:06 GMT ETag: W/"66e2aca6-6250f" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-843af75abefdfd4b21a2950177b13608 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4220 Server: cloudflare CF-RAY: 8cb7b7d0e9f48c30-EWR
2024-09-30 22:41:01 UTC	848	IN	Data Raw: 37 64 39 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 22 2e 2f 73 72 63 2f 46 6f 6f 74 65 72 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 46 6f 6f 74 65 72 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 6e 29 3b 76 61 72 20 74 3d 6f 28 2f 2a 21 20 40 73 65 64 6f 2f 76 75 65 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 6c 69 62 72 61 72 79 2f 75 74 69 6c 73 2f 73 65 64 6f 43 6f 6f 6b 69 65 4d 61 6e 61 67 65 72 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 76 75 Data Ascii: 7d95!function(){var e={"./src/Footer.js":/!*********************!\ !* ./src/Footer.js ! \*********************/function(e,n,o){"use strict";o.r(n);var t=o(/! @sedo/vue-component-library/utils/sedoCookieManager */"./node_modules/@sedo/vu
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 2e 64 65 66 61 75 6c 74 29 28 6e 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 6d 70 6c 61 74 65 41 64 64 65 64 46 6f 6f 74 65 72 22 2c 28 28 29 3d 3e 7b 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 49 6e 69 74 28 6e 29 7d 29 29 2c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 2e 61 64 64 54 65 6d 70 6c 61 74 65 54 6f 42 6f 64 79 28 29 3a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 28 28 29 3d 3e 7b 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 2e 61 64 64 54 65 6d 70 6c 61 74 65 54 6f 42 6f 64 79 28 29 7d 29 29 7d 74 65 6d 70 6c 61 74 65 49 Data Ascii: .default)(n)),document.addEventListener("templateAddedFooter",(()=>{this.templateInit(n)})),"loading"!==document.readyState?this.template.addTemplateToBody():document.addEventListener("DOMContentLoaded",(()=>{this.template.addTemplateToBody()}))}templateI
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 28 22 23 66 6f 6f 74 65 72 2d 6e 65 77 73 6c 65 74 74 65 72 2d 73 69 67 6e 75 70 2d 63 68 65 63 6b 62 6f 78 2d 77 72 61 70 70 65 72 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 65 72 72 6f 72 22 29 3b 63 6f 6e 73 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 22 29 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 2e 67 65 74 41 74 Data Ascii: ("#footer-newsletter-signup-checkbox-wrapper").classList.remove("error");const n=document.querySelector("[data-footer-host]")&&document.querySelector("[data-footer-host]").getAttribute("data-footer-host")?document.querySelector("[data-footer-host]").getAt
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 26 26 28 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 6d 61 69 6e 6e 61 76 2e 70 75 73 68 28 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 73 65 63 6f 6e 64 6e 61 76 5b 65 5d 29 2c 64 65 6c 65 74 65 20 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 73 65 63 6f 6e 64 6e 61 76 5b 65 5d 29 3b 69 66 28 6e 2e 63 75 72 72 65 6e 74 59 65 61 72 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 6e 2e 64 61 74 61 46 6f 6f 74 65 72 48 6f 73 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 66 6f 6f 74 65 72 2d 68 6f 73 74 5d 22 29 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 Data Ascii: &&(n.navigation.mainnav.push(n.navigation.secondnav[e]),delete n.navigation.secondnav[e]);if(n.currentYear=(new Date).getFullYear(),n.dataFooterHost=document.querySelector("[data-footer-host]")&&document.querySelector("[data-footer-host]").getAttribute("d
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 4e 65 77 73 6c 65 74 74 65 72 53 65 72 76 69 63 65 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 6e 29 2c 6e 2e 64 65 66 61 75 6c 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 78 6d 6c 68 74 74 70 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 6d 61 6b 65 52 65 71 75 65 73 74 28 65 2c 6e 2c 6f 29 7b 63 6f Data Ascii: /!**************************************!\ !* ./src/utils/NewsletterService.js ! \***************************************/function(e,n,o){"use strict";o.r(n),n.default=class{constructor(){this.xmlhttp=new XMLHttpRequest}makeRequest(e,n,o){co
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 6e 29 3b 76 61 72 20 74 3d 6f 28 2f 2a 21 20 2e 2e 2f 74 65 6d 70 6c 61 74 65 73 2f 66 75 6c 6c 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 20 2a 2f 22 2e 2f 73 72 63 2f 74 65 6d 70 6c 61 74 65 73 2f 66 75 6c 6c 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 22 29 2c 72 3d 6f 2e 6e 28 74 29 2c 69 3d 6f 28 2f 2a 21 20 2e 2e 2f 74 65 6d 70 6c 61 74 65 73 2f 72 65 64 75 63 65 64 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 20 2a 2f 22 2e 2f 73 72 63 2f 74 65 6d 70 6c 61 74 65 73 2f 72 65 64 75 63 65 64 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 22 29 2c 73 3d 6f 2e 6e 28 69 29 2c 61 3d 6f 28 2f 2a 21 20 2e 2e 2f 74 65 6d 70 6c 61 74 65 73 2f 6d 69 6e 69 6d 61 6c 2d 66 6f 6f 74 65 72 2e 6e 6a 6b 20 2a 2f 22 2e 2f 73 72 63 2f 74 65 6d 70 6c Data Ascii: n,o){"use strict";o.r(n);var t=o(/! ../templates/full-footer.njk /"./src/templates/full-footer.njk"),r=o.n(t),i=o(/! ../templates/reduced-footer.njk /"./src/templates/reduced-footer.njk"),s=o.n(i),a=o(/! ../templates/minimal-footer.njk /"./src/templ
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 67 65 74 50 61 67 65 4c 61 6e 67 75 61 67 65 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 6e 29 2c 6f 2e 64 28 6e 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 74 3d 6f 28 2f 2a 21 20 40 73 65 64 6f 2f 76 75 65 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 6c 69 62 72 61 72 79 2f 75 74 69 6c 73 2f 73 65 64 6f 43 6f 6f 6b 69 65 4d 61 6e 61 67 65 72 20 2a 2f 22 2e 2f Data Ascii: **********************!\ !* ./src/utils/getPageLanguage.js ! \************************************/function(e,n,o){"use strict";o.r(n),o.d(n,{default:function(){return i}});var t=o(/! @sedo/vue-component-library/utils/sedoCookieManager */"./
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 73 73 2d 6c 6f 61 64 65 72 2f 64 69 73 74 2f 72 75 6e 74 69 6d 65 2f 67 65 74 55 72 6c 2e 6a 73 22 29 2c 6c 3d 6f 2e 6e 28 61 29 2c 63 3d 6e 65 77 20 55 52 4c 28 6f 28 2f 2a 21 20 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 64 72 6f 69 64 73 61 6e 73 2f 76 36 2f 73 2d 42 69 79 77 65 55 50 56 30 76 2d 79 52 62 2d 63 6a 63 69 41 7a 79 44 4d 58 68 64 44 38 73 41 6a 36 4f 41 4a 54 46 73 42 49 2e 77 6f 66 66 32 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 Data Ascii: /node_modules/css-loader/dist/runtime/getUrl.js"),l=o.n(a),c=new URL(o(/! ../../node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/droidsans/v6/s-BiyweUPV0v-yRb-cjciAzyDMXhdD8sAj6OAJTFsBI.woff2 /"./node_modules/@sedo/legacy-shared-assets-b
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2f 76 31 35 2f 6f 4d 4d 67 66 5a 4d 51 74 68 4f 72 79 51 6f 39 6e 32 32 64 63 75 76 76 44 69 6e 31 70 4b 38 61 4b 74 65 4c 70 65 5a 35 63 30 41 2e 77 6f 66 66 32 22 29 2c 6f 2e 62 29 2c 66 3d 6e 65 77 20 55 52 4c 28 6f 28 2f 2a 21 20 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2f 76 31 35 2f 37 6d 38 6c 37 54 6c 46 4f 2d 53 33 56 6b 68 48 75 52 30 61 74 Data Ascii: "./node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/roboto/v15/oMMgfZMQthOryQo9n22dcuvvDin1pK8aKteLpeZ5c0A.woff2"),o.b),f=new URL(o(/*! ../../node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/roboto/v15/7m8l7TlFO-S3VkhHuR0at
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 73 6f 75 72 63 65 73 61 6e 73 70 72 6f 2f 76 39 2f 4f 44 65 6c 49 31 61 48 42 59 44 42 71 67 65 49 41 48 32 7a 6c 4a 62 50 46 64 75 49 59 74 6f 4c 7a 77 53 54 36 38 75 68 7a 5f 59 2e 77 6f 66 66 32 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 73 6f 75 72 63 65 73 61 6e 73 70 72 6f 2f 76 39 2f 4f 44 65 6c 49 31 61 48 42 59 44 42 71 67 65 49 41 48 32 7a 6c 4a 62 50 46 64 75 49 59 74 6f 4c 7a 77 53 54 36 38 75 68 7a 5f 59 2e 77 6f 66 66 32 22 29 2c 6f 2e 62 29 2c 45 3d 6e 65 77 20 55 52 4c 28 6f 28 2f 2a 21 20 2e 2e 2f 2e 2e 2f Data Ascii: dle/fonts/googlefonts/sourcesanspro/v9/ODelI1aHBYDBqgeIAH2zlJbPFduIYtoLzwST68uhz_Y.woff2 /"./node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/sourcesanspro/v9/ODelI1aHBYDBqgeIAH2zlJbPFduIYtoLzwST68uhz_Y.woff2"),o.b),E=new URL(o(/! ../../

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	49789	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	545	OUT	GET /components/p9HJ4M2Uz7U4/full.header.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:01 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2024 11:04:16 GMT ETag: W/"66e2cab0-6c285" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-9e7271b3cba826828d1ff854a606be44 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 115 Server: cloudflare CF-RAY: 8cb7b7d10f6841a9-EWR
2024-09-30 22:41:01 UTC	849	IN	Data Raw: 37 64 39 36 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 22 2e 2f 73 72 63 2f 46 75 6c 6c 48 65 61 64 65 72 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 72 63 2f 46 75 6c 6c 48 65 61 64 65 72 2e 6a 73 20 2a 2a 2a 21 0a 20 20 5c 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 6e 29 3b 76 61 72 20 74 3d 72 28 2f 2a 21 20 2e 2f 75 74 69 6c 73 2f 4c 6f 67 69 6e 53 65 72 76 69 63 65 20 2a 2f 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 4c 6f 67 69 6e 53 65 72 76 69 63 65 2e 6a 73 22 29 2c 6f 3d 72 28 2f 2a 21 20 Data Ascii: 7d96!function(){var e={"./src/FullHeader.js":/!*************************!\ !* ./src/FullHeader.js ! \*************************/function(e,n,r){"use strict";r.r(n);var t=r(/! ./utils/LoginService /"./src/utils/LoginService.js"),o=r(/!
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 67 67 65 64 22 29 2c 74 68 69 73 2e 24 77 61 74 63 68 6c 69 73 74 53 74 61 74 75 73 4c 6f 67 67 65 64 4f 66 66 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 77 61 74 63 68 6c 69 73 74 2d 73 74 61 74 75 73 2d 6c 6f 67 67 65 64 2d 6f 66 66 22 29 2c 74 68 69 73 2e 24 77 61 74 63 68 6c 69 73 74 53 74 61 74 75 73 4c 6f 67 67 65 64 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 77 61 74 63 68 6c 69 73 74 2d 73 74 61 74 75 73 2d 6c 6f 67 67 65 64 22 29 2c 74 68 69 73 2e 24 72 65 73 70 6f 6e 73 69 76 65 4c 6f 67 69 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 72 65 73 70 6f 6e 73 69 76 65 2d 6c 6f 67 69 6e 22 29 2c 74 68 69 73 2e 24 73 65 61 72 63 68 62 61 72 3d 64 Data Ascii: gged"),this.$watchlistStatusLoggedOff=document.querySelector("#watchlist-status-logged-off"),this.$watchlistStatusLogged=document.querySelector("#watchlist-status-logged"),this.$responsiveLogin=document.querySelector("#responsive-login"),this.$searchbar=d
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 74 65 6d 2e 61 63 74 69 76 65 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 65 63 6f 6e 64 6e 61 76 2d 69 74 65 6d 2e 61 63 74 69 76 65 22 29 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 73 65 63 6f 6e 64 6e 61 76 2d 69 74 65 6d 2e 61 63 74 69 76 65 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 61 63 74 69 76 65 22 29 2c 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 22 61 63 74 69 76 65 22 29 7d 29 29 7d 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 73 65 63 6f 6e 64 6e 61 76 2d 69 74 Data Ascii: tem.active").classList.remove("active"),document.querySelector(".secondnav-item.active")&&document.querySelector(".secondnav-item.active").classList.remove("active"),e.currentTarget.classList.toggle("active")}))})),document.querySelectorAll(".secondnav-it
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 67 67 65 64 4f 66 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 69 64 64 65 6e 22 29 2c 74 68 69 73 2e 24 77 61 74 63 68 6c 69 73 74 53 74 61 74 75 73 4c 6f 67 67 65 64 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 68 69 64 64 65 6e 22 29 2c 74 68 69 73 2e 24 6c 6f 67 69 6e 53 74 61 74 75 73 4c 6f 67 67 65 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 69 6e 70 75 74 22 29 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 6e 2e 66 69 72 73 74 6e 61 6d 65 2c 74 68 69 73 2e 24 72 65 73 70 6f 6e 73 69 76 65 4c 6f 67 69 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 6c 6f 67 67 65 64 2d 6f 66 66 22 29 2c 74 68 69 73 2e 24 72 65 73 70 6f 6e 73 69 76 65 4c 6f 67 69 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6c 6f 67 67 65 64 Data Ascii: ggedOff.classList.add("hidden"),this.$watchlistStatusLogged.classList.remove("hidden"),this.$loginStatusLogged.querySelector(".input").textContent=n.firstname,this.$responsiveLogin.classList.remove("logged-off"),this.$responsiveLogin.classList.add("logged
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 2a 2a 2a 2a 2a 2f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 6e 29 3b 76 61 72 20 74 3d 72 28 2f 2a 21 20 2e 2f 75 74 69 6c 73 2f 54 65 6d 70 6c 61 74 65 20 2a 2f 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 54 65 6d 70 6c 61 74 65 2e 6a 73 22 29 2c 6f 3d 72 28 2f 2a 21 20 2e 2f 75 74 69 6c 73 2f 4c 61 6e 67 75 61 67 65 73 20 2a 2f 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 4c 61 6e 67 75 61 67 65 73 2e 6a 73 22 29 3b 6e 2e 64 65 66 61 75 6c 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 6e 29 7b 74 68 69 73 2e 76 61 72 69 61 6e 74 3d 65 2c 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 3d 6e 65 77 20 74 2e 64 65 66 61 75 6c 74 2c 74 68 69 73 2e 68 65 61 64 65 72 3d 74 68 69 73 2e 74 65 6d 70 6c 61 Data Ascii: ****/function(e,n,r){"use strict";r.r(n);var t=r(/! ./utils/Template /"./src/utils/Template.js"),o=r(/! ./utils/Languages */"./src/utils/Languages.js");n.default=class{constructor(e,n){this.variant=e,this.template=new t.default,this.header=this.templa
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 67 69 6e 26 66 3d 67 65 74 5f 73 74 61 74 75 73 26 6c 61 6e 67 75 61 67 65 3d 24 7b 74 68 69 73 2e 6c 61 6e 67 7d 60 3b 6c 65 74 20 74 3d 7b 6c 6f 67 69 6e 3a 30 2c 75 73 65 72 49 64 3a 31 2c 73 65 64 6f 70 72 6f 3a 21 31 2c 66 69 72 73 74 6e 61 6d 65 3a 22 22 2c 70 61 72 74 6e 65 72 69 64 3a 22 22 2c 69 6f 6e 6f 73 5f 73 75 72 76 65 79 3a 7b 74 6f 6b 65 6e 3a 6e 75 6c 6c 2c 74 65 6e 61 6e 74 3a 6e 75 6c 6c 2c 6c 6f 63 61 6c 65 3a 6e 75 6c 6c 7d 7d 3b 74 68 69 73 2e 78 6d 6c 68 74 74 70 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 22 2f 73 65 72 76 69 63 65 2f 63 6f 6d 6d 6f 6e 2e 70 68 70 22 2c 21 30 29 2c 74 68 69 73 2e 78 6d 6c 68 74 74 70 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 28 29 3d 3e 7b 69 66 28 34 3d 3d 3d 74 68 69 73 2e 78 6d 6c Data Ascii: gin&f=get_status&language=${this.lang}`;let t={login:0,userId:1,sedopro:!1,firstname:"",partnerid:"",ionos_survey:{token:null,tenant:null,locale:null}};this.xmlhttp.open("POST","/service/common.php",!0),this.xmlhttp.onreadystatechange=()=>{if(4===this.xml
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 6e 73 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 66 69 72 73 74 43 68 69 6c 64 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 68 69 73 2e 68 65 61 64 65 72 2c 6e 29 2c 74 68 69 73 2e 61 64 64 65 64 54 6f 42 6f 64 79 3d 21 30 2c 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 74 65 6d 70 6c 61 74 65 41 64 64 65 64 22 29 29 7d 7d 7d 2c 22 2e 2f 73 72 63 2f 75 74 69 6c 73 2f 68 65 6c 70 65 72 2f 67 65 74 50 61 67 65 4c 61 6e 67 75 61 67 65 2e 6a 73 22 3a 0a 2f 2a 21 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 21 2a 5c 0a 20 20 21 2a 2a 2a 20 2e 2f 73 Data Ascii: nst n=document.body.firstChild;n.parentNode.insertBefore(this.header,n),this.addedToBody=!0,document.dispatchEvent(new CustomEvent("templateAdded"))}}},"./src/utils/helper/getPageLanguage.js":/!*******************************************!\ !*** ./s
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 65 2e 74 72 69 6d 28 29 3b 69 66 28 21 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 22 73 65 61 72 63 68 22 29 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 22 64 65 74 61 69 6c 73 22 29 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 22 2e 70 68 70 22 29 29 7b 69 66 28 6e 29 7b 6c 65 74 20 65 3d 22 22 3b 65 2b 3d 74 3f 60 6b 65 79 77 6f 72 64 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 60 3a 22 22 2c 65 2b 3d 65 3f 22 26 22 3a 22 22 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 65 2b 3d 6e 3e 30 3f 22 26 22 Data Ascii: e.trim();if(!window.location.pathname.includes("search")\|\|window.location.pathname.includes("details")\|\|window.location.pathname.includes(".php")){if(n){let e="";e+=t?`keyword=${encodeURIComponent(t)}`:"",e+=e?"&":"";for(let n=0;n<r.length;n+=1)e+=n>0?"&"
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 73 2f 76 36 2f 73 2d 42 69 79 77 65 55 50 56 30 76 2d 79 52 62 2d 63 6a 63 69 41 7a 79 44 4d 58 68 64 44 38 73 41 6a 36 4f 41 4a 54 46 73 42 49 2e 77 6f 66 66 32 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 64 72 6f 69 64 73 61 6e 73 2f 76 36 2f 73 2d 42 69 79 77 65 55 50 56 30 76 2d 79 52 62 2d 63 6a 63 69 41 7a 79 44 4d 58 68 64 44 38 73 41 6a 36 4f 41 4a 54 46 73 42 49 2e 77 6f 66 66 32 22 29 2c 72 2e 62 29 2c 70 3d 6e 65 77 20 55 52 4c 28 72 28 2f 2a 21 20 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 Data Ascii: s/v6/s-BiyweUPV0v-yRb-cjciAzyDMXhdD8sAj6OAJTFsBI.woff2 /"./node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/droidsans/v6/s-BiyweUPV0v-yRb-cjciAzyDMXhdD8sAj6OAJTFsBI.woff2"),r.b),p=new URL(r(/! ../../node_modules/@sedo/legacy-shared-asset
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2f 76 31 35 2f 37 6d 38 6c 37 54 6c 46 4f 2d 53 33 56 6b 68 48 75 52 30 61 74 34 67 70 39 51 38 67 62 59 72 68 71 47 6c 52 61 76 5f 49 58 66 6b 2e 77 6f 66 66 32 20 2a 2f 22 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 40 73 65 64 6f 2f 6c 65 67 61 63 79 2d 73 68 61 72 65 64 2d 61 73 73 65 74 73 2d 62 75 6e 64 6c 65 2f 66 6f 6e 74 73 2f 67 6f 6f 67 6c 65 66 6f 6e 74 73 2f 72 6f 62 6f 74 6f 2f 76 31 35 2f 37 6d 38 6c 37 54 6c 46 4f 2d 53 33 56 6b 68 48 75 52 30 61 74 34 67 70 39 51 38 67 62 59 72 68 71 47 6c 52 61 76 5f 49 58 66 6b 2e Data Ascii: /../node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/roboto/v15/7m8l7TlFO-S3VkhHuR0at4gp9Q8gbYrhqGlRav_IXfk.woff2 */"./node_modules/@sedo/legacy-shared-assets-bundle/fonts/googlefonts/roboto/v15/7m8l7TlFO-S3VkhHuR0at4gp9Q8gbYrhqGlRav_IXfk.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	49790	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	538	OUT	GET /browser-ui/latest/loader.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:01 UTC	1008	IN	HTTP/1.1 200 OK x-goog-generation: 1726571827632279 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 8553 Content-Encoding: gzip x-goog-hash: crc32c=LoTiLg== x-goog-hash: md5=2m/YaWSIIpsB7mg8hopp1A== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 8553 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Access-Control-Expose-Headers: Content-Length Access-Control-Expose-Headers: Transfer-Encoding X-GUploader-UploadID: AD-8ljsRSrX-l5B3PgmGwcSsmOZzDnpQ4KaVqNmVTrLh5yY4zcWu4FH33ln0id8zioVZ7waG7APy3wAomA Server: UploadServer Date: Mon, 30 Sep 2024 22:25:50 GMT Expires: Mon, 30 Sep 2024 23:25:50 GMT Cache-Control: public, max-age=3600, no-transform Age: 911 Last-Modified: Tue, 17 Sep 2024 11:17:07 GMT ETag: "da6fd8696488229b01ee683c868a69d4" Content-Type: text/javascript Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:01 UTC	382	IN	Data Raw: 1f 8b 08 08 33 65 e9 66 02 ff 74 6d 70 35 61 79 37 33 62 34 68 00 ed 3d 69 57 e3 48 92 df f7 57 08 ed 3e 4a 6a 84 0f a8 53 20 fc 5c 2e 57 35 d3 5c 83 a9 ea e9 01 8f 9f 2c a7 6d 35 b2 e4 56 4a 50 34 78 7f fb 46 e4 21 a5 7c 61 30 35 3b 6f 67 f9 80 53 79 44 46 44 46 64 44 de 1b fd 34 f4 12 3f 0a 0d f3 5e 4f 29 d1 68 12 fb 5e a2 ef dd b8 b1 46 1c 8c 8a 3d 12 62 24 dd f6 46 63 dd 4a 9c ac 08 31 ef 63 92 a4 71 a8 91 52 fd f8 ac d3 3c a9 7f 3c 6a 7e 72 74 77 34 6e 86 6e 37 20 3d dd 82 a4 6f a7 87 9f 3a 67 e7 cd cf cd 8b c6 cf 9d 56 f3 fc db 61 a3 d9 82 6c 37 91 df 3b 8b 49 9f 24 de b0 45 e2 1b df 23 14 4b 7c 3c 3a 6d fc d2 f9 54 bf a8 77 8e ea bf 35 cf 3b 67 5f 5b 3f 3b 7a 37 88 bc eb 4f 6e e2 1e b9 77 24 3e 4b e9 10 33 37 4e 4f 2e ce 4f 8f 8e 20 db 21 d4 ed 45 Data Ascii: 3eftmp5ay73b4h=iWHW>JjS \.W5\,m5VJP4xF!\|a05;ogSyDFDFdD4?^O)h^F=b$FcJ1cqR<<j~rtw4nn7 =o:gVal7;I$E#K\|<:mTw5;g_[?;z7Onw$>K37NO.O !E
2024-09-30 22:41:01 UTC	1390	IN	Data Raw: d3 80 50 92 70 12 5b f5 93 4f 1f 4f ff 06 fc ff e6 e8 d4 0d 7b dd e8 3b 8b 6f 5e 5c 00 c6 ad 4e a3 de f8 19 aa 87 02 09 20 4c 1b ae 37 24 85 0c 08 52 a6 0a 98 17 a7 e7 4d d9 56 90 de b9 38 ed 9c d4 8f 9b 9d e3 fa d9 19 63 03 4d a2 98 88 56 3b ec 5d 44 27 ee 88 1c bb e3 b1 60 49 eb eb 19 34 79 0b 2a 07 c9 00 62 cf a0 25 a1 50 3a 1e c7 84 d2 c6 68 fc c9 a7 e3 c0 bd c3 bc 17 8d cf b9 f0 24 5e 5f 11 9e 2f 67 8a 5c 0d c6 aa 5c 01 db 5a 87 a7 27 8e 0e 7c a2 20 8f 8c ab 4d a8 b4 51 bf 68 7e ea 7c ab 4a a6 76 5a f5 6f 80 72 0e 87 30 20 df aa 82 bb 2d f7 86 23 3d 31 ee 27 a6 15 83 d8 7b 9d d4 ef 48 b8 7b 52 e2 35 55 e6 43 47 97 f1 ba e3 24 77 63 12 f5 b5 d6 dd a8 1b 05 9b 9b 3a 65 81 e9 84 92 9f 90 d8 05 c6 d5 e6 28 91 c8 49 26 f6 3c 0d 03 98 8b ab 23 25 10 6b 50 Data Ascii: Pp[OO{;o^\N L7$RMV8cMV;]D'`I4y*b%P:h$^_/g\\Z'\| MQh~\|JvZor0 -#=1'{H{R5UCG$wc:e(I&<#%kP
2024-09-30 22:41:01 UTC	1390	IN	Data Raw: 65 a8 76 9d 1b 07 77 7b 61 55 a1 93 6c 85 e4 56 ab 83 12 dd 19 f1 56 d5 2c fd 1e f9 21 d0 58 d1 33 53 c2 c1 87 0a f9 d6 3c 31 cf e1 ec 54 a0 46 ce 21 09 0f c0 6d 81 93 62 96 62 82 23 22 b0 97 a8 04 e8 9a 20 5b 22 c0 91 13 06 79 91 30 a0 74 db a9 ee b9 07 4e b4 c7 8c 51 0a 0d 77 e9 b6 0f 52 10 11 f8 cd b4 63 2f 4f 03 16 cb 54 2c e1 c2 77 24 f3 55 f6 10 de 84 04 d0 1d e4 25 f6 8b d0 b6 ab 13 6e 1e c7 f3 6c 2c f0 ea b2 8d d5 31 1a 15 f7 03 f2 cb 6a e6 24 e5 ee 08 a3 36 76 2a 7b f1 be e4 ce 5e bc e5 54 cd 90 f7 03 d0 3f 5c c6 ed dc e5 0a 11 19 70 03 7b f3 b1 99 87 0a e6 5e 84 0b a6 cd 22 03 54 e5 c8 ec 87 1c a1 7b 21 a0 80 0e eb a7 a0 49 e2 ac 43 f2 19 93 5c 4a fd 41 51 4d a4 9f 89 72 0f 85 41 8c dd 78 00 ae 6a 98 50 51 03 88 6f 2e 24 f4 a0 5a a3 db 55 bb 82 Data Ascii: evw{aUlVV,!X3S<1TF!mbb#" ["y0tNQwRc/OT,w$U%nl,1j$6v*{^T?\p{^"T{!IC\JAQMrAxjPQo.$ZU
2024-09-30 22:41:01 UTC	1390	IN	Data Raw: 4c ac a3 7e 3c 3c 6c 54 ad 10 dd cf be 3f 48 79 3a 60 ab b3 a9 5a dd 07 cf 1e 47 82 a5 db d8 4f 44 da e2 e9 ea 10 bd 4f 18 46 4e d8 42 43 b4 78 f2 51 7a de e1 9e 3a 0d 79 86 53 0f f1 ec b4 76 36 28 c5 d9 ed 04 07 a5 d6 9c 99 e3 04 24 e5 96 8d eb 9a 71 0c 4c d1 bf a2 b3 0a 3d 72 a2 d1 61 94 06 3d ad 4b 34 57 13 05 f3 81 0b 14 f0 65 d3 88 99 58 52 62 b3 20 ce 82 71 a3 92 dd 44 bc cf 09 c5 0f 28 98 c0 48 02 46 5e f7 ac 77 51 ac 9b ce d6 19 66 27 94 a9 6a 02 41 8c 78 c1 5c 78 17 97 cb f3 64 c5 b8 8e 2f 2e c2 d3 b3 ec 85 ee 65 71 a9 42 b6 c9 04 c6 ec b1 c3 d6 01 36 37 5d 43 99 d8 c6 75 9b 90 c5 81 00 4c 3b ec d1 7c 87 fd 43 f5 b9 d3 db 9e 01 2a b3 63 e2 f4 03 0b ee e2 20 9c 07 5f 9b 38 46 63 c1 37 10 4c 59 b0 fa ce 54 54 c7 5b bc c2 56 23 b9 d6 11 2e c7 bd 05 Data Ascii: L~<<lT?Hy:`ZGODOFNBCxQz:ySv6($qL=ra=K4WeXRb qD(HF^wQf'jAx\xd/.eqB67]CuL;\|C*c _8Fc7LYTT[V#.
2024-09-30 22:41:01 UTC	1390	IN	Data Raw: f8 43 51 66 2b a5 2b ea 01 5b 4d 7d 0c 65 06 f0 87 a2 cc 56 b4 9f d0 e1 88 55 ef f5 c4 9b 55 ba 7e 87 09 d6 83 33 25 2b fe 14 42 2e a2 d4 1b ae d0 7f 2e 43 f4 05 1a e0 ce ed 3e 45 4d 67 16 c8 97 a3 9f 41 ff b1 44 a4 de 93 88 50 76 0c ac 27 48 59 bd eb 0a 93 d8 37 f2 30 fa be b2 fd 95 5b 4d d6 a3 a0 50 f1 ba 54 c8 bd 3a ab 11 90 ed e7 59 8f 02 59 e9 ba c8 f3 1d 33 ab a1 2e 76 d5 ac 87 38 af 70 5d b4 e5 8e 99 15 bb 7d b9 ab 66 3d d4 65 a5 eb 22 7f bd cd f7 52 ad 86 7c b6 df 6a 3d e4 65 a5 eb 22 3f c2 cd 5d 23 42 29 c1 13 0f ab 91 20 f6 1b 3d d6 6d 16 41 ff d8 be f3 8f 3f 9e d2 77 e6 d9 71 af 58 d9 97 f3 b7 b5 99 5d 63 85 bd 65 8f 11 5c 80 fa 90 7d 99 97 3f 8e ee 11 f5 c9 43 c2 77 1a ad d6 78 b3 9b 01 1f 6d 47 a8 43 7b 88 6f 6c f3 f9 62 76 45 49 6f 70 55 5e Data Ascii: CQf++[M}eVUU~3%+B..C>EMgADPv'HY70[MPT:YY3.v8p]}f=e"R\|j=e"?]#B) =mA?wqX]ce\}?CwxmGC{olbvEIopU^
2024-09-30 22:41:01 UTC	1390	IN	Data Raw: eb 28 2e 5d d1 09 62 ee 91 ea f1 99 45 7f 68 e3 99 0e d1 14 48 a5 27 5b 45 c9 0a b2 50 e8 fe a5 4e 5d 56 b6 df b6 51 99 ac f2 c0 0d dc ef 77 1a 4b 79 0e 17 a7 ea 9e 55 ae cb 7f 6c b7 31 d3 f3 81 cf 6f 22 71 6e 41 b9 f3 0a b7 9c 4f 9f d6 c0 c3 22 eb d2 a4 ae e2 2c 45 05 57 19 5e 18 89 a5 15 16 c6 c7 73 6b 5e 9f f8 6c 49 5c 5f a6 29 27 e9 08 da c0 90 87 13 0a 87 67 0d d3 54 ee 59 c4 ab 5c 85 30 67 17 9a 49 cc f3 c3 18 e0 f5 1e 38 bb 93 17 d5 e9 47 2b fd 21 6d 04 83 b5 88 be 48 65 e2 c6 9e 29 35 5f 45 40 5e b2 fa a5 f5 31 f7 f2 9f 56 5b 61 f6 f4 45 6a 4d 6e 96 56 c8 ae 24 7b b1 7a 56 f1 36 df fc d3 bd cd 79 22 9c ed 8a 61 b7 e9 3d a1 87 23 ec 98 6d be 47 48 6e c7 32 8b 7e 79 7e 4d 4d 89 dd b5 24 0f f2 2e b4 8f 88 c7 f2 95 83 39 a0 e5 bd 4e 0b c6 68 4f d8 6a Data Ascii: (.]bEhH'[EPN]VQwKyUl1o"qnAO",EW^sk^lI\_)'gTY\0gI8G+!mHe)5_E@^1V[aEjMnV${zV6y"a=#mGHn2~y~MM$.9NhOj
2024-09-30 22:41:01 UTC	1221	IN	Data Raw: 81 8e 9d bf b4 4e 4f c4 75 94 3c d1 cc 25 59 bc 60 83 f7 95 64 77 eb 38 f8 58 08 3e 00 c5 d4 aa 01 86 44 be e9 a0 44 ed a9 c6 c7 f0 d1 e5 18 b9 61 cf f2 a5 23 ab 5c 2f c3 5f 32 e1 4f dd b1 fc fc ed 28 5b d4 fe 8d 3d 42 16 43 d7 c3 5c 2d b0 33 68 bc a0 33 f3 4b 3c 30 c1 0b 85 92 1a a3 83 d3 ed f7 ef 0c 6a da 74 0f 29 9c c7 27 c3 b5 f4 9f 74 85 50 f0 97 01 b7 cc 0a e2 ce 22 ab eb 14 de 1e 5d f4 a2 20 08 7a d1 58 df 30 e1 17 71 d3 46 de d0 47 1c 05 dd 1a 5a 78 01 88 5a d6 19 e0 e5 1b c7 ff ea cd 0e dd bc 3b f6 a7 5b 3e 8f cd 1b 9f c7 3d a9 fd 79 91 7f 11 11 e8 a0 df da 9a f2 5b 2d fe b2 e2 46 f6 fa 5e 67 6f ca 91 5d e8 b3 e2 c3 69 e0 7c 8d c0 1a 81 23 df c3 27 17 67 ed 71 6f 1c e3 8c a2 4f 28 7b 3c 50 35 89 d8 4d 30 d8 59 cd d2 f0 75 54 c3 67 85 cc f4 dd a2 Data Ascii: NOu<%Y`dw8X>DDa#\/_2O([=BC\-3h3K<0jt)'tP"] zX0qFGZxZ;[>=y[-F^go]i\|#'gqoO({<P5M0YuTg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	49791	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	608	OUT	GET /dist/files/sourcesanspro-regular-webfont.woff2 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.sedo.com/dist/css/typo3/main.css?1724922195 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:01 UTC	895	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:01 GMT Content-Type: application/octet-stream Content-Length: 27332 Connection: close Last-Modified: Thu, 29 Aug 2024 09:03:15 GMT ETag: "66d03953-6ac4" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-0b942c7f03311d6405473fb1038344b0 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://sedo.com Access-Control-Allow-Max-Age: 86400 Access-Control-Allow-Max-Methods: GET Vary: Origin CF-Cache-Status: HIT Age: 2875 Accept-Ranges: bytes Set-Cookie: __cf_bm=XdmyCK3xDstDy0Bd_ONB8UOqPAvFZ7GVWspqS_pbfwk-1727736061-1.0.1.1-l.hRgRFyCyRZ4c1.qsdykQuwtyDtEyhvxh_IoFGn1wOE_ST8no3L3JsSVCItUZ3BiX1rGzDJOhlOPlrv0YYZVw; path=/; expires=Mon, 30-Sep-24 23:11:01 GMT; domain=.sedo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8cb7b7d1dc3241af-EWR
2024-09-30 22:41:01 UTC	474	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6a c4 00 14 00 00 00 01 60 00 00 00 6a 51 00 02 05 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 81 08 3f 46 46 54 4d 1c 1a 28 1b 82 e3 16 1c 86 0a 06 60 00 83 52 08 4c 09 84 65 11 08 0a 82 a5 60 82 86 7b 01 36 02 24 03 87 28 0b 83 56 00 04 20 05 8e 3e 07 85 64 0c 82 4c 3f 77 65 62 66 06 5b 67 4d 71 00 6f ba 49 2b b7 83 f3 b3 ad cf 4c 95 28 b7 5d 05 b7 63 cb 4d 3f 6f 64 46 b2 d2 a8 f7 ec ff ff 9c a4 32 86 26 55 d3 96 02 a0 9b fb 21 37 9c 64 09 42 04 05 02 12 d2 e5 d4 22 04 0f a4 27 79 75 8c a8 9c be 1c 73 2c 43 a5 b6 8b 33 7b 87 28 d0 ad db d1 b9 85 ac a8 1e d3 39 65 fb b0 1e 59 1f 2c 3f 2b 75 54 24 ac e9 54 df b7 3d 69 ea 97 96 8b c2 ab d5 b1 3f 54 c6 be 29 29 e7 36 eb d0 2b a4 b5 dc 4c ec cb 74 6c cb 21 Data Ascii: wOF2j`jQ?FFTM(`RLe`{6$(V >dL?webf[gMqoI+L(]cM?odF2&U!7dB"'yus,C3{(9eY,?+uT$T=i?T))6+Ltl!
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: c3 0a eb 6b ba 94 57 85 9a 3e 6d 71 fe 0d 0e 20 bc b4 00 fe 89 36 f7 a0 c1 50 e3 39 fa ea 18 dc 96 f9 5f af 66 f9 5e f2 99 eb 5f f9 ba f6 59 ba af f8 5a f7 95 96 56 75 ad 38 dd d7 94 6e cc e2 bb 9e 22 84 30 4e 9b 6b 46 18 31 a9 42 2c 62 58 06 13 c4 63 11 c3 60 1e 62 11 bc b4 41 84 c1 57 ee 9d d6 eb b1 64 a9 db 33 72 d9 72 a5 fd 7e 77 7f 2e 23 a4 94 8a 43 68 00 0c a0 61 81 2c 79 0b 58 98 11 c9 22 9e 83 cf 4c a8 be de f5 99 ff fe 00 f6 ef b4 fc 67 c9 6b 69 55 6c 59 5b 2b 9a b4 a6 74 80 48 00 d7 be 30 1a 40 86 85 9e ff ea 8f 7d 1f ab 5a 91 5b 8a bf 3e 4c b4 45 2d bb d8 4e 9a b0 31 8c 64 3f 88 4e ba fa 17 df 7d fa 33 61 9a ed bf 82 c6 a4 81 86 86 f6 67 f2 6d 44 d7 fe 9c 4b 26 9e 44 a6 69 bc 13 24 17 65 1a 5d 2d fc f7 d9 2a 3f 6b b0 67 b8 b2 01 87 b0 77 46 bb Data Ascii: kW>mq 6P9_f^_YZVu8n"0NkF1B,bXc`bAWd3rr~w.#Cha,yX"LgkiUlY[+tH0@}Z[>LE-N1d?N}3agmDK&Di$e]-*?kgwF
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 3d dd fc 62 ba df b3 c6 38 ec c5 16 6d 7f e4 ce fe 6f 9b be 36 4c 47 67 cc 4d f8 6d bc 8c e9 e0 86 85 7a 6c 0e 13 c6 9c 3a 6b cf 38 ca ee 4e b9 6a 2c 33 fe 8c 4e dd ba 30 90 29 fd 5c eb c5 39 d3 6e 95 53 ee 17 48 9c 0e 04 9c ab 9c 73 ae 48 5e 1b d5 d7 03 d6 57 82 4c 5d 37 16 83 6a 26 72 a6 dd 2a 57 22 7c e0 ca 12 7b 0d 67 00 5e 57 25 39 e5 60 5f c7 97 4a 4d f8 33 6c ba fa fe d3 c6 39 54 e8 ea 1f 55 f5 97 e7 e9 ea 49 1c df 00 9c 85 60 34 55 e0 7f b6 fa 24 bb 2f 66 fe 48 fd 39 a8 d7 06 0e b1 9b 21 9a 2b 81 a0 76 49 2a 19 f3 d1 df d9 e9 a9 45 12 92 d3 96 9c 63 c4 b2 62 d7 92 ae 0f 05 98 4c 05 e6 38 1b a2 ad b3 66 50 2b a6 59 fe e7 40 a8 24 cb 66 0e e3 9d 92 29 7d 6b e5 47 39 46 25 0c 49 66 0e fc 28 31 3f 92 38 67 ca a2 36 83 09 8e f6 83 91 40 4b 03 3c 4b b0 Data Ascii: =b8mo6LGgMmzl:k8Nj,3N0)\9nSHsH^WL]7j&rW"\|{g^W%9`_JM3l9TUI`4U$/fH9!+vIEcbL8fP+Y@$f)}kG9F%If(1?8g6@K<K
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 32 41 34 64 52 50 79 7f 66 11 14 0a 3a 8d d8 2c 72 c7 f6 2c 05 f3 66 61 ca 69 ae d5 a1 85 2f ba ec 4f 96 90 9a 6f 0e ab 00 02 36 05 52 c0 2c d9 81 b4 8d 6f 0a 83 66 f1 fa 67 e8 a6 36 b3 b5 ef d7 f0 4c 82 ce 9c 92 56 98 03 5e b6 0e 7d 0d 66 ec 3d 7e 30 f8 37 ff d6 d1 91 69 ee 1f 5a 77 ed a3 31 20 fd c1 06 a9 6f 27 68 bb db 45 f6 61 76 ff 67 bc 4e f8 78 ea c9 b5 65 a1 bc da 43 cf 19 b3 2f 95 22 2e 60 19 ab 1d 82 84 f1 f4 50 3f 59 be 35 c9 9b 60 c4 c5 76 a0 d3 05 11 41 58 50 20 c5 6a 35 ed 77 67 07 20 51 21 be 2a 9d 2d 6e 78 82 1c 03 12 4f fb 51 a1 92 7f e7 0e 64 4f 9e 09 8c 72 14 e6 d1 2a 18 f5 da 64 54 74 65 ea 30 03 49 ae fe b0 ac ed ba 15 61 a5 16 b5 e8 89 b3 0a 34 91 35 be e8 03 25 c1 1a 70 32 9c cc 7d 3d af 18 ad 35 a7 f6 64 14 e1 46 66 c8 76 04 f1 d0 Data Ascii: 2A4dRPyf:,r,fai/Oo6R,ofg6LV^}f=~07iZw1 o'hEavgNxeC/".`P?Y5`vAXP j5wg Q!-nxOQdOrdTte0Ia45%p2}=5dFfv
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 72 a0 bd e7 02 af c1 c8 54 d5 a6 46 48 09 45 15 2a 2f 20 15 22 3b 7f 23 49 73 fd 24 77 ba 62 05 22 70 0e 01 09 b1 fe 9c 88 59 20 86 3b b0 1f d0 67 d3 86 bc 66 6c 61 64 08 d2 8f 98 11 7b 6a 9f 1d f0 ae 20 71 b9 11 6b 10 44 0c 18 49 47 86 0b 84 66 3e 2e 8a d5 50 3e 35 10 44 99 a8 44 d4 5f 1f 97 b2 05 3a 72 6c 5a a7 e8 ec fb c8 34 e0 c2 c7 25 b0 b7 ef 95 b8 bd d8 6c 55 d6 f6 24 e3 91 d0 f6 55 1a 96 99 a2 b8 a5 fc 16 40 75 2a b4 d2 b0 31 50 e1 69 2b 8a 95 23 51 68 90 ab da 95 8a 77 61 e7 99 ac b9 48 05 bd 07 a3 fc 6b 05 3a ab f2 6c 92 64 24 0c 80 7a 2a 2b d4 09 41 be 8f 46 14 98 12 fa 1d 28 b8 cb 67 0d 24 af 56 ec d2 5b 34 16 15 93 59 1b 07 50 53 1a d1 ec 8e 8e 5d 9e d9 84 d4 ad 13 99 e6 dc 6a 73 f3 00 54 13 07 e4 c5 6e 7c 37 8f aa 44 1e 2d 0b 82 6c 6c 95 2c Data Ascii: rTFHE/ ";#Is$wb"pY ;gflad{j qkDIGf>.P>5DD_:rlZ4%lU$U@u1Pi+#QhwaHk:ld$z*+AF(g$V[4YPS]jsTn\|7D-ll,
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 2b 4a bd 04 ea 1e 86 61 22 2a fb f0 14 1d 59 a3 29 4f 42 67 5a f8 c7 10 6c 7f 9a b2 aa 2f 1f ba 96 d8 48 95 6b f1 54 58 ec 90 14 23 a3 b6 af 8c 8b e6 d1 b2 8d c2 d3 db 32 0b a5 38 55 68 8e 27 ef 77 2c 45 b8 ef 26 ae e7 8e 3f 93 28 8c 97 b6 83 3a a6 44 a7 ba 12 af 96 84 9d 97 ae e1 2e ae b1 59 b6 84 6f 1b 68 cd d9 0b 88 25 2a 85 f4 30 0a a5 6c 96 d4 70 73 ce 03 d4 1c 33 a5 d3 d9 cf 99 2d a1 93 32 ed 98 a5 e4 bd 90 24 82 6f a6 37 58 6f a7 68 46 6c 03 e7 73 d0 e0 59 31 d3 62 bd a7 c4 a5 1d e5 fd e4 78 b1 d2 3c 2b 6a 46 74 dc 5b e3 8b 50 1a 63 6e 3b 91 a8 01 fe 10 c3 79 7e 42 9b 88 62 05 31 bf ad 5f 30 0b 27 f2 f5 67 7f 53 28 48 2e e5 3d 09 d5 4c c5 71 b6 4f 21 63 ac 2d 78 3d 2d 39 1c 65 9d a2 7a c2 08 59 50 fc 68 6b 50 c2 fe d8 6c cc 4d 2c 6b 3b ff bc 36 8a Data Ascii: +Ja"Y)OBgZl/HkTX#28Uh'w,E&?(:D.Yoh%0lps3-2$o7XohFlsY1bx<+jFt[Pcn;y~Bb1_0'gS(H.=LqO!c-x=-9ezYPhkPlM,k;6
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: f6 24 1f 4a 8c b5 d4 16 89 ae 30 51 c4 2c d4 6a ad dc b0 2b 11 e0 1b 7b ea 8b 50 00 0f 74 85 2b c3 f4 ac ad e1 d5 fb be f6 c0 cf 6c 97 8e ae 63 a1 f9 fd 2a d5 d3 1f eb 15 f8 e3 ff 77 74 65 72 20 55 62 f8 6d b4 ae cd 50 01 f9 9c 2e 70 97 d4 08 52 80 56 0d 6b ac 51 70 87 42 cf 38 70 ee 35 1a 25 56 7c 29 79 73 47 f0 33 eb 4a e0 43 3d a7 81 60 69 17 09 16 34 81 25 87 34 b2 32 26 66 d3 e2 8a ed e8 5e f8 4f 58 c4 21 b3 5a 88 92 e3 09 63 38 b8 a6 47 c0 c0 96 1b e5 f2 c8 91 b5 00 0c d4 25 14 1b 7a c0 bb 3e 80 b5 97 c3 a1 29 ba 9e 31 b7 b8 c5 0d 41 97 3f b0 52 63 f5 54 83 61 5f c2 52 39 60 f4 db 94 35 cd ec ba fd df 40 bc 16 14 ab 6a 4b 65 a9 82 8f 82 52 40 98 c3 f3 31 ae e9 12 1e 17 1d 41 4d 33 f8 2c 54 9b 01 ad d4 72 cd 92 59 73 11 39 71 2d 79 85 f2 37 ef 6c ad Data Ascii: $J0Q,j+{Pt+lc*wter UbmP.pRVkQpB8p5%V\|)ysG3JC=`i4%42&f^OX!Zc8G%z>)1A?RcTa_R9`5@jKeR@1AM3,TrYs9q-y7l
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 9f 8f 3c f6 c4 53 cf 3c f7 d2 6b 6f 80 80 e9 ee f4 fc 42 c6 e0 a8 1a 75 f1 73 dc 39 10 1e 5f 70 2d 63 6e 51 ba 52 c3 15 8d b9 d5 9f 7e 78 cc 31 72 1d 00 3d 2e 30 57 0c ec 38 4e ac 50 03 b0 13 b5 42 31 10 76 9e 5e 9d 0b 60 00 57 52 f6 43 30 90 2d 93 20 0a d3 fa 45 25 e3 3c 09 87 cd 23 c4 62 13 00 19 5b 7d 5d bf 69 31 a9 7b af 2a 77 9a 7f 3d e3 63 bf ef 7e 4c 65 69 e0 21 26 25 ea 4d 4f cc f9 1b e5 e2 34 5d 18 fd f4 1e d9 6d 12 f5 d8 0f 76 35 16 3f 3c 20 02 d7 6a 35 61 1e 08 7c d9 7f bc 16 58 58 53 c6 ac 75 73 ce d0 91 eb c1 1c 18 17 6e 76 51 2f 45 34 e0 64 9f 4e cf 62 bf 00 02 63 ff b0 6a e1 eb b5 7b 19 d8 0f ad 0b 82 90 da 18 04 f2 f5 ea 7b 7c 53 ce ee 9c 67 45 eb 81 8c 8d 5f 38 50 2a 7c 19 1d 3d 10 df 8a d6 58 cb be 7d 96 06 8e 82 61 e3 7e 03 e0 ce bf 97 Data Ascii: <S<koBus9_p-cnQR~x1r=.0W8NPB1v^`WRC0- E%<#b[}]i1{w=c~Lei!&%MO4]mv5?< j5a\|XXSusnvQ/E4dNbcj{{\|SgE_8P\|=X}a~
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: 1b 66 ad cd cb ad a5 81 49 7a 95 12 cb 71 8c 47 3d 2d 0f 09 07 97 dd 47 b7 0b 5a 62 ad 8b e3 51 ff 1a f2 96 65 a7 9b c8 67 67 de 6f 03 b3 5a f3 a2 7f 0e f2 a0 7a 3e 63 37 a8 33 5f 57 0a fe 94 c7 63 c0 c7 51 fd a6 66 9e 0a 10 fd 22 43 f7 72 8e 05 86 70 19 8b 4b a9 b3 5c d6 a0 56 bb 18 23 c7 94 46 b9 11 2d 61 a0 28 c5 95 2e 1d 4d bd d6 96 93 a3 dd cf 85 a0 73 8d 0c d6 4a b1 cc 11 06 d8 87 ef 12 18 01 84 ce 65 8c 52 a3 d9 72 8f 07 91 66 7c e9 29 e7 57 c7 bd 7c a9 c7 50 15 2f cc 68 3e 34 0b 8e b4 32 d7 dc 17 2c 2c a7 50 79 dd 55 74 56 34 49 57 2e 7e 67 e5 74 23 c5 27 95 cc 3d 45 9a fe ec 40 8a 5f 9b 23 df 43 a5 7f f1 7a 5f 64 5a 6a 76 97 14 05 ea b7 a2 13 8c 7c f6 22 a8 78 e4 cb 3c 57 b7 12 0c ef 21 62 8c 40 49 4a b3 b2 97 27 73 47 ca 80 4c 8c 6b 86 df 5d 35 Data Ascii: fIzqG=-GZbQeggoZz>c73_WcQf"CrpK\V#F-a(.MsJeRrf\|)W\|P/h>42,,PyUtV4IW.~gt#'=E@_#Cz_dZjv\|"x<W!b@IJ'sGLk]5
2024-09-30 22:41:01 UTC	1369	IN	Data Raw: f7 55 22 ff b1 9a c3 9c 9d e7 5b 5d 61 ec 5a d3 f4 8d f0 cb f8 70 47 49 8a 00 f9 9a 0f d0 a4 0c 6b d0 72 8b ba 6b 11 8b 57 1b 1e 6d 99 90 88 f1 65 6e 67 89 b8 75 c5 08 aa 38 8b 64 7e 0c 5a d1 77 4f 0c da 97 3b 45 4e 37 33 ab df 95 e9 f7 c1 7b 9c 5d e4 97 83 20 b8 3c b6 ff 40 66 2d b2 d0 0a 07 d7 eb d2 8c d3 c4 71 ec 19 56 45 a5 99 60 79 32 c3 5c 43 c5 42 eb a2 1d 7f eb ab 8d 8e 5b 7a 06 a6 57 04 12 78 9a 3f 5a 1b cf 60 8f 81 80 50 31 6a 12 05 69 2f 91 f1 48 26 55 4f a3 6d 49 89 72 7a a6 62 6b 98 9e 3d c9 f5 8b 30 b0 00 e3 88 77 69 70 21 08 36 ce 97 9c 22 27 51 6e 1c 4b a1 48 a4 68 a8 91 ec a5 4a 46 ee 73 13 16 2d 9a 47 18 28 68 9d 16 24 f9 65 f9 dc a9 90 71 bc a3 e5 8e a5 1d cb 2f b0 8c 58 e2 b7 7c 87 ab 7e a5 71 46 14 52 5f 78 3e 8e 68 36 57 99 71 9a fb Data Ascii: U"[]aZpGIkrkWmengu8d~ZwO;EN73{] <@f-qVE`y2\CB[zWx?Z`P1ji/H&UOmIrzbk=0wip!6"'QnKHhJFs-G(h$eq/X\|~qFR_x>h6Wq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	49792	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	569	OUT	GET /typo3temp/assets/js/4c6258062633129d69aecce4f0023d9c.js?1718178726 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:02 UTC	496	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Wed, 12 Jun 2024 07:52:06 GMT ETag: W/"666953a6-21f" X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-5438d15c3028d47f1ff5189aa42afe03 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1699 Server: cloudflare CF-RAY: 8cb7b7d39f3a430a-EWR
2024-09-30 22:41:02 UTC	550	IN	Data Raw: 32 31 66 0d 0a 20 20 20 20 20 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 24 28 20 22 2e 63 65 2d 61 63 63 6f 72 64 69 6f 6e 22 20 29 2e 61 63 63 6f 72 64 69 6f 6e 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6c 61 70 73 69 62 6c 65 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 65 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 63 6f 6e 73 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6c 61 70 73 69 62 6c 65 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 76 65 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 53 74 79 6c 65 3a 20 27 63 6f 6e 74 65 6e 74 27 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a Data Ascii: 21f $(function(){ $( ".ce-accordion" ).accordion({ collapsible: true, animate: false, icons: false, collapsible: true, active: false, heightStyle: 'content' });
2024-09-30 22:41:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	49793	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:01 UTC	570	OUT	GET /fileadmin_git/resources/public/JavaScripts/splide.min.js?1724921946 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:02 UTC	520	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 29 Aug 2024 08:59:06 GMT X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-fe05afc00c8d315513df8af28c386d22 ETag: W/"66d0385a-746a" X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4221 Server: cloudflare CF-RAY: 8cb7b7d3b90f728a-EWR
2024-09-30 22:41:02 UTC	849	IN	Data Raw: 37 34 36 61 0d 0a 66 75 6e 63 74 69 6f 6e 20 72 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 69 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 72 2e 6b 65 79 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4a 74 28 6e 2c 74 2c 69 29 7b 74 26 26 72 28 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 69 26 26 72 28 6e 2c 69 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 70 72 6f 74 6f 74 79 70 65 Data Ascii: 746afunction r(n,t){for(var i=0;i<t.length;i++){var r=t[i];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(n,r.key,r)}}function Jt(n,t,i){t&&r(n.prototype,t),i&&r(n,i),Object.defineProperty(n,"prototype
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 72 61 79 2e 69 73 41 72 72 61 79 2c 78 3d 52 28 75 2c 22 66 75 6e 63 74 69 6f 6e 22 29 2c 43 3d 52 28 75 2c 22 73 74 72 69 6e 67 22 29 2c 65 6e 3d 52 28 75 2c 22 75 6e 64 65 66 69 6e 65 64 22 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 6e 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 20 69 6e 73 74 61 6e 63 65 6f 66 28 6e 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 6e 29 7b 72 65 74 75 72 6e 20 65 28 6e 29 3f 6e 3a 5b 6e 5d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 6e 2c 74 29 7b 79 28 6e 29 2e Data Ascii: ray.isArray,x=R(u,"function"),C=R(u,"string"),en=R(u,"undefined");function c(n){return null===n}function m(n){try{return n instanceof(n.ownerDocument.defaultView\|\|window).HTMLElement}catch(n){return!1}}function y(n){return e(n)?n:[n]}function g(n,t){y(n).
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 74 29 3a 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 53 74 72 69 6e 67 28 72 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 6e 2c 74 2c 69 29 7b 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6e 29 3b 72 65 74 75 72 6e 20 74 26 26 28 43 28 74 29 3f 4d 3a 49 29 28 6e 2c 74 29 2c 69 26 26 4c 28 69 2c 6e 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 6e 2c 74 2c 69 29 7b 69 66 28 65 6e 28 69 29 29 72 65 74 75 72 6e 20 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 6e 29 5b 74 5d 3b 63 28 69 29 7c 7c 28 6e 2e 73 74 79 6c 65 5b 74 5d 3d 22 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 6e 28 6e 2c 74 29 7b 5f 28 6e 2c 22 64 69 73 70 6c 61 79 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 6e 28 6e 29 7b 6e 2e 73 65 74 41 63 74 Data Ascii: t):n.setAttribute(t,String(r))})}function j(n,t,i){n=document.createElement(n);return t&&(C(t)?M:I)(n,t),i&&L(i,n),n}function _(n,t,i){if(en(i))return getComputedStyle(n)[t];c(i)\|\|(n.style[t]=""+i)}function ln(n,t){_(n,"display",t)}function dn(n){n.setAct
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 63 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 69 2c 72 29 7b 67 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 26 26 67 28 69 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3d 6e 2e 73 70 6c 69 74 28 22 2e 22 29 3b 72 28 74 2c 6e 5b 30 5d 2c 6e 5b 31 5d 29 7d 29 7d 29 7d 29 7d 72 65 74 75 72 6e 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 2c 65 29 7b 69 28 6e 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 3d 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 69 6e 20 6e 2c 6f 3d 72 3f 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2e 62 69 6e 64 28 6e 2c 74 2c 75 2c 65 29 3a 6e Data Ascii: ){var c=[];function i(n,i,r){g(n,function(t){t&&g(i,function(n){n.split(" ").forEach(function(n){n=n.split(".");r(t,n[0],n[1])})})})}return{bind:function(n,t,u,e){i(n,t,function(n,t,i){var r="addEventListener"in n,o=r?n.removeEventListener.bind(n,t,u,e):n
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 6e 20 73 28 29 7b 69 66 28 21 66 29 7b 69 66 28 63 3d 74 3f 59 28 28 65 28 29 2d 6f 29 2f 74 2c 31 29 3a 31 2c 69 26 26 69 28 63 29 2c 31 3c 3d 63 26 26 28 6e 28 29 2c 6f 3d 65 28 29 2c 72 26 26 2b 2b 61 3e 3d 72 29 29 72 65 74 75 72 6e 20 6c 28 29 3b 75 3d 68 28 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 66 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 75 26 26 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 75 29 2c 66 3d 21 28 75 3d 63 3d 30 29 7d 72 65 74 75 72 6e 7b 73 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 7c 7c 64 28 29 2c 6f 3d 65 28 29 2d 28 6e 3f 63 2a 74 3a 30 29 2c 66 3d 21 31 2c 75 3d 68 28 73 29 7d 2c 72 65 77 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 3d 65 28 29 2c 63 3d 30 2c 69 26 26 69 28 Data Ascii: n s(){if(!f){if(c=t?Y((e()-o)/t,1):1,i&&i(c),1<=c&&(n(),o=e(),r&&++a>=r))return l();u=h(s)}}function l(){f=!0}function d(){u&&cancelAnimationFrame(u),f=!(u=c=0)}return{start:function(n){n\|\|d(),o=e()-(n?c*t:0),f=!1,u=h(s)},rewind:function(){o=e(),c=0,i&&i(
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 20 65 2c 6e 3d 51 28 6f 29 2c 69 3d 6e 2e 6f 6e 2c 63 3d 6e 2e 65 6d 69 74 2c 66 3d 6e 2e 62 69 6e 64 2c 61 3d 6f 2e 43 6f 6d 70 6f 6e 65 6e 74 73 2c 73 3d 6f 2e 72 6f 6f 74 2c 6c 3d 6f 2e 6f 70 74 69 6f 6e 73 2c 64 3d 6c 2e 69 73 4e 61 76 69 67 61 74 69 6f 6e 2c 76 3d 6c 2e 75 70 64 61 74 65 4f 6e 4d 6f 76 65 2c 68 3d 6c 2e 69 31 38 6e 2c 70 3d 6c 2e 70 61 67 69 6e 61 74 69 6f 6e 2c 67 3d 6c 2e 73 6c 69 64 65 46 6f 63 75 73 2c 6d 3d 61 2e 44 69 72 65 63 74 69 6f 6e 2e 72 65 73 6f 6c 76 65 2c 79 3d 7a 28 75 2c 22 73 74 79 6c 65 22 29 2c 62 3d 7a 28 75 2c 6e 6e 29 2c 77 3d 2d 31 3c 74 2c 78 3d 66 6e 28 75 2c 22 2e 22 2b 6c 74 29 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 76 61 72 20 6e 3d 6f 2e 73 70 6c 69 64 65 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: e,n=Q(o),i=n.on,c=n.emit,f=n.bind,a=o.Components,s=o.root,l=o.options,d=l.isNavigation,v=l.updateOnMove,h=l.i18n,p=l.pagination,g=l.slideFocus,m=a.Direction.resolve,y=z(u,"style"),b=z(u,nn),w=-1<t,x=fn(u,"."+lt);function k(){var n=o.splides.map(function(
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 74 2c 69 29 7b 5f 28 69 26 26 78 7c 7c 75 2c 6e 2c 74 29 7d 2c 69 73 57 69 74 68 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 3d 55 28 6e 2d 72 29 2c 28 6e 3d 77 7c 7c 21 6c 2e 72 65 77 69 6e 64 26 26 21 6f 2e 69 73 28 50 74 29 3f 6e 3a 59 28 6e 2c 6f 2e 6c 65 6e 67 74 68 2d 6e 29 29 3c 3d 74 7d 7d 3b 72 65 74 75 72 6e 20 4f 7d 76 61 72 20 43 74 3d 66 2b 22 2d 69 6e 74 65 72 76 61 6c 22 3b 76 61 72 20 6a 74 3d 7b 70 61 73 73 69 76 65 3a 21 31 2c 63 61 70 74 75 72 65 3a 21 30 7d 3b 76 61 72 20 4e 74 3d 7b 53 70 61 63 65 62 61 72 3a 22 20 22 2c 52 69 67 68 74 3a 48 6e 2c 4c 65 66 74 3a 42 6e 2c 55 70 3a 74 2c 44 6f 77 6e 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 43 28 6e 29 3f 6e 3a 6e Data Ascii: t,i){_(i&&x\|\|u,n,t)},isWithin:function(n,t){return n=U(n-r),(n=w\|\|!l.rewind&&!o.is(Pt)?n:Y(n,o.length-n))<=t}};return O}var Ct=f+"-interval";var jt={passive:!1,capture:!0};var Nt={Spacebar:" ",Right:Hn,Left:Bn,Up:t,Down:n};function Tt(n){return n=C(n)?n:n
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 65 72 43 61 73 65 28 29 2b 6e 2e 73 6c 69 63 65 28 31 29 3a 6e 7d 29 7d 2c 6f 72 69 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2a 28 22 72 74 6c 22 3d 3d 3d 6f 2e 64 69 72 65 63 74 69 6f 6e 3f 31 3a 2d 31 29 7d 7d 7d 2c 45 6c 65 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 2c 6f 2c 75 2c 65 3d 51 28 6e 29 2c 63 3d 65 2e 6f 6e 2c 66 3d 65 2e 62 69 6e 64 2c 61 3d 6e 2e 72 6f 6f 74 2c 73 3d 69 2e 69 31 38 6e 2c 6c 3d 7b 7d 2c 64 3d 5b 5d 2c 76 3d 5b 5d 2c 68 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 72 3d 79 28 22 2e 22 2b 63 74 29 2c 6f 3d 66 6e 28 72 2c 22 2e 22 2b 66 74 29 2c 62 6e 28 72 26 26 6f 2c 22 41 20 74 72 61 63 6b 2f 6c 69 73 74 20 65 6c 65 6d 65 6e 74 20 69 73 20 6d 69 73 Data Ascii: erCase()+n.slice(1):n})},orient:function(n){return n*("rtl"===o.direction?1:-1)}}},Elements:function(n,t,i){var r,o,u,e=Q(n),c=e.on,f=e.bind,a=n.root,s=i.i18n,l={},d=[],v=[],h=[];function p(){r=y("."+ct),o=fn(r,"."+ft),bn(r&&o,"A track/list element is mis
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 65 6e 74 73 29 2e 73 6c 69 64 65 73 2c 61 3d 6e 2e 6c 69 73 74 2c 73 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 66 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 64 28 6e 2c 74 2c 2d 31 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 64 65 73 74 72 6f 79 28 29 7d 29 2c 44 28 73 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6e 2c 74 2c 69 29 7b 74 3d 52 74 28 72 2c 74 2c 69 2c 6e 29 3b 74 2e 6d 6f 75 6e 74 28 29 2c 73 2e 70 75 73 68 28 74 29 2c 73 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2e 69 6e 64 65 78 2d 74 2e 69 6e 64 65 78 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3f 70 28 66 75 6e 63 74 69 6f 6e 28 6e Data Ascii: ents).slides,a=n.list,s=[];function i(){f.forEach(function(n,t){d(n,t,-1)})}function l(){h(function(n){n.destroy()}),D(s)}function d(n,t,i){t=Rt(r,t,i,n);t.mount(),s.push(t),s.sort(function(n,t){return n.index-t.index})}function v(n){return n?p(function(n
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 69 6e 67 4c 65 66 74 22 29 2c 79 28 21 31 29 29 2c 5f 28 64 2c 73 28 22 70 61 64 64 69 6e 67 52 69 67 68 74 22 29 2c 79 28 21 30 29 29 2c 6d 28 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 6e 29 7b 76 61 72 20 74 3d 4e 28 6c 29 3b 21 6e 26 26 6f 2e 77 69 64 74 68 3d 3d 3d 74 2e 77 69 64 74 68 26 26 6f 2e 68 65 69 67 68 74 3d 3d 3d 74 2e 68 65 69 67 68 74 7c 7c 28 5f 28 64 2c 22 68 65 69 67 68 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 22 22 3b 72 26 26 28 62 6e 28 6e 3d 62 28 29 2c 22 68 65 69 67 68 74 20 6f 72 20 68 65 69 67 68 74 52 61 74 69 6f 20 69 73 20 6d 69 73 73 69 6e 67 2e 22 29 2c 6e 3d 22 63 61 6c 63 28 22 2b 6e 2b 22 20 2d 20 22 2b 79 28 21 31 29 2b 22 20 2d 20 22 2b 79 28 21 30 29 2b 22 29 22 29 3b 72 65 74 75 72 6e 20 6e 7d Data Ascii: ingLeft"),y(!1)),_(d,s("paddingRight"),y(!0)),m(!0)}function m(n){var t=N(l);!n&&o.width===t.width&&o.height===t.height\|\|(_(d,"height",function(){var n="";r&&(bn(n=b(),"height or heightRatio is missing."),n="calc("+n+" - "+y(!1)+" - "+y(!0)+")");return n}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	49794	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	560	OUT	GET /fileadmin/user_upload/Sell_Domains/Domain_Auction/FAQ.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:02 UTC	492	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: image/jpeg Content-Length: 36978 Connection: close Cf-Bgj: h2pri ETag: "6321af3e-9072" Last-Modified: Wed, 14 Sep 2022 10:38:54 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-5a5936f8bbbe9765e346f389f1b46644 CF-Cache-Status: HIT Age: 1699 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7d43c505e60-EWR
2024-09-30 22:41:02 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 0a f3 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 07 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 62 00 00 00 1b 01 05 00 01 00 00 00 6a 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1c 00 00 00 72 00 00 00 32 01 02 00 14 00 00 00 8e 00 00 00 69 87 04 00 01 00 00 00 a4 00 00 00 d0 00 00 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 34 20 57 69 6e 64 6f 77 73 00 32 30 31 36 3a 30 38 3a 31 30 20 31 31 3a 32 39 3a 32 38 00 00 00 03 00 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 8c 05 00 00 03 a0 04 00 01 00 00 00 3a 04 00 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 Data Ascii: JFIFHHExifII*bj(1r2i''Adobe Photoshop CS4 Windows2016:08:10 11:29:28:
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 12 49 25 7d ce 52 49 27 6b 5c f7 06 30 4b 9d a0 09 29 64 95 fa fa 63 63 f4 8f 24 f7 0c d0 0f 99 52 fd 9b 47 8b fe f1 ff 00 91 4c f7 61 dd 90 61 9f 67 39 25 a3 fb 36 8f 17 fd e3 ff 00 22 97 ec ca 3c 5f f7 8f fc 8a 1e f4 3c 55 ec cf c1 cd 49 69 7e cc a3 c5 ff 00 78 ff 00 c8 a5 fb 32 8f 17 fd e3 ff 00 22 97 bd 0f 15 7b 33 f0 73 52 5a 5f b3 28 f1 7f de 3f f2 29 7e cc a3 c5 ff 00 78 ff 00 c8 a5 ef 43 c5 5e cc fc 1c d4 96 97 ec ca 3c 5f f7 8f fc 8a 5f b3 28 f1 7f de 3f f2 29 7b d0 57 b3 3f 07 31 25 a7 fb 2e 8f 17 fd e3 ff 00 22 a1 67 4b 6c 7e 8d ee 69 ec 1f a8 fb db 08 fb b0 ee af 66 7d 9c f4 93 d9 5b ea 79 ae c1 b5 c3 91 fc 42 8a 7b 12 92 49 24 94 ff 00 ff d0 ec 12 49 25 7d ce 52 b9 d3 58 0b ac 7f 70 03 47 cf 9f fa 95 4d 5e e9 9c 5b f1 6f fd f9 33 2f c8 57 e2 Data Ascii: I%}RI'k\0K)dcc$RGLaag9%6"<_<UIi~x2"{3sRZ_(?)~xC^<__(?){W?1%."gKl~if}[yB{I$I%}RXpGM^[o3/W
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: a3 a7 99 80 eb 6c f5 6a 20 39 df 4d ae e0 ff 00 29 ae 0a bf ec cc af 16 7f 9d ff 00 98 a0 d5 97 93 4b 76 d6 ff 00 68 e1 ae 01 c0 7c 37 22 7e d2 cc fd e6 ff 00 9a 14 60 64 1a 02 08 64 32 c4 75 20 82 7b 2f fb 33 2b c5 9f e7 7f e6 29 1e 9b 94 01 23 6b 88 ec 1d a9 f8 68 9b f6 96 5f ef 37 fc d0 a5 4f 54 b8 3c 7a f0 ea ce 87 6b 60 8f e5 0f de 4b f5 bf d5 57 ea bf ac 1a 69 2d 3c cc 36 e4 37 d7 c7 20 d8 44 e9 c3 c7 fe 94 59 7e 5c 11 a1 05 3e 32 12 1f 98 59 38 18 9d 7e 85 b5 5f 4f c8 b6 b6 d8 d2 cd af 12 24 c1 fc 8a 5f b2 f2 fc 59 fe 77 fe 62 ac b6 d7 d5 d2 99 63 20 39 ac 6c 12 24 6a ed aa a7 ed 3c cf de 6f f9 81 30 1c 86 ea b4 24 6a bc c7 18 ab bb 20 1d 17 fd 97 95 e2 cf f3 bf f3 14 bf 65 e5 f8 b3 fc ef fc c5 47 f6 9e 67 ef 37 fc c0 97 ed 3c cf de 6f f9 81 2f d6 Data Ascii: lj 9M)Kvh\|7"~`dd2u {/3+)#kh_7OT<zk`KWi-<67 DY~\>2Y8~_O$_Ywbc 9l$j<o0$j eGg7<o/
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 04 3a 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 05 8c 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 Data Ascii: autoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlong:RghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellText
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: ac 7f 70 03 47 cf 9f fa 95 4d 5e e9 9c 5b f1 6f fd f9 33 2f c8 57 e2 f9 c3 5f 32 e7 d9 73 da 49 d8 c2 5a d6 f6 d3 49 40 85 3b ff 00 9f b7 fa ee fc a9 55 5b ed 78 ad 91 b8 c9 12 63 84 e1 42 23 a0 a5 a6 cc 8f 52 4b 08 4b 45 67 f6 7e 57 83 7f ce 09 bf 67 e5 78 37 fc e0 97 1c 7f 78 7d a9 e0 97 ee 9f b1 ac 94 2b 3f b3 f2 bc 1b fe 70 4b f6 76 57 83 7f ce 09 71 c7 f7 87 da ae 09 7e e9 fb 1a da 25 0a cf ec ec af 06 ff 00 9c 12 fd 9d 95 e0 df f3 82 5c 71 fd e1 f6 a3 82 5f ba 7e c6 b4 04 da 2b 5f b3 b2 fc 1b fe 70 4b f6 76 57 83 7f ce 09 71 c7 f7 87 da af 6e 5f ba 7e c6 ac 04 4a b2 2d a0 ee ad c6 3b b0 fd 13 f1 0a 36 d6 fa ac 35 be 37 08 98 33 c8 95 03 c2 3a 11 dc 14 6a 0f 62 1d 1e a4 d6 be 8a ef 1c c8 8f ea bc 6e 85 9e b4 73 7f e4 fa ff 00 eb 7f f5 2b 35 33 17 cb Data Ascii: pGM^[o3/W_2sIZI@;U[xcB#RKKEg~Wgx7x}+?pKvWq~%\q_~+_pKvWqn_~J-;6573:jbns+53
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: b3 fc ef fc c5 47 f6 9e 67 ef 37 fc c0 97 ed 3c cf de 6f f9 81 2f d6 ff 00 55 5f aa fe b3 2f d9 79 7e 2c ff 00 3b ff 00 31 46 c6 e9 65 af 0f bc 87 46 a2 b6 ea 09 fe 5b 95 7f da 79 9f bc df f3 02 1d b9 b9 57 34 b5 f6 7b 4f 2d 68 0d 07 e3 b5 2a c8 74 b0 3c 95 78 86 a0 13 e6 9b a9 65 36 eb 05 6c 3b 99 59 24 b8 70 5c 7c 3f aa a9 a4 92 7c 40 00 00 c7 29 19 12 4f 55 24 92 64 50 ff 00 ff d5 eb 12 49 32 be e6 ae 99 24 92 52 92 49 24 94 a4 c9 24 92 9b 18 79 8e c6 76 d7 4b a9 71 f7 37 b8 3f be c5 77 2f 0d 99 4d 19 14 10 6c 22 41 1c 3c 7f e4 d6 52 3e 1e 63 f1 9d 06 5d 4b 8f b9 9d c1 fd f6 7f 29 32 51 37 c5 1f 9b fe 93 24 26 2b 86 5f 2f fd 16 e5 cd 73 3a 40 6b c1 6b 9a c6 82 d3 c8 f7 05 96 b6 33 9e c7 f4 f7 bd 84 39 8e 0d 2d 70 ef ee 6a c7 43 16 c7 fb c5 39 85 10 3f Data Ascii: Gg7<o/U_/y~,;1FeF[yW4{O-h*t<xe6l;Y$p\\|?\|@)OU$dPI2$RI$$yvKq7?w/Ml"A<R>c]K)2Q7$&+_/s:@kk39-pjC9?
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 30 3a 33 32 3a 31 31 2b 30 32 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 31 3a 32 39 3a 32 38 2b 30 32 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 31 36 2d 30 38 2d 31 30 54 31 31 3a 32 39 3a 32 38 2b 30 32 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3d 22 31 22 20 74 69 66 66 3a 58 52 65 73 6f 6c 75 74 69 6f 6e 3d 22 37 32 30 30 30 30 Data Ascii: Photoshop CC 2015 (Macintosh)" xmp:CreateDate="2016-08-10T10:32:11+02:00" xmp:ModifyDate="2016-08-10T11:29:28+02:00" xmp:MetadataDate="2016-08-10T11:29:28+02:00" dc:format="image/jpeg" photoshop:ColorMode="3" tiff:Orientation="1" tiff:XResolution="720000
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: d="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 08 00 01 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 01 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 4a 00 00 00 07 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 01 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 92 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 00 00 07 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 48 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 41 30 00 00 00 00 00 07 60 00 00 00 00 00 00 00 00 00 00 00 00 00 7b f3 be 1e 97 7b 9d 2a 7a 7b b3 bf 39 ed Data Ascii: 00J`0 ` H@A0`{{*z{9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	49795	104.16.141.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	895	OUT	POST /service/common.php HTTP/1.1 Host: sedo.com Connection: keep-alive Content-Length: 45 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://sedo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sedo.com/us/park-domains/?tracked=&partnerid=&language=us Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US
2024-09-30 22:41:02 UTC	45	OUT	Data Raw: 76 3d 30 2e 31 26 6d 3d 6c 6f 67 69 6e 26 66 3d 67 65 74 5f 73 74 61 74 75 73 26 6c 61 6e 67 75 61 67 65 3d 75 6e 64 65 66 69 6e 65 64 Data Ascii: v=0.1&m=login&f=get_status&language=undefined
2024-09-30 22:41:02 UTC	685	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Origin x-sedo-request-id: ID-848758bd5-ncl44-8a8e5756c618b9bc3e20b669d01b4b81 expires: Thu, 19 Nov 1981 08:52:00 GMT x-ua-compatible: IE=edge pragma: no-cache strict-transport-security: max-age=2592000 cache-control: no-store, no-cache, must-revalidate x-content-type-options: nosniff x-frame-options: sameorigin Access-Control-Allow-Origin: https://sedo.com Access-Control-Allow-Max-Age: 86400 Access-Control-Allow-Max-Methods: GET CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8cb7b7d47bcf42cf-EWR
2024-09-30 22:41:02 UTC	449	IN	Data Raw: 31 62 61 0d 0a 7b 22 68 22 3a 7b 22 76 22 3a 22 30 2e 31 22 2c 22 73 22 3a 30 7d 2c 22 62 22 3a 7b 22 6c 6f 67 69 6e 22 3a 30 2c 22 75 73 65 72 49 64 22 3a 30 2c 22 73 65 64 6f 70 72 6f 22 3a 66 61 6c 73 65 2c 22 66 69 72 73 74 6e 61 6d 65 22 3a 22 22 2c 22 70 61 72 74 6e 65 72 69 64 22 3a 22 22 2c 22 74 65 78 74 22 3a 7b 22 75 73 65 72 6e 61 6d 65 22 3a 22 4c 6f 67 69 6e 20 4e 61 6d 65 22 2c 22 70 61 73 73 77 6f 72 64 22 3a 22 50 61 73 73 77 6f 72 64 22 2c 22 66 6f 72 67 6f 74 64 65 74 61 69 6c 73 22 3a 22 46 6f 72 67 6f 74 20 44 65 74 61 69 6c 73 3f 22 2c 22 70 61 73 73 77 6f 72 64 5f 66 6f 72 67 6f 74 22 3a 22 46 6f 72 67 6f 74 20 44 65 74 61 69 6c 73 3f 22 2c 22 6c 6f 67 69 6e 5f 62 75 74 74 6f 6e 22 3a 22 4c 6f 67 69 6e 22 2c 22 6c 6f 67 69 6e 22 3a Data Ascii: 1ba{"h":{"v":"0.1","s":0},"b":{"login":0,"userId":0,"sedopro":false,"firstname":"","partnerid":"","text":{"username":"Login Name","password":"Password","forgotdetails":"Forgot Details?","password_forgot":"Forgot Details?","login_button":"Login","login":
2024-09-30 22:41:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	49797	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	778	OUT	GET /components/p9HJ4M2Uz7U4/b75b73e313804cf110ea.svg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:02 UTC	511	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2024 11:04:14 GMT ETag: W/"66e2caae-61ea" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-6a7678c95ae5eb148e73acdf2b41b2d7 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4788 Server: cloudflare CF-RAY: 8cb7b7d4784bde96-EWR
2024-09-30 22:41:02 UTC	858	IN	Data Raw: 36 31 65 61 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 35 30 22 20 68 65 69 67 68 74 3d 22 36 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 30 20 36 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 38 30 2e 31 39 39 36 20 33 37 2e 34 39 39 38 48 38 38 2e 39 32 34 35 56 30 48 38 30 2e 31 39 39 36 56 31 31 2e 35 37 34 39 43 37 39 2e 31 36 31 32 20 31 31 2e 30 36 37 38 20 37 38 2e 30 39 32 35 20 31 30 2e 36 32 35 33 20 37 36 2e 39 39 39 36 20 31 30 2e 32 34 39 39 43 37 35 2e 37 30 32 37 20 39 2e 38 Data Ascii: 61ea<svg width="250" height="65" viewBox="0 0 250 65" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M80.1996 37.4998H88.9245V0H80.1996V11.5749C79.1612 11.0678 78.0925 10.6253 76.9996 10.2499C75.7027 9.8
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 35 32 35 35 20 33 31 2e 38 37 35 34 20 37 33 2e 36 39 35 34 20 33 31 2e 37 35 31 32 20 37 32 2e 39 32 39 35 20 33 31 2e 34 33 37 39 43 37 32 2e 31 36 33 36 20 33 31 2e 31 32 34 36 20 37 31 2e 34 38 34 34 20 33 30 2e 36 33 31 33 20 37 30 2e 39 34 39 36 20 32 39 2e 39 39 39 38 43 36 39 2e 38 37 38 37 20 32 38 2e 32 34 36 36 20 36 39 2e 33 39 36 39 20 32 36 2e 31 39 36 36 20 36 39 2e 35 37 34 36 20 32 34 2e 31 34 39 39 43 36 39 2e 34 35 33 35 20 32 32 2e 30 33 31 35 20 37 30 2e 30 35 32 36 20 31 39 2e 39 33 34 35 20 37 31 2e 32 37 34 36 20 31 38 2e 31 39 39 39 43 37 31 2e 39 30 37 37 20 31 37 2e 34 36 38 35 20 37 32 2e 37 30 33 32 20 31 36 2e 38 39 35 34 20 37 33 2e 35 39 37 35 20 31 36 2e 35 32 36 34 43 37 34 2e 34 39 31 37 20 31 36 2e 31 35 37 34 20 37 35 Data Ascii: 5255 31.8754 73.6954 31.7512 72.9295 31.4379C72.1636 31.1246 71.4844 30.6313 70.9496 29.9998C69.8787 28.2466 69.3969 26.1966 69.5746 24.1499C69.4535 22.0315 70.0526 19.9345 71.2746 18.1999C71.9077 17.4685 72.7032 16.8954 73.5975 16.5264C74.4917 16.1574 75
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 37 35 36 20 31 35 2e 30 38 36 31 20 34 33 2e 30 34 39 38 20 31 35 2e 31 34 39 39 43 34 31 2e 35 36 34 37 20 31 35 2e 30 38 35 31 20 34 30 2e 31 30 34 33 20 31 35 2e 35 34 35 33 20 33 38 2e 39 32 34 38 20 31 36 2e 34 34 39 39 43 33 38 2e 33 34 38 33 20 31 36 2e 39 38 30 33 20 33 37 2e 38 39 20 31 37 2e 36 32 36 32 20 33 37 2e 35 37 39 39 20 31 38 2e 33 34 35 36 43 33 37 2e 32 36 39 37 20 31 39 2e 30 36 34 39 20 33 37 2e 31 31 34 37 20 31 39 2e 38 34 31 36 20 33 37 2e 31 32 34 38 20 32 30 2e 36 32 34 39 48 34 38 2e 33 39 39 37 5a 4d 32 35 2e 33 39 39 39 20 32 38 2e 39 39 39 38 43 32 35 2e 34 31 31 32 20 33 30 2e 33 35 39 33 20 32 35 2e 30 36 39 32 20 33 31 2e 36 39 38 35 20 32 34 2e 34 30 37 35 20 33 32 2e 38 38 36 31 43 32 33 2e 37 34 35 38 20 33 34 2e 30 Data Ascii: 756 15.0861 43.0498 15.1499C41.5647 15.0851 40.1043 15.5453 38.9248 16.4499C38.3483 16.9803 37.89 17.6262 37.5799 18.3456C37.2697 19.0649 37.1147 19.8416 37.1248 20.6249H48.3997ZM25.3999 28.9998C25.4112 30.3593 25.0692 31.6985 24.4075 32.8861C23.7458 34.0
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 34 39 39 20 31 35 2e 34 39 39 39 43 31 32 2e 38 33 38 37 20 31 35 2e 34 36 34 38 20 31 31 2e 36 33 32 34 20 31 35 2e 36 36 38 37 20 31 30 2e 34 39 39 39 20 31 36 2e 30 39 39 39 43 39 2e 35 34 39 39 35 20 31 36 2e 34 37 34 39 20 39 2e 30 37 34 39 35 20 31 37 2e 30 32 34 39 20 39 2e 30 37 34 39 35 20 31 37 2e 37 32 34 39 43 39 2e 30 35 32 37 39 20 31 38 2e 30 30 35 34 20 39 2e 31 30 30 35 38 20 31 38 2e 32 38 36 39 20 39 2e 32 31 34 30 32 20 31 38 2e 35 34 34 33 43 39 2e 33 32 37 34 36 20 31 38 2e 38 30 31 38 20 39 2e 35 30 33 30 32 20 31 39 2e 30 32 37 20 39 2e 37 32 34 39 34 20 31 39 2e 31 39 39 39 43 31 30 2e 36 36 38 38 20 31 39 2e 37 32 38 38 20 31 31 2e 37 30 33 32 20 32 30 2e 30 37 36 34 20 31 32 2e 37 37 34 39 20 32 30 2e 32 32 34 39 4c 31 35 2e 36 Data Ascii: 499 15.4999C12.8387 15.4648 11.6324 15.6687 10.4999 16.0999C9.54995 16.4749 9.07495 17.0249 9.07495 17.7249C9.05279 18.0054 9.10058 18.2869 9.21402 18.5443C9.32746 18.8018 9.50302 19.027 9.72494 19.1999C10.6688 19.7288 11.7032 20.0764 12.7749 20.2249L15.6
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 20 31 38 2e 33 31 36 20 31 31 32 2e 31 37 34 20 31 37 2e 35 37 34 39 43 31 31 31 2e 37 30 38 20 31 36 2e 39 33 36 38 20 31 31 31 2e 30 36 35 20 31 36 2e 34 34 39 39 20 31 31 30 2e 33 32 34 20 31 36 2e 31 37 34 39 43 31 30 39 2e 35 37 34 20 31 35 2e 38 39 30 34 20 31 30 38 2e 37 37 37 20 31 35 2e 37 34 36 34 20 31 30 37 2e 39 37 34 20 31 35 2e 37 34 39 39 43 31 30 37 2e 32 31 38 20 31 35 2e 37 34 32 31 20 31 30 36 2e 34 36 36 20 31 35 2e 38 36 30 34 20 31 30 35 2e 37 34 39 20 31 36 2e 30 39 39 39 43 31 30 35 2e 30 31 39 20 31 36 2e 33 38 32 31 20 31 30 34 2e 33 37 34 20 31 36 2e 38 34 36 39 20 31 30 33 2e 38 37 34 20 31 37 2e 34 34 39 39 43 31 30 33 2e 32 34 35 20 31 38 2e 31 39 35 39 20 31 30 32 2e 37 37 37 20 31 39 2e 30 36 34 31 20 31 30 32 2e 34 39 39 Data Ascii: 18.316 112.174 17.5749C111.708 16.9368 111.065 16.4499 110.324 16.1749C109.574 15.8904 108.777 15.7464 107.974 15.7499C107.218 15.7421 106.466 15.8604 105.749 16.0999C105.019 16.3821 104.374 16.8469 103.874 17.4499C103.245 18.1959 102.777 19.0641 102.499
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 33 33 35 20 31 35 31 2e 33 38 20 32 32 2e 30 36 34 32 20 31 35 31 2e 34 39 39 20 32 34 2e 32 32 34 39 43 31 35 31 2e 34 34 36 20 32 36 2e 33 35 30 32 20 31 35 32 2e 32 30 36 20 32 38 2e 34 31 35 36 20 31 35 33 2e 36 32 34 20 32 39 2e 39 39 39 38 43 31 35 34 2e 33 34 20 33 30 2e 37 30 30 33 20 31 35 35 2e 31 39 35 20 33 31 2e 32 34 32 34 20 31 35 36 2e 31 33 34 20 33 31 2e 35 39 31 33 43 31 35 37 2e 30 37 33 20 33 31 2e 39 34 30 31 20 31 35 38 2e 30 37 35 20 33 32 2e 30 38 37 38 20 31 35 39 2e 30 37 34 20 33 32 2e 30 32 34 38 43 31 36 30 2e 30 37 20 33 32 2e 30 33 36 31 20 31 36 31 2e 30 36 33 20 33 31 2e 39 30 39 39 20 31 36 32 2e 30 32 34 20 33 31 2e 36 34 39 38 43 31 36 32 2e 37 38 31 20 33 31 2e 34 34 34 34 20 31 36 33 2e 35 31 31 20 33 31 2e 31 35 30 Data Ascii: 335 151.38 22.0642 151.499 24.2249C151.446 26.3502 152.206 28.4156 153.624 29.9998C154.34 30.7003 155.195 31.2424 156.134 31.5913C157.073 31.9401 158.075 32.0878 159.074 32.0248C160.07 32.0361 161.063 31.9099 162.024 31.6498C162.781 31.4444 163.511 31.150
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 35 39 32 20 33 32 2e 31 34 35 38 20 31 38 33 2e 37 39 39 20 33 31 2e 38 32 34 38 43 31 38 33 2e 30 37 20 33 31 2e 35 34 31 32 20 31 38 32 2e 34 33 31 20 33 31 2e 30 36 36 32 20 31 38 31 2e 39 34 39 20 33 30 2e 34 34 39 38 43 31 38 31 2e 33 36 34 20 32 39 2e 37 31 35 36 20 31 38 30 2e 39 34 35 20 32 38 2e 38 36 32 34 20 31 38 30 2e 37 32 34 20 32 37 2e 39 34 39 38 43 31 38 30 2e 34 33 34 20 32 36 2e 36 37 39 32 20 31 38 30 2e 32 39 39 20 32 35 2e 33 37 38 20 31 38 30 2e 33 32 34 20 32 34 2e 30 37 34 39 43 31 38 30 2e 32 38 38 20 32 32 2e 36 38 34 34 20 31 38 30 2e 34 34 38 20 32 31 2e 32 39 35 39 20 31 38 30 2e 37 39 39 20 31 39 2e 39 34 39 39 43 31 38 31 2e 30 33 33 20 31 39 2e 30 33 32 32 20 31 38 31 2e 34 36 39 20 31 38 2e 31 37 38 32 20 31 38 32 2e 30 Data Ascii: 592 32.1458 183.799 31.8248C183.07 31.5412 182.431 31.0662 181.949 30.4498C181.364 29.7156 180.945 28.8624 180.724 27.9498C180.434 26.6792 180.299 25.378 180.324 24.0749C180.288 22.6844 180.448 21.2959 180.799 19.9499C181.033 19.0322 181.469 18.1782 182.0
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 30 32 34 39 56 32 30 2e 36 34 39 39 43 32 34 30 2e 35 32 36 20 31 39 2e 38 37 34 39 20 32 34 30 2e 33 35 37 20 31 39 2e 31 31 31 33 20 32 34 30 2e 30 34 39 20 31 38 2e 33 39 39 39 43 32 33 39 2e 37 38 20 31 37 2e 38 33 31 34 20 32 33 39 2e 33 30 37 20 31 37 2e 33 38 35 31 20 32 33 38 2e 37 32 34 20 31 37 2e 31 34 39 39 43 32 33 37 2e 39 32 38 20 31 36 2e 38 34 31 38 20 32 33 37 2e 30 37 36 20 31 36 2e 37 30 35 34 20 32 33 36 2e 32 32 34 20 31 36 2e 37 34 39 39 43 32 33 35 2e 34 39 39 20 31 36 2e 37 35 30 38 20 32 33 34 2e 37 38 20 31 36 2e 38 37 37 37 20 32 33 34 2e 30 39 39 20 31 37 2e 31 32 34 39 43 32 33 33 2e 32 30 36 20 31 37 2e 34 35 36 38 20 32 33 32 2e 33 34 34 20 31 37 2e 38 36 36 37 20 32 33 31 2e 35 32 34 20 31 38 2e 33 34 39 39 5a 4d 31 30 2e Data Ascii: 0249V20.6499C240.526 19.8749 240.357 19.1113 240.049 18.3999C239.78 17.8314 239.307 17.3851 238.724 17.1499C237.928 16.8418 237.076 16.7054 236.224 16.7499C235.499 16.7508 234.78 16.8777 234.099 17.1249C233.206 17.4568 232.344 17.8667 231.524 18.3499ZM10.
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 35 38 2e 33 39 35 34 20 38 2e 30 37 37 35 37 20 35 38 2e 36 38 38 33 20 37 2e 37 34 39 39 36 20 35 38 2e 38 39 39 37 43 37 2e 33 36 31 37 37 20 35 39 2e 31 36 31 35 20 36 2e 39 31 35 35 31 20 35 39 2e 33 32 34 36 20 36 2e 34 34 39 39 36 20 35 39 2e 33 37 34 37 43 35 2e 37 37 32 35 20 35 39 2e 34 38 35 39 20 35 2e 30 38 36 34 32 20 35 39 2e 35 33 36 31 20 34 2e 33 39 39 39 38 20 35 39 2e 35 32 34 37 48 31 2e 38 39 39 39 39 56 35 34 2e 31 39 39 37 48 34 2e 37 39 39 39 37 43 35 2e 33 33 32 39 20 35 34 2e 31 37 30 35 20 35 2e 38 36 37 30 33 20 35 34 2e 31 37 30 35 20 36 2e 33 39 39 39 36 20 35 34 2e 31 39 39 37 43 36 2e 37 38 34 38 36 20 35 34 2e 32 33 32 34 20 37 2e 31 35 39 31 31 20 35 34 2e 33 34 32 39 20 37 2e 34 39 39 39 36 20 35 34 2e 35 32 34 37 43 37 Data Ascii: 58.3954 8.07757 58.6883 7.74996 58.8997C7.36177 59.1615 6.91551 59.3246 6.44996 59.3747C5.7725 59.4859 5.08642 59.5361 4.39998 59.5247H1.89999V54.1997H4.79997C5.3329 54.1705 5.86703 54.1705 6.39996 54.1997C6.78486 54.2324 7.15911 54.3429 7.49996 54.5247C7
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 36 2e 33 36 33 20 36 31 2e 31 34 32 37 20 31 36 37 2e 33 35 32 20 36 31 2e 30 35 38 39 20 31 36 38 2e 33 32 34 20 36 30 2e 38 37 34 36 43 31 36 39 2e 31 33 33 20 36 30 2e 37 30 38 32 20 31 36 39 2e 39 30 39 20 36 30 2e 34 31 32 37 20 31 37 30 2e 36 32 34 20 35 39 2e 39 39 39 37 43 31 37 31 2e 35 38 36 20 35 39 2e 33 37 30 32 20 31 37 32 2e 33 37 37 20 35 38 2e 35 31 31 20 31 37 32 2e 39 32 34 20 35 37 2e 34 39 39 37 5a 4d 31 36 39 2e 35 32 34 20 35 31 2e 33 39 39 37 43 31 36 39 2e 38 38 35 20 35 32 2e 31 38 32 31 20 31 37 30 2e 30 35 36 20 35 33 2e 30 33 38 36 20 31 37 30 2e 30 32 34 20 35 33 2e 38 39 39 37 4c 31 36 39 2e 39 39 39 20 35 33 2e 38 37 34 37 43 31 37 30 2e 30 35 31 20 35 34 2e 36 39 37 32 20 31 36 39 2e 39 30 36 20 35 35 2e 35 32 30 32 20 31 Data Ascii: 6.363 61.1427 167.352 61.0589 168.324 60.8746C169.133 60.7082 169.909 60.4127 170.624 59.9997C171.586 59.3702 172.377 58.511 172.924 57.4997ZM169.524 51.3997C169.885 52.1821 170.056 53.0386 170.024 53.8997L169.999 53.8747C170.051 54.6972 169.906 55.5202 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.7	49796	104.16.141.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	755	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US
2024-09-30 22:41:02 UTC	388	IN	HTTP/1.1 302 Found Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Strict-Transport-Security: max-age=2592000 Server: cloudflare CF-RAY: 8cb7b7d47c1f4401-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.7	49798	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	778	OUT	GET /components/zkLxDsbw1hz2/e3c69f63348c1ec6e547.png HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:02 UTC	475	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: image/png Content-Length: 4210 Connection: close Last-Modified: Thu, 12 Sep 2024 08:56:03 GMT ETag: "66e2aca3-1072" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-4df5e05732e4a8eaf3ff67bea98018ef X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4221 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7d47f44c338-EWR
2024-09-30 22:41:02 UTC	894	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 14 08 06 00 00 00 0a 94 36 4e 00 00 0a 43 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 aa 0d 00 ec f4 49 Data Ascii: PNGIHDR6NCiCCPICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"I
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 84 31 c2 27 22 93 a8 4f b4 25 7a 12 f9 c4 78 62 3a b1 90 58 46 ac 26 ee 21 1e 21 9e 25 5e 27 0e 13 5f 93 48 24 0e c9 92 e4 4e 0a 21 25 90 32 49 0b 49 6b 48 db 48 2d a4 53 a4 3e d2 10 69 9c 4c 26 eb 90 6d c9 de e4 08 b2 80 ac 20 97 91 b7 90 0f 90 4f 92 fb c9 c3 e4 b7 14 3a c5 88 e2 4c 09 a2 24 52 a4 94 12 4a 35 65 3f e5 04 a5 9f 32 42 99 a0 aa 51 cd a9 9e d4 08 aa 88 3a 9f 5a 49 6d a0 76 50 2f 53 87 a9 13 34 75 9a 25 cd 9b 16 43 cb a4 2d a3 d5 d0 9a 69 67 69 f7 68 2f e9 74 ba 09 dd 83 1e 45 97 d0 97 d2 6b e8 07 e9 e7 e9 83 f4 77 0c 0d 86 0d 83 c7 48 62 28 19 6b 19 7b 19 a7 18 b7 19 2f 99 4c a6 05 d3 97 99 c8 54 30 d7 32 1b 99 67 98 0f 98 6f 55 58 2a f6 2a 7c 15 91 ca 12 95 3a 95 56 95 7e 95 e7 aa 54 55 73 55 3f d5 79 aa 0b 54 ab 55 0f ab 5e 56 7d a6 46 55 Data Ascii: 1'"O%zxb:XF&!!%^'_H$N!%2IIkHH-S>iL&m O:L$RJ5e?2BQ:ZImvP/S4u%C-igih/tEkwHb(k{/LT02goUX**\|:V~TUsU?yTU^V}FU
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 6b bd 45 7d f5 6e d2 ee 82 dd 8f 1a 62 1b ba bf e6 7e dd b8 47 77 4f c5 9e 8f 7b a5 7b 07 f6 45 ef eb 6a 74 6f 6c dc af bf bf b2 09 6d 52 36 8d 1e 48 3a 70 e5 9b 80 6f da 9b ed 9a 77 b5 70 5a 2a 0e c2 41 e5 c1 27 df a6 7c 7b e3 50 e8 a1 ce c3 dc c3 cd df 99 7f b7 f5 08 eb 48 79 2b d2 3a bf 75 ac 2d a3 6d a0 3d a1 bd ef e8 8c a3 9d 1d 5e 1d 47 be b7 ff 7e ef 31 e3 63 75 c7 35 8f 57 9e a0 9d 28 3d f1 f9 e4 82 93 e3 a7 64 a7 9e 9d 4e 3f 3d d4 99 dc 79 f7 4c fc 99 6b 5d 51 5d bd 67 43 cf 9e 3f 17 74 ee 4c b7 5f f7 c9 f3 de e7 8f 5d f0 bc 70 f4 22 f7 62 db 25 b7 4b ad 3d ae 3d 47 7e 70 fd e1 48 af 5b 6f eb 65 f7 cb ed 57 3c ae 74 f4 4d eb 3b d1 ef d3 7f fa 6a c0 d5 73 d7 f8 d7 2e 5d 9f 79 bd ef c6 ec 1b b7 6e 26 dd 1c b8 25 ba f5 f8 76 f6 ed 17 77 0a ee 4c dc Data Ascii: kE}nb~GwO{{EjtolmR6H:powpZ*A'\|{PHy+:u-m=^G~1cu5W(=dN?=yLk]Q]gC?tL_]p"b%K==G~pH[oeW<tM;js.]yn&%vwL
2024-09-30 22:41:02 UTC	578	IN	Data Raw: a6 bc c2 35 db e4 f5 bd bd bd ef f4 3c a0 24 55 fc 2e 6a 07 1e f1 87 66 93 99 bf 3e 1c a5 9c 2e 1b 9c 05 1e 91 d6 df 92 9c 2e 3c 1c 2a fc b0 47 b6 0f fd 5e 26 9f cf a7 1c 0e 87 61 fb fe 87 e2 27 d5 0f ca 7e 10 2f 83 98 a5 14 f2 31 12 ae 23 be d7 1a bf 73 19 d0 e3 f1 ec 62 79 a8 64 9b 85 c6 c6 c6 35 ac 1e 18 ba 0f 1d 1e 19 19 29 ea 3a 91 0a e3 bb 15 52 79 58 ed f3 c8 c2 17 0d 5f ae 21 23 22 dd 4b fb 67 1f cb c3 ab 82 a0 0b 2f 18 0c 6a f6 e1 45 59 68 6a 6a d2 ec 43 40 87 17 17 17 8b 16 c7 fe 65 c3 6d 36 2d 7e 90 05 c4 8e f5 79 ac fc ee 43 87 5d 2e 57 f1 46 09 c8 c4 ed 76 bf c0 86 3e 81 71 4e 5c 76 e1 f7 01 36 77 00 a5 f7 9d a1 c3 41 64 ac 8a 47 a8 13 99 b0 8a 57 2a 0e c4 7f fa de 10 de f8 f8 f8 39 fb 90 b9 07 50 7a df 59 14 bb 14 09 5f 60 79 02 95 e3 07 3d Data Ascii: 5<$U.jf>..<G^&a'~/1#sbyd5):RyX_!#"Kg/jEYhjjC@em6-~yC].WFv>qN\v6wAdGW9PzY_`y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.7	49799	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	778	OUT	GET /components/zkLxDsbw1hz2/d5634a838071888dbd2a.png HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:02 UTC	476	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: image/png Content-Length: 68061 Connection: close Last-Modified: Thu, 12 Sep 2024 08:56:03 GMT ETag: "66e2aca3-109dd" X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-479bfa0ca30ba4fa6b501ba1a41f1a38 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 786 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7d4a9bf43ab-EWR
2024-09-30 22:41:02 UTC	893	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 dd 00 00 00 96 08 06 00 00 00 9b d5 52 75 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRRutEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 78 da ec 7d 07 80 5c 55 b9 ff ef 4e 6f db 5b 36 9b 4d dd f4 02 09 90 40 a8 22 25 20 0a 58 40 8a 05 44 9f 0d 45 14 1f 3e c5 fe 7c 16 9e a2 e2 43 7c 22 0a a2 a0 74 a4 18 ca a3 27 a4 92 b6 d9 d4 dd 6c ef 75 76 7a f9 7f df 77 ef 99 bd 33 3b b3 9b c0 12 f0 cf 9e 30 dc d9 3b e7 9e 7b ce b9 e7 9e df d7 3f 2d 49 05 93 65 b2 bc 0b ca c2 85 0b d0 db db f7 b6 dd 3f 1a 8d c2 6e b7 67 3d cf c5 fc 9b d3 e9 84 df ef cf 5a 7f bc b6 73 dd e7 48 ae 57 fd 31 9f e7 3e 85 c3 e1 c3 1e d7 d1 98 cf 69 d3 a6 e1 4f b7 df d6 4c db 58 3e f7 21 12 89 c0 e1 70 c8 6f 36 8b 35 55 57 d3 34 24 12 09 58 ad 56 19 83 cd 66 93 ef f1 78 5c 8e b1 58 0c 16 8b 05 bc 1d 72 5d 3e f2 79 6e 8f 8f aa 2e 5f c7 75 f9 6f f3 3c a9 73 7c 0f 75 2f 6e 8f 8f 6a 1e b9 4d fe ae ee c9 47 55 87 af e7 7e ab eb b8 Data Ascii: x}\UNo[6M@"% X@DE>\|C\|"t'luvzw3;0;{?-Ie?ng=ZsHW1>iOLX>!po65UW4$XVfx\Xr]>yn._uo<s\|u/njMGU~
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: f0 2d 90 73 7d 7d fd f8 c5 2f 7e 81 9f dd 7c 33 56 2c 5f 6e 80 8e 0e a6 9f fb dc e7 d2 ee db dc dc 24 60 ff ef ff fe ef 98 35 6b 56 ea 7c 5d 5d 9d 80 eb f5 d7 7f 85 fa 51 9d 76 cd e9 67 9c 81 2b e8 1a a6 e0 15 e0 3e f6 d8 63 a8 a9 99 9b aa c3 f7 99 37 6f 1e f6 ee dd 9b 36 2e 2e 45 45 45 47 1d 74 f9 99 9a 37 be 34 30 34 b8 54 25 3e 36 7f 57 e2 4a b3 49 8b 59 1f a7 8a ba 46 80 21 11 4f 6b c7 7c ad 59 bf a8 ae 37 9f 53 22 ea 44 96 3e e9 75 d2 af 57 fa 40 73 fb 66 3d a6 ba 47 e6 d8 54 5d f3 38 cc 3a 5d b3 38 58 f5 69 ac be 65 9b 0f f3 f5 b9 c6 96 29 6e 1e d5 0f e3 9d 33 9f 33 8f 2d 5b 9b 66 31 b3 f9 59 a5 da 34 e6 28 91 31 36 f3 3c 48 fd 44 72 dc 39 32 9f 1b 6b 8e cc fd 31 8b a3 47 ad ad 24 11 05 16 02 61 06 ec c9 ad 78 b2 bc db ca d1 e0 74 73 b5 7b e2 89 ab Data Ascii: -s}}/~\|3V,_n$`5kV\|]]Qvg+>c7o6..EEEGt7404T%>6WJIYF!Ok\|Y7S"D>uW@sf=GT]8:]8Xie)n33-[f1Y4(16<HDr92k1G$axts{
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 6c 19 ac d9 e4 c8 04 c0 90 df 8f 20 3d 97 a9 d5 d5 28 20 62 ac 71 cf 1e 34 d5 d7 d3 f5 04 a8 2c 32 27 02 cb 41 f7 66 49 45 2c 11 a7 f9 0f 8b 61 8f 66 25 20 a4 ad dc ed 71 a3 bb ab 07 2e ea 9b 8d ea 96 50 1b cc 41 0f 0f 0d ea a0 1d 67 ee 56 27 c2 18 1c 92 06 51 c2 04 9f 18 22 d1 75 6e 7a e6 61 ba 1f 13 14 5e af 4f ea 25 92 4a 64 ce d7 e8 1f 91 1e 68 ba 14 81 c1 d6 c2 12 19 fa 3b 1c 0d 0b 08 c7 63 7a ff ac 6c 68 45 ff c2 e1 08 0a 8b 0a 51 31 6d 3a ba 79 2e 87 07 04 e5 f9 1f db 04 44 08 94 4a 4b a7 a0 6a 2a bd 0f 44 90 34 b5 0c eb d6 c7 ac 02 b2 59 53 9c 26 13 47 51 65 2d ac e9 62 5b 2b 13 1f 1a 84 98 b5 1b d6 d5 3c 6e 01 44 e6 b8 69 fd 33 51 62 73 da b1 68 c5 71 88 85 87 b1 85 88 4d 9e 43 1b 83 7a 34 26 73 12 d3 74 02 8c fb c4 fd 77 38 9c fa 3d 68 e8 b1 68 Data Ascii: l =( bq4,2'AfIE,af% q.PAgV'Q"unza^O%Jdh;czlhEQ1m:y.DJKj*D4YS&GQe-b[+<nDi3QbshqMCz4&stw8=hh
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 7e 7f ab ee f5 c2 0b cf e3 fa eb af 17 f1 f2 0b 2f bc 20 86 4b bc 49 6c 21 8e 86 8d 91 1e 79 e4 51 e2 6e b6 e0 87 3f fc 01 a6 4f 9f 91 b2 b0 66 63 a6 f5 eb d6 e3 5b dd ff 81 39 73 6a b0 a7 ae 0e df 22 30 7e fa e9 67 04 bc bd b4 21 2a a3 2b 2e ec 8e c4 d7 28 90 e7 fb 6d d9 b2 45 0c a0 2a 88 c3 d0 01 da 8e 7e e2 d4 f8 7e 7c be 94 36 2d e5 8f f9 d9 cf 7e 56 7c 0b 7b 7b 7b 53 7d 67 f7 24 76 4d ba 84 38 6c e5 76 b4 65 cb 56 b1 50 ae a9 a9 49 8d cb 6c 0d fe 4e 2f 22 4e ed 1f 42 c3 de fd 44 98 74 13 a7 68 43 97 a5 1d d3 2a a6 08 c7 c3 1c 57 31 01 12 8b d1 5b 9b 9b e0 27 8e 30 d2 d1 89 9e 8a 4e 02 b6 72 78 88 bb dc bc 61 03 a6 57 4f 47 e1 31 f9 70 52 7d 3b eb 7e 07 06 09 65 08 58 a8 6d df cc 39 62 c4 d3 d5 d5 a3 bb 19 c1 30 aa 61 b1 24 71 51 4e 7a 0e ac 9b 0c b2 Data Ascii: ~/ KIl!yQn?Ofc[9sj"0~g!+.(mE~~\|6-~V\|{{{S}g$vM8lveVPIlN/"NBDthC*W1['0NrxaWOG1pR};~eXm9b0a$qQNz
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: fa 3b 5a 10 99 56 49 84 46 15 5a da bb 85 23 b5 3b 1d 68 6a 69 42 51 49 a1 70 b1 6c 8b cc 22 73 9e d8 f6 b6 0e 02 c0 36 19 3f 4b 58 a6 54 4d 45 dd be 3d 50 ce 53 75 bb 76 a2 69 f7 3e 04 66 54 a3 f4 f4 52 0c fb 07 b1 e3 b5 8d 08 06 42 b0 79 3c 98 45 5c 72 91 d3 47 73 db c3 b6 c7 a2 52 a8 db 59 8b ce c6 66 04 88 5b 2d 29 2a 81 b7 30 1f 4e 26 4a 84 3b d6 50 df d8 20 d2 02 4b 47 42 88 a8 62 02 67 5e 0f 16 c3 0d 8a ed 23 f6 ef ae 45 59 b1 6e 1f 11 e7 f5 a7 d1 7a 61 4b 6e b6 1c e7 10 93 46 a8 4b 09 12 42 8b c4 12 d3 5d 94 26 41 77 b2 bc eb 40 77 ea d4 a9 22 9e 3d 5a 85 37 30 b3 bf ed db dd ce 9b 6d 97 c5 81 ca 4d e9 68 16 ee 27 17 d6 1b 32 17 56 5f 5f 9f fa 2d 15 ac 21 8b b5 b2 f9 a3 af 01 1b 7a 38 cc 62 71 01 96 1e b3 5c 00 6e c7 d6 ad c4 dd 0e 0a 67 cb 60 61 Data Ascii: ;ZVIFZ#;hjiBQIpl"s6?KXTME=PSuvi>fTRBy<E\rGsRYf[-)*0N&J;P KGBbg^#EYnzaKnFKB]&Aw@w"=Z70mMh'2V__-!z8bq\ng`a
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 5c 40 dd 08 cd 28 1c bb 26 04 a4 92 70 49 b0 90 24 cd 89 d3 8d d9 b3 66 8b fe b6 b8 ac 14 1e 9a e7 de ae 1e 0c f5 0f a4 2c f7 f9 aa 2e e2 be d9 85 4c ae a3 fb 26 44 e4 6e 10 9f f1 84 01 b4 da 11 af c1 49 4e 77 b2 bc ab 4b 2e ce ed 9d d2 b7 c3 e1 a0 73 fd 96 8d 5b 7e eb 89 1a 9d 63 cf 06 d2 63 71 e5 87 3b 17 ea fa 48 34 f6 86 e7 94 c5 e3 9e 7c dd a7 76 46 35 71 91 d5 7a 6c ea 00 71 a7 3d 7d dd 68 69 6d 81 27 cf 47 00 36 1d a7 9c 73 ae c1 29 05 c4 82 9c 01 82 c1 54 2c 8c 69 6c cc 0d 47 23 11 23 3a 97 ee d7 cb ee 5a e6 c8 58 0c 58 49 83 73 65 0b 66 8f cb 23 96 be cc 45 b1 2b 91 c5 88 bb cc dc a1 9f c0 a1 ab a3 53 c2 7d 4e 9f 55 23 9f 86 bd 7b 31 40 60 30 a5 ba 5a 3e a1 61 3f 22 c1 b0 00 38 8b 38 19 28 d8 d5 69 d6 82 05 58 be fa 24 84 09 3c b8 9f 4a 07 c9 9c Data Ascii: \@(&pI$f,.L&DnINwK.s[~ccq;H4\|vF5qzlq=}him'G6s)T,ilG##:ZXXIsef#E+S}NU#{1@`0Z>a?"88(iX$<J
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: d0 29 d2 03 76 31 f2 7a dd 42 2c b0 e1 58 0f 11 1d 0c fc 0c e0 a2 3f 77 3b d1 7c a8 41 c6 26 c4 a5 c3 86 61 1a e3 c0 ee 2e 89 1e c5 41 45 1c b4 ee fb 5b db 30 d0 d6 0e a7 cd 21 7a dc f6 fd f5 04 a2 01 31 86 1b 6c 6a 94 d0 99 ac 2a 60 df e9 48 32 4a cf 93 d6 09 e1 58 17 5d 33 44 5c 6f 84 c5 f6 34 ff 5c 9f 43 95 34 35 d4 8b 68 bc bc bc 82 b8 66 2d 95 6d c8 9c 62 d1 9c 38 41 c5 5f d6 74 99 f7 c4 5b 2f 5f 77 eb e3 f8 fd 03 af e8 e1 bf 72 51 ab a6 f0 58 c9 44 ba 61 48 c2 64 28 c2 22 8b e3 17 cd c0 37 2e 3b 03 67 9d 30 5b 42 e7 bd eb b9 1b fa dc f4 d4 21 dc fd 7c e3 91 73 09 cc 61 c4 d3 a9 32 b7 c7 86 33 16 95 e2 33 ab ab 70 fc 34 df d8 da ff b7 a1 ac dd d5 8d 4f fd 71 57 aa ff a9 79 a0 71 dc 42 c7 75 df 3a 19 d3 0a de 9d c2 9a 4c d0 52 2f ba 19 60 45 64 4a 54 Data Ascii: )v1zB,X?w;\|A&a.AE[0!z1lj*`H2JX]3D\o4\C45hf-mb8A_t[/_wrQXDaHd("7.;g0[B!\|sa233p4OqWyqBu:LR/`EdJT
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: db 51 44 4b 66 dd 6c 7d 33 bb c6 a9 39 52 b9 83 33 9f 7f b6 f9 18 6b 8e c6 1b 9b 79 3e b2 cd 91 21 5f 9e 38 d0 7d 69 cb 01 dd dc db 61 9b e0 97 09 02 e4 6c 1e 7f ce 97 ee c0 c6 db 3f ff ae 15 35 67 d3 6d 4e 54 61 20 df d7 38 88 ab ee a9 c5 3d 9f 58 04 eb db 3c d6 86 b6 a0 2e 0e cf 02 ba 7c 7e 7e a5 6f 42 88 83 37 02 92 99 5c 9a d2 51 ea 96 b5 5a 4e 10 3e 22 ee 2e a9 83 ae e4 37 8d 0d 61 d7 67 fe 0b 51 23 18 84 7d d6 2c 14 fe e7 b5 92 88 be f9 d0 c1 94 c8 98 83 d0 cf 5b b4 14 25 05 be 9c 20 3b 62 70 a5 65 1d 7b 3a e7 9b db 3a 5a 89 98 6d 76 5b 56 e2 81 ef bf 64 c9 52 14 95 55 0a f0 b2 08 6f c5 f2 e5 c2 5d 8f 58 31 6b 13 f2 9c d4 86 ec 34 2c 54 99 e3 71 89 28 d3 99 e2 72 55 70 08 ae a3 b8 22 d6 1d b2 78 55 0f e8 10 93 3a a2 f3 a4 bf 59 6c c9 75 14 17 ab da Data Ascii: QDKfl}39R3ky>!_8}ial?5gmNTa 8=X<.\|~~oB7\QZN>".7agQ#},[% ;bpe{::Zmv[VdRUo]X1k4,Tq(rUp"xU:Ylu
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: ce 3b 16 37 5e 79 06 2e ff ee 5f b1 f7 50 47 4e e0 e5 f3 5b f6 34 a1 cb 3f 3c ae 6e 97 09 01 ee 57 34 10 c2 40 68 c4 7a d2 3f 1c 45 55 09 51 53 1e 17 5c 16 3b f2 bd ce b7 0d 5c 64 83 4c 8e b6 ec cc 8c be 23 cc cd 70 2c a7 8e 53 01 ee 75 e7 cf c1 57 df 33 2d e7 bd 9e ad eb c5 17 ff b6 47 0c a8 72 b5 c3 a0 fc 7c 6d 37 82 b1 f9 e3 8a 6f 83 31 26 06 92 18 0e eb af 7e fb a0 1e 14 de e7 24 2a d2 69 87 97 8e 2e 9b 76 c4 62 60 26 30 b6 1c ec cb 4a 60 30 28 b0 d5 75 45 be eb 6d 01 dc f1 c4 a2 0a b4 32 b9 cb b1 b8 3a 73 7b 69 06 4b c6 07 b6 74 07 fc 70 c9 12 24 2a 8b 04 70 39 89 fc df ff 7e 7f 4a 54 76 ed b5 d7 0a 00 8d 05 bc b9 44 cb 66 3f da f1 00 d1 bc 7e cc fa 2d 36 20 51 71 9c cd a1 2d 67 53 9f d8 bf b2 bd a7 7f c2 0d 22 39 0f 6c d9 94 29 a2 47 d6 81 42 cb 41 Data Ascii: ;7^y._PGN[4?<nW4@hz?EUQS\;\dL#p,SuW3-Gr\|m7o1&~$i.vb`&0J`0(uEm2:s{iKtp$p9~JTvDf?~-6 Qq-gS"9l)GBA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.7	49800	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	778	OUT	GET /components/zkLxDsbw1hz2/48d68b70659b28905e87.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:02 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: image/jpeg Content-Length: 30229 Connection: close Cf-Bgj: h2pri ETag: "66e2aca3-7615" Last-Modified: Thu, 12 Sep 2024 08:56:03 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-848758bd5-kxgbq-cc8c47b148670afcd85157dca54fe211 CF-Cache-Status: HIT Age: 6747 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7d49d427271-EWR
2024-09-30 22:41:02 UTC	878	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 e6 00 00 00 03 a0 04 00 01 00 00 00 65 00 00 00 00 00 00 00 ff e1 0e 17 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 27 ef bb bf 27 20 69 64 3d 27 57 35 4d 30 Data Ascii: ExifII*V^(if``02100100ehttp://ns.adobe.com/xap/1.0/<?xpacket begin='' id='W5M0
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 74 73 2f 31 2e 31 2f 27 3e 0a 20 20 3c 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 3c 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 3c 72 64 66 3a 6c 69 20 78 6d 6c 3a 6c 61 6e 67 3d 27 78 2d 64 65 66 61 75 6c 74 27 3e 32 30 32 34 20 49 43 41 20 42 61 64 67 65 73 20 28 32 33 30 20 78 20 31 30 31 20 70 78 29 20 2d 20 49 43 41 2d 32 30 32 34 2d 50 6c 61 74 69 6e 75 6d 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 3c 2f 72 64 66 3a 41 6c 74 3e 0a 20 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 0a 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 0a 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 27 27 0a 20 20 78 6d 6c 6e 73 3a 70 64 66 3d 27 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 64 66 2f 31 2e 33 2f 27 3e 0a 20 20 Data Ascii: ts/1.1/'> <dc:title> <rdf:Alt> <rdf:li xml:lang='x-default'>2024 ICA Badges (230 x 101 px) - ICA-2024-Platinum</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> <rdf:Description rdf:about='' xmlns:pdf='http://ns.adobe.com/pdf/1.3/'>
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 27 77 27 3f 3e ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff Data Ascii: <?xpacket end='w'?>C
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 2a 4e 29 36 d3 4f 7f 2f cc 79 66 3a a6 36 35 5d 48 46 2e 0d 28 f2 df 5e ae f7 bf 74 95 bc ee 75 3f 06 be 06 68 3f 12 bc 29 ad 78 9f 5a f1 45 ff 00 87 e2 d1 f5 5b 8b 29 8c 30 e9 c6 ce 3b 4b 6d 3e d2 fe 5b cb 9b 8b d1 fb 95 8d 6e 64 f3 59 99 62 8e 28 84 84 f2 c5 6a 8d 15 52 2e 7c ce 36 76 5a 6a 92 49 ea dd bb de e6 19 8e 65 5b 07 5a 14 a9 d3 84 f9 a0 a5 77 77 26 db b2 56 4f 7d 2d dd fd c7 49 ab 7e cc 76 ba 57 8d fc 0b a3 2f 8a 2f 35 3f 0a f8 d2 4d 52 d8 6a f0 5b 59 c5 a8 d8 dd e9 fa 2d de b1 02 0d 86 6b 0b ab 7b e8 2d 8b db dc a2 2f ca b3 21 8c fe ea 47 72 c3 da 70 5c d7 8c ef ad b5 56 b7 cb ae 9a f7 32 a7 9c 4a 78 7a f2 f6 51 8d 6a 2a 2f 95 bf 76 49 c9 45 bb 59 34 d3 7b 5b 47 6d 4f 2d f1 c7 c1 ed 5f 49 f8 93 aa f8 03 c1 36 5a d7 8a e4 d3 6c 74 cb e2 e2 de Data Ascii: N)6O/yf:65]HF.(^tu?h?)xZE[)0;Km>[ndYb(jR.\|6vZjIe[Zww&VO}-I~vW//5?MRj[Y-k{-/!Grp\V2JxzQj/vIEY4{[GmO-_I6Zlt
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: a0 9a 5b 49 2e 4b ca 80 c2 67 59 14 30 66 50 87 75 43 a7 38 b4 9c 5a 72 76 57 56 bb f5 fb 8e 8a 78 dc 2d 58 54 9c 2a c2 51 a7 17 29 ad 6f 18 ad 5c 9a ec f6 eb ad fc 8d 95 f8 29 f1 5d e7 b9 b6 5f 01 eb c6 7b 3b 68 ef 27 8f ca b5 c8 82 66 99 22 f2 d8 5d 98 e6 96 46 b7 9b 65 b4 2c f7 04 21 63 10 56 8c bd 7b 1a 97 6b 91 e8 be 56 f2 e8 f6 fc cc 7f b5 30 4d 27 ed e2 93 97 2f e0 9b 6e e9 34 95 ed 77 6f bf 6c 5b ef 86 be 3f d3 bc 38 de 2c be f0 96 b3 69 e1 f5 8c 4a da 95 c5 b0 8d 22 89 9f cb 49 ee 2d da 41 7b 6d 6e f2 15 41 3c f6 d1 c7 f3 2b 16 0a ca c5 3a 73 8a 72 71 69 2d db e8 bb fa 79 ec 6b 1c 7e 16 75 7d 8c 6b 46 55 1b b5 96 b7 76 bd 93 da fa 7e 6b bd bd d7 c4 bf b3 65 d5 bf 81 7c 23 e2 2f 06 3e bf e2 6d 7b c4 69 a2 cd 77 a4 79 3a 7a db 59 5a ea 3a 2c fa 95 Data Ascii: [I.KgY0fPuC8ZrvWVx-XT*Q)o\)]_{;h'f"]Fe,!cV{kV0M'/n4wol[?8,iJ"I-A{mnA<+:srqi-yk~u}kFUv~ke\|#/>m{iwy:zYZ:,
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 69 7e 0e 97 56 d7 35 bd 42 7d 36 d3 42 82 0d 16 48 6d 09 9e 28 67 33 17 96 79 ae 22 b6 48 65 9e 46 85 dc 46 22 46 74 9b cd 55 a8 a1 14 db b7 34 9d d2 8f ba bd 17 cb 5d 12 77 7d 76 8d 3c 3b c0 61 67 88 ab 38 28 ce aa 85 38 25 37 52 f5 35 d1 ea 9a 4a cf d7 5d 59 67 e2 3e a5 ab e9 1f 06 7c 03 ae 1f 10 d8 f8 93 c4 5a 37 89 bc 0d 3c 5e 2a b6 8e 3b bb 4b fd 40 ea 12 69 d7 3a 8d bf 9d 12 a4 f1 dc 41 3d c4 3e 69 8d 44 c8 cc e1 40 61 4e a5 e3 4a 2d b5 29 46 51 6a 5b ee ec a5 f3 5a f6 f5 b1 9e 12 30 a9 8d ad 4d 42 54 e9 ce 9d 64 e9 bb c5 a8 f2 b7 ca fc ee af a3 d3 a1 d5 7c 43 d6 2f e3 f8 c9 f0 4b c3 eb 32 7f 65 dc dd f8 97 56 9a 0f 2a 32 ef 7f 63 a2 5e d9 db 4a 27 23 cd 55 8e de fa e9 1a 25 6f 2d da 40 ec bb 91 08 73 6f da d2 5d 35 7f 92 fd 7f ae b9 e1 e9 c7 ea 58 Data Ascii: i~V5B}6BHm(g3y"HeFF"FtU4]w}v<;ag8(8%7R5J]Yg>\|Z7<^;K@i:A=>iD@aNJ-)FQj[Z0MBTd\|C/K2eV2c^J'#U%o-@so]5X
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 2b ad a4 9b bf 32 b2 fc fc d7 e5 d5 46 2f eb 94 e7 4a 8d 4a 74 b9 1a 77 84 92 d2 8b e6 6d da d6 6f 5d 7e 2b df d7 23 f6 b6 f1 8f 89 3c 3d 63 e1 ad 07 45 d4 de c3 4b f1 35 97 88 6d f5 d8 22 82 d9 9b 50 b6 88 69 90 a4 0f 3c b0 c9 34 51 18 ee ee 15 96 dd e2 2e 24 3b 98 ed 50 23 12 dc 63 18 ad 23 2e 6b ae f6 e5 fb ff 00 ae b6 3a b2 4c 3d 2a d3 ab 52 a4 79 a7 4d c1 c2 f7 49 36 dd de 8f 57 d9 5b fe 07 e7 cf f9 fc ab 88 fa a2 d5 8d b7 db 6f 6c ac fc d5 83 ed 97 96 96 9e 7b 95 54 83 ed 57 31 5b f9 ee cc 42 84 87 cd f3 5c b1 0a 15 0e 48 19 34 d2 e6 69 77 69 79 6a 45 49 fb 3a 73 9d 9b e5 8c a5 64 ae dd 95 ec 97 5f 45 af 6d 4f d4 7f 12 f8 3f c2 3a af c3 cb 1f 86 9e 1e f1 f6 95 e1 1d 0a da 28 2d 2f 1e c6 eb 49 bb b9 d4 ac a0 56 69 ad a7 69 75 18 36 8d 42 ec fd b3 53 Data Ascii: +2F/JJtwmo]~+#<=cEK5m"Pi<4Q.$;P#c#.k:L=*RyMI6W[ol{TW1[B\H4iwiyjEI:sd_EmO?:(-/IViiu6BS
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 6d 2e 29 75 2b 1f b5 d9 ea fa 75 ec d6 0b 77 6c d7 de 45 af c5 18 6f a5 2b 66 24 37 0c 7e cb 1b 4c aa 23 cb 26 1c 0d a4 35 42 92 54 6e 9a bf 32 7b ae 92 4f 6d 6f 7b 3d 2d 76 76 ca 9c e5 9a bb 46 76 94 2c a4 e2 ec db c3 ae b6 b5 f5 b7 ab b6 e7 be ea 52 78 4f 52 f8 83 e0 9f 1d a7 8d 7c 3c 96 d6 be 1b f1 3e 97 63 63 f6 db 66 93 53 fe d7 fe cf bd 17 90 5c 7d a8 47 14 36 b6 f6 d2 19 d6 54 0c 5e 48 50 32 b3 14 3a f3 45 ce 32 55 17 2f 2b d2 fb dd a6 9f 97 cf b2 49 76 f3 92 ab 0a 15 a8 3a 15 2e ea c2 4e 5c b2 b4 5c 6e b9 5a b6 ad bd 9d fa 68 70 3a 7e b7 a2 ae 8f fb 49 2b 6a fa 50 6b ed 77 c4 cd 64 ad a8 d9 a9 bb 57 f0 2e 99 12 35 b0 33 03 3a bc aa d1 29 88 38 69 15 a3 5c ba 95 13 cd 1e 5a b6 69 da 4d ef d2 c9 f4 6b 4f e9 6a 74 2a 75 39 f2 ff 00 72 76 e5 8d fd d9 Data Ascii: m.)u+uwlEo+f$7~L#&5BTn2{Omo{=-vvFv,RxOR\|<>ccfS\}G6T^HP2:E2U/+Iv:.N\\nZhp:~I+jPkwdW.53:)8i\ZiMkOjt*u9rv
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: d7 90 c6 51 fa c7 34 65 1d 60 bd e4 e3 ae ba 2b da ec f8 ba b9 0f a2 3b 3f 09 fc 3d f1 9f 8e 96 fd bc 27 a0 dc eb 4b a6 35 ba 5f 98 25 b3 88 5b b5 da ca d6 ea e2 ee e6 df 77 9a b0 4a 46 c0 e0 04 3b b6 e4 66 e3 09 ce fc b1 6e db fa f9 dc e5 c4 63 28 61 9c 55 7a 9c bc fa c5 35 7b da cb f0 6f 7e 97 3a df f8 67 9f 8b bf f4 20 5e 7f df ed 17 ff 00 93 bd 87 e5 55 ec 2a ff 00 23 fc 3f cc e7 fe d3 cb ff 00 e7 ec 7f f0 11 7f e1 9f 3e 30 60 2f fc 20 77 db 47 21 7e d3 a3 ed 07 d4 2f db f0 0f 27 90 01 e4 fa d1 ec 2a ff 00 23 fc 3f cc 3f b5 30 09 59 55 8a 5d ad a7 dc 2f fc 33 ef c6 0c 11 ff 00 08 25 fe 09 24 af da 74 7d a4 9e a4 af db f0 49 ee 48 c9 e3 d2 8f 61 57 f9 1f e1 fe 61 fd a9 80 db db 2b 76 b6 9f 70 df f8 67 9f 8b bf f4 20 5e 7f df ed 17 ff 00 93 bd 87 e5 47 Data Ascii: Q4e`+;?='K5_%[wJF;fnc(aUz5{o~:g ^U#?>0`/ wG!~/'#??0YU]/3%$t}IHaWa+vpg ^G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.7	49801	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	778	OUT	GET /components/zkLxDsbw1hz2/b75b73e313804cf110ea.svg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:02 UTC	511	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2024 08:56:03 GMT ETag: W/"66e2aca3-61ea" X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-92b2a58748d632a33dfa01dcbe09aa73 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 5821 Server: cloudflare CF-RAY: 8cb7b7d4ae8e438d-EWR
2024-09-30 22:41:02 UTC	858	IN	Data Raw: 36 31 65 61 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 35 30 22 20 68 65 69 67 68 74 3d 22 36 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 30 20 36 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 38 30 2e 31 39 39 36 20 33 37 2e 34 39 39 38 48 38 38 2e 39 32 34 35 56 30 48 38 30 2e 31 39 39 36 56 31 31 2e 35 37 34 39 43 37 39 2e 31 36 31 32 20 31 31 2e 30 36 37 38 20 37 38 2e 30 39 32 35 20 31 30 2e 36 32 35 33 20 37 36 2e 39 39 39 36 20 31 30 2e 32 34 39 39 43 37 35 2e 37 30 32 37 20 39 2e 38 Data Ascii: 61ea<svg width="250" height="65" viewBox="0 0 250 65" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M80.1996 37.4998H88.9245V0H80.1996V11.5749C79.1612 11.0678 78.0925 10.6253 76.9996 10.2499C75.7027 9.8
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 35 32 35 35 20 33 31 2e 38 37 35 34 20 37 33 2e 36 39 35 34 20 33 31 2e 37 35 31 32 20 37 32 2e 39 32 39 35 20 33 31 2e 34 33 37 39 43 37 32 2e 31 36 33 36 20 33 31 2e 31 32 34 36 20 37 31 2e 34 38 34 34 20 33 30 2e 36 33 31 33 20 37 30 2e 39 34 39 36 20 32 39 2e 39 39 39 38 43 36 39 2e 38 37 38 37 20 32 38 2e 32 34 36 36 20 36 39 2e 33 39 36 39 20 32 36 2e 31 39 36 36 20 36 39 2e 35 37 34 36 20 32 34 2e 31 34 39 39 43 36 39 2e 34 35 33 35 20 32 32 2e 30 33 31 35 20 37 30 2e 30 35 32 36 20 31 39 2e 39 33 34 35 20 37 31 2e 32 37 34 36 20 31 38 2e 31 39 39 39 43 37 31 2e 39 30 37 37 20 31 37 2e 34 36 38 35 20 37 32 2e 37 30 33 32 20 31 36 2e 38 39 35 34 20 37 33 2e 35 39 37 35 20 31 36 2e 35 32 36 34 43 37 34 2e 34 39 31 37 20 31 36 2e 31 35 37 34 20 37 35 Data Ascii: 5255 31.8754 73.6954 31.7512 72.9295 31.4379C72.1636 31.1246 71.4844 30.6313 70.9496 29.9998C69.8787 28.2466 69.3969 26.1966 69.5746 24.1499C69.4535 22.0315 70.0526 19.9345 71.2746 18.1999C71.9077 17.4685 72.7032 16.8954 73.5975 16.5264C74.4917 16.1574 75
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 37 35 36 20 31 35 2e 30 38 36 31 20 34 33 2e 30 34 39 38 20 31 35 2e 31 34 39 39 43 34 31 2e 35 36 34 37 20 31 35 2e 30 38 35 31 20 34 30 2e 31 30 34 33 20 31 35 2e 35 34 35 33 20 33 38 2e 39 32 34 38 20 31 36 2e 34 34 39 39 43 33 38 2e 33 34 38 33 20 31 36 2e 39 38 30 33 20 33 37 2e 38 39 20 31 37 2e 36 32 36 32 20 33 37 2e 35 37 39 39 20 31 38 2e 33 34 35 36 43 33 37 2e 32 36 39 37 20 31 39 2e 30 36 34 39 20 33 37 2e 31 31 34 37 20 31 39 2e 38 34 31 36 20 33 37 2e 31 32 34 38 20 32 30 2e 36 32 34 39 48 34 38 2e 33 39 39 37 5a 4d 32 35 2e 33 39 39 39 20 32 38 2e 39 39 39 38 43 32 35 2e 34 31 31 32 20 33 30 2e 33 35 39 33 20 32 35 2e 30 36 39 32 20 33 31 2e 36 39 38 35 20 32 34 2e 34 30 37 35 20 33 32 2e 38 38 36 31 43 32 33 2e 37 34 35 38 20 33 34 2e 30 Data Ascii: 756 15.0861 43.0498 15.1499C41.5647 15.0851 40.1043 15.5453 38.9248 16.4499C38.3483 16.9803 37.89 17.6262 37.5799 18.3456C37.2697 19.0649 37.1147 19.8416 37.1248 20.6249H48.3997ZM25.3999 28.9998C25.4112 30.3593 25.0692 31.6985 24.4075 32.8861C23.7458 34.0
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 34 39 39 20 31 35 2e 34 39 39 39 43 31 32 2e 38 33 38 37 20 31 35 2e 34 36 34 38 20 31 31 2e 36 33 32 34 20 31 35 2e 36 36 38 37 20 31 30 2e 34 39 39 39 20 31 36 2e 30 39 39 39 43 39 2e 35 34 39 39 35 20 31 36 2e 34 37 34 39 20 39 2e 30 37 34 39 35 20 31 37 2e 30 32 34 39 20 39 2e 30 37 34 39 35 20 31 37 2e 37 32 34 39 43 39 2e 30 35 32 37 39 20 31 38 2e 30 30 35 34 20 39 2e 31 30 30 35 38 20 31 38 2e 32 38 36 39 20 39 2e 32 31 34 30 32 20 31 38 2e 35 34 34 33 43 39 2e 33 32 37 34 36 20 31 38 2e 38 30 31 38 20 39 2e 35 30 33 30 32 20 31 39 2e 30 32 37 20 39 2e 37 32 34 39 34 20 31 39 2e 31 39 39 39 43 31 30 2e 36 36 38 38 20 31 39 2e 37 32 38 38 20 31 31 2e 37 30 33 32 20 32 30 2e 30 37 36 34 20 31 32 2e 37 37 34 39 20 32 30 2e 32 32 34 39 4c 31 35 2e 36 Data Ascii: 499 15.4999C12.8387 15.4648 11.6324 15.6687 10.4999 16.0999C9.54995 16.4749 9.07495 17.0249 9.07495 17.7249C9.05279 18.0054 9.10058 18.2869 9.21402 18.5443C9.32746 18.8018 9.50302 19.027 9.72494 19.1999C10.6688 19.7288 11.7032 20.0764 12.7749 20.2249L15.6
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 20 31 38 2e 33 31 36 20 31 31 32 2e 31 37 34 20 31 37 2e 35 37 34 39 43 31 31 31 2e 37 30 38 20 31 36 2e 39 33 36 38 20 31 31 31 2e 30 36 35 20 31 36 2e 34 34 39 39 20 31 31 30 2e 33 32 34 20 31 36 2e 31 37 34 39 43 31 30 39 2e 35 37 34 20 31 35 2e 38 39 30 34 20 31 30 38 2e 37 37 37 20 31 35 2e 37 34 36 34 20 31 30 37 2e 39 37 34 20 31 35 2e 37 34 39 39 43 31 30 37 2e 32 31 38 20 31 35 2e 37 34 32 31 20 31 30 36 2e 34 36 36 20 31 35 2e 38 36 30 34 20 31 30 35 2e 37 34 39 20 31 36 2e 30 39 39 39 43 31 30 35 2e 30 31 39 20 31 36 2e 33 38 32 31 20 31 30 34 2e 33 37 34 20 31 36 2e 38 34 36 39 20 31 30 33 2e 38 37 34 20 31 37 2e 34 34 39 39 43 31 30 33 2e 32 34 35 20 31 38 2e 31 39 35 39 20 31 30 32 2e 37 37 37 20 31 39 2e 30 36 34 31 20 31 30 32 2e 34 39 39 Data Ascii: 18.316 112.174 17.5749C111.708 16.9368 111.065 16.4499 110.324 16.1749C109.574 15.8904 108.777 15.7464 107.974 15.7499C107.218 15.7421 106.466 15.8604 105.749 16.0999C105.019 16.3821 104.374 16.8469 103.874 17.4499C103.245 18.1959 102.777 19.0641 102.499
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 33 33 35 20 31 35 31 2e 33 38 20 32 32 2e 30 36 34 32 20 31 35 31 2e 34 39 39 20 32 34 2e 32 32 34 39 43 31 35 31 2e 34 34 36 20 32 36 2e 33 35 30 32 20 31 35 32 2e 32 30 36 20 32 38 2e 34 31 35 36 20 31 35 33 2e 36 32 34 20 32 39 2e 39 39 39 38 43 31 35 34 2e 33 34 20 33 30 2e 37 30 30 33 20 31 35 35 2e 31 39 35 20 33 31 2e 32 34 32 34 20 31 35 36 2e 31 33 34 20 33 31 2e 35 39 31 33 43 31 35 37 2e 30 37 33 20 33 31 2e 39 34 30 31 20 31 35 38 2e 30 37 35 20 33 32 2e 30 38 37 38 20 31 35 39 2e 30 37 34 20 33 32 2e 30 32 34 38 43 31 36 30 2e 30 37 20 33 32 2e 30 33 36 31 20 31 36 31 2e 30 36 33 20 33 31 2e 39 30 39 39 20 31 36 32 2e 30 32 34 20 33 31 2e 36 34 39 38 43 31 36 32 2e 37 38 31 20 33 31 2e 34 34 34 34 20 31 36 33 2e 35 31 31 20 33 31 2e 31 35 30 Data Ascii: 335 151.38 22.0642 151.499 24.2249C151.446 26.3502 152.206 28.4156 153.624 29.9998C154.34 30.7003 155.195 31.2424 156.134 31.5913C157.073 31.9401 158.075 32.0878 159.074 32.0248C160.07 32.0361 161.063 31.9099 162.024 31.6498C162.781 31.4444 163.511 31.150
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 35 39 32 20 33 32 2e 31 34 35 38 20 31 38 33 2e 37 39 39 20 33 31 2e 38 32 34 38 43 31 38 33 2e 30 37 20 33 31 2e 35 34 31 32 20 31 38 32 2e 34 33 31 20 33 31 2e 30 36 36 32 20 31 38 31 2e 39 34 39 20 33 30 2e 34 34 39 38 43 31 38 31 2e 33 36 34 20 32 39 2e 37 31 35 36 20 31 38 30 2e 39 34 35 20 32 38 2e 38 36 32 34 20 31 38 30 2e 37 32 34 20 32 37 2e 39 34 39 38 43 31 38 30 2e 34 33 34 20 32 36 2e 36 37 39 32 20 31 38 30 2e 32 39 39 20 32 35 2e 33 37 38 20 31 38 30 2e 33 32 34 20 32 34 2e 30 37 34 39 43 31 38 30 2e 32 38 38 20 32 32 2e 36 38 34 34 20 31 38 30 2e 34 34 38 20 32 31 2e 32 39 35 39 20 31 38 30 2e 37 39 39 20 31 39 2e 39 34 39 39 43 31 38 31 2e 30 33 33 20 31 39 2e 30 33 32 32 20 31 38 31 2e 34 36 39 20 31 38 2e 31 37 38 32 20 31 38 32 2e 30 Data Ascii: 592 32.1458 183.799 31.8248C183.07 31.5412 182.431 31.0662 181.949 30.4498C181.364 29.7156 180.945 28.8624 180.724 27.9498C180.434 26.6792 180.299 25.378 180.324 24.0749C180.288 22.6844 180.448 21.2959 180.799 19.9499C181.033 19.0322 181.469 18.1782 182.0
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 30 32 34 39 56 32 30 2e 36 34 39 39 43 32 34 30 2e 35 32 36 20 31 39 2e 38 37 34 39 20 32 34 30 2e 33 35 37 20 31 39 2e 31 31 31 33 20 32 34 30 2e 30 34 39 20 31 38 2e 33 39 39 39 43 32 33 39 2e 37 38 20 31 37 2e 38 33 31 34 20 32 33 39 2e 33 30 37 20 31 37 2e 33 38 35 31 20 32 33 38 2e 37 32 34 20 31 37 2e 31 34 39 39 43 32 33 37 2e 39 32 38 20 31 36 2e 38 34 31 38 20 32 33 37 2e 30 37 36 20 31 36 2e 37 30 35 34 20 32 33 36 2e 32 32 34 20 31 36 2e 37 34 39 39 43 32 33 35 2e 34 39 39 20 31 36 2e 37 35 30 38 20 32 33 34 2e 37 38 20 31 36 2e 38 37 37 37 20 32 33 34 2e 30 39 39 20 31 37 2e 31 32 34 39 43 32 33 33 2e 32 30 36 20 31 37 2e 34 35 36 38 20 32 33 32 2e 33 34 34 20 31 37 2e 38 36 36 37 20 32 33 31 2e 35 32 34 20 31 38 2e 33 34 39 39 5a 4d 31 30 2e Data Ascii: 0249V20.6499C240.526 19.8749 240.357 19.1113 240.049 18.3999C239.78 17.8314 239.307 17.3851 238.724 17.1499C237.928 16.8418 237.076 16.7054 236.224 16.7499C235.499 16.7508 234.78 16.8777 234.099 17.1249C233.206 17.4568 232.344 17.8667 231.524 18.3499ZM10.
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 35 38 2e 33 39 35 34 20 38 2e 30 37 37 35 37 20 35 38 2e 36 38 38 33 20 37 2e 37 34 39 39 36 20 35 38 2e 38 39 39 37 43 37 2e 33 36 31 37 37 20 35 39 2e 31 36 31 35 20 36 2e 39 31 35 35 31 20 35 39 2e 33 32 34 36 20 36 2e 34 34 39 39 36 20 35 39 2e 33 37 34 37 43 35 2e 37 37 32 35 20 35 39 2e 34 38 35 39 20 35 2e 30 38 36 34 32 20 35 39 2e 35 33 36 31 20 34 2e 33 39 39 39 38 20 35 39 2e 35 32 34 37 48 31 2e 38 39 39 39 39 56 35 34 2e 31 39 39 37 48 34 2e 37 39 39 39 37 43 35 2e 33 33 32 39 20 35 34 2e 31 37 30 35 20 35 2e 38 36 37 30 33 20 35 34 2e 31 37 30 35 20 36 2e 33 39 39 39 36 20 35 34 2e 31 39 39 37 43 36 2e 37 38 34 38 36 20 35 34 2e 32 33 32 34 20 37 2e 31 35 39 31 31 20 35 34 2e 33 34 32 39 20 37 2e 34 39 39 39 36 20 35 34 2e 35 32 34 37 43 37 Data Ascii: 58.3954 8.07757 58.6883 7.74996 58.8997C7.36177 59.1615 6.91551 59.3246 6.44996 59.3747C5.7725 59.4859 5.08642 59.5361 4.39998 59.5247H1.89999V54.1997H4.79997C5.3329 54.1705 5.86703 54.1705 6.39996 54.1997C6.78486 54.2324 7.15911 54.3429 7.49996 54.5247C7
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 36 2e 33 36 33 20 36 31 2e 31 34 32 37 20 31 36 37 2e 33 35 32 20 36 31 2e 30 35 38 39 20 31 36 38 2e 33 32 34 20 36 30 2e 38 37 34 36 43 31 36 39 2e 31 33 33 20 36 30 2e 37 30 38 32 20 31 36 39 2e 39 30 39 20 36 30 2e 34 31 32 37 20 31 37 30 2e 36 32 34 20 35 39 2e 39 39 39 37 43 31 37 31 2e 35 38 36 20 35 39 2e 33 37 30 32 20 31 37 32 2e 33 37 37 20 35 38 2e 35 31 31 20 31 37 32 2e 39 32 34 20 35 37 2e 34 39 39 37 5a 4d 31 36 39 2e 35 32 34 20 35 31 2e 33 39 39 37 43 31 36 39 2e 38 38 35 20 35 32 2e 31 38 32 31 20 31 37 30 2e 30 35 36 20 35 33 2e 30 33 38 36 20 31 37 30 2e 30 32 34 20 35 33 2e 38 39 39 37 4c 31 36 39 2e 39 39 39 20 35 33 2e 38 37 34 37 43 31 37 30 2e 30 35 31 20 35 34 2e 36 39 37 32 20 31 36 39 2e 39 30 36 20 35 35 2e 35 32 30 32 20 31 Data Ascii: 6.363 61.1427 167.352 61.0589 168.324 60.8746C169.133 60.7082 169.909 60.4127 170.624 59.9997C171.586 59.3702 172.377 58.511 172.924 57.4997ZM169.524 51.3997C169.885 52.1821 170.056 53.0386 170.024 53.8997L169.999 53.8747C170.051 54.6972 169.906 55.5202 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.7	49802	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	659	OUT	GET /service/common.php?v=0.1&m=translate&f=getTexts&language=us&app=com.sedo.translation.global HTTP/1.1 Host: sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US
2024-09-30 22:41:02 UTC	548	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding strict-transport-security: max-age=2592000 cache-control: no-store, no-cache, must-revalidate x-frame-options: sameorigin expires: Thu, 19 Nov 1981 08:52:00 GMT x-content-type-options: nosniff x-sedo-request-id: ID-848758bd5-nkmmh-73492bf400dc31037ff1d03e4d9f0845 pragma: no-cache x-ua-compatible: IE=edge CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8cb7b7d4cf038ca5-EWR
2024-09-30 22:41:02 UTC	821	IN	Data Raw: 34 35 62 0d 0a 7b 22 68 22 3a 7b 22 76 22 3a 22 30 2e 31 22 2c 22 73 22 3a 30 7d 2c 22 62 22 3a 7b 22 74 72 61 6e 73 6c 61 74 69 6f 6e 22 3a 7b 22 46 4f 4f 54 45 52 5f 4e 45 57 53 4c 45 54 54 45 52 5f 44 49 53 43 4c 41 49 4d 45 52 22 3a 22 59 65 73 2c 20 49 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 72 65 63 65 69 76 65 20 65 6d 61 69 6c 20 75 70 64 61 74 65 73 20 66 72 6f 6d 20 53 65 64 6f 2c 20 69 6e 63 6c 75 64 69 6e 67 20 64 6f 6d 61 69 6e 20 68 69 6e 74 73 2c 20 70 72 6f 64 75 63 74 20 6e 6f 76 65 6c 74 69 65 73 2c 20 64 6f 6d 61 69 6e 20 61 75 63 74 69 6f 6e 73 20 61 6e 64 20 6f 74 68 65 72 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 73 22 2c 22 46 4f 4f 54 45 52 5f 4e 45 57 53 4c 45 54 54 45 52 5f 45 4d 41 49 4c 5f 50 4c 41 43 45 48 4f 4c 44 45 52 Data Ascii: 45b{"h":{"v":"0.1","s":0},"b":{"translation":{"FOOTER_NEWSLETTER_DISCLAIMER":"Yes, I would like to receive email updates from Sedo, including domain hints, product novelties, domain auctions and other special events","FOOTER_NEWSLETTER_EMAIL_PLACEHOLDER
2024-09-30 22:41:02 UTC	301	IN	Data Raw: 45 52 4c 41 59 5f 53 45 41 52 43 48 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 3a 22 2e 63 6f 6d 2c 20 2e 63 6f 2e 75 6b 2c 20 2e 6e 65 74 2c 20 2e 6f 72 67 22 2c 22 48 45 41 44 45 52 5f 54 4c 44 5f 4f 56 45 52 4c 41 59 5f 54 49 54 4c 45 22 3a 22 44 69 73 70 6c 61 79 20 6f 6e 6c 79 20 64 6f 6d 61 69 6e 73 20 77 69 74 68 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 54 4c 44 73 22 2c 22 52 53 53 5f 46 49 45 4c 44 5f 43 55 52 52 45 4e 54 5f 42 49 44 22 3a 22 43 75 72 72 65 6e 74 20 42 69 64 22 2c 22 52 53 53 5f 46 49 45 4c 44 5f 50 52 49 43 45 22 3a 22 50 72 69 63 65 22 2c 22 52 53 53 5f 46 49 45 4c 44 5f 54 49 4d 45 5f 52 45 4d 41 49 4e 49 4e 47 22 3a 22 54 69 6d 65 20 72 65 6d 61 69 6e 69 6e 67 22 2c 22 74 65 78 74 61 72 65 61 5f 72 65 6d 61 69 6e 69 6e 67 5f Data Ascii: ERLAY_SEARCH_PLACEHOLDER":".com, .co.uk, .net, .org","HEADER_TLD_OVERLAY_TITLE":"Display only domains with the following TLDs","RSS_FIELD_CURRENT_BID":"Current Bid","RSS_FIELD_PRICE":"Price","RSS_FIELD_TIME_REMAINING":"Time remaining","textarea_remaining_
2024-09-30 22:41:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.7	49803	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	551	OUT	GET /c7r/assets/static/libs/external/jquery-ui.min.js HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:02 UTC	521	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 20 Aug 2024 09:45:32 GMT ETag: W/"66c465bc-3e3f1" X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-3bc5650fc1eebb7f4604ffa2c80f4753 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1037 Server: cloudflare CF-RAY: 8cb7b7d4cca442e4-EWR
2024-09-30 22:41:02 UTC	848	IN	Data Raw: 37 64 39 36 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 33 20 2d 20 32 30 32 34 2d 30 36 2d 31 31 0a 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6a 71 75 65 72 79 2d 70 61 74 63 68 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 Data Ascii: 7d96/! jQuery UI - v1.13.3 - 2024-06-11 https://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, wi
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 2f 65 66 66 65 63 74 2d 66 6f 6c 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 68 69 67 68 6c 69 67 68 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 70 75 66 66 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 70 75 6c 73 61 74 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 63 61 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 68 61 6b 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 69 7a 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 73 6c 69 64 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 74 72 61 6e 73 66 65 72 2e 6a 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e Data Ascii: /effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js* Copyright OpenJS Foundation an
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 65 72 2c 69 3d 74 68 69 73 2e 5f 73 75 70 65 72 41 70 70 6c 79 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 75 70 65 72 3d 6e 2c 74 68 69 73 2e 5f 73 75 70 65 72 41 70 70 6c 79 3d 6f 2c 74 3d 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 5f 73 75 70 65 72 3d 65 2c 74 68 69 73 2e 5f 73 75 70 65 72 41 70 70 6c 79 3d 69 2c 74 7d 7d 29 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 6f 2c 7b 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 73 26 26 6f 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 7c 7c 74 7d 2c 61 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 6e 61 6d 65 73 70 61 63 65 3a 72 2c 77 69 64 67 65 74 4e 61 6d 65 3a 74 2c 77 69 64 67 65 74 46 75 6c 6c 4e Data Ascii: er,i=this._superApply;return this._super=n,this._superApply=o,t=s.apply(this,arguments),this._super=e,this._superApply=i,t}}),n.prototype=V.widget.extend(o,{widgetEventPrefix:s&&o.widgetEventPrefix\|\|t},a,{constructor:n,namespace:r,widgetName:t,widgetFullN
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 6f 6e 28 69 7c 7c 7b 7d 29 2c 74 2e 5f 69 6e 69 74 26 26 74 2e 5f 69 6e 69 74 28 29 29 3a 56 2e 64 61 74 61 28 74 68 69 73 2c 61 2c 6e 65 77 20 65 28 69 2c 74 68 69 73 29 29 7d 29 29 2c 6e 7d 7d 2c 56 2e 57 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 56 2e 57 69 64 67 65 74 2e 5f 63 68 69 6c 64 43 6f 6e 73 74 72 75 63 74 6f 72 73 3d 5b 5d 2c 56 2e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 77 69 64 67 65 74 4e 61 6d 65 3a 22 77 69 64 67 65 74 22 2c 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 22 22 2c 64 65 66 61 75 6c 74 45 6c 65 6d 65 6e 74 3a 22 3c 64 69 76 3e 22 2c 6f 70 74 69 6f 6e 73 3a 7b 63 6c 61 73 73 65 73 3a 7b 7d 2c 64 69 73 61 62 6c 65 64 3a 21 31 2c 63 72 65 61 74 65 3a 6e 75 6c 6c 7d 2c 5f 63 72 65 61 74 65 Data Ascii: on(i\|\|{}),t._init&&t._init()):V.data(this,a,new e(i,this))})),n}},V.Widget=function(){},V.Widget._childConstructors=[],V.Widget.prototype={widgetName:"widget",widgetEventPrefix:"",defaultElement:"<div>",options:{classes:{},disabled:!1,create:null},_create
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 7d 2c 6f 70 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 73 2c 6e 2c 6f 3d 74 3b 69 66 28 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 69 66 28 6f 3d 7b 7d 2c 74 3d 28 69 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 29 2e 73 68 69 66 74 28 29 2c 69 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 73 3d 6f 5b 74 5d 3d 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 74 5d 29 2c 6e 3d 30 3b 6e 3c 69 2e Data Ascii: t:function(){return this.element},option:function(t,e){var i,s,n,o=t;if(0===arguments.length)return V.widget.extend({},this.options);if("string"==typeof t)if(o={},t=(i=t.split(".")).shift(),i.length){for(s=o[t]=V.widget.extend({},this.options[t]),n=0;n<i.
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 5b 74 5b 73 5d 5d 7c 7c 56 28 29 2c 69 3d 6e 2e 61 64 64 3f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 5b 5d 3b 6e 2e 65 6c 65 6d 65 6e 74 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 56 2e 6d 61 70 28 61 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 29 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 73 28 65 29 7d 29 7c 7c 69 2e 70 75 73 68 28 65 29 7d 29 2c 61 2e 5f 6f 6e 28 56 28 69 29 2c 7b 72 65 6d 6f 76 65 3a 22 5f 75 6e 74 72 61 63 6b 43 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 22 7d 29 7d 28 29 2c 56 28 56 2e 75 6e 69 71 75 65 53 6f 72 74 28 69 2e 67 65 74 28 29 2e 63 Data Ascii: ElementLookup[t[s]]\|\|V(),i=n.add?(function(){var i=[];n.element.each(function(t,e){V.map(a.classesElementLookup,function(t){return t}).some(function(t){return t.is(e)})\|\|i.push(e)}),a._on(V(i),{remove:"_untrackClassesElement"})}(),V(V.uniqueSort(i.get().c
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 6f 66 20 65 3f 72 5b 65 5d 3a 65 29 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 28 69 2e 67 75 69 64 3d 65 2e 67 75 69 64 3d 65 2e 67 75 69 64 7c 7c 69 2e 67 75 69 64 7c 7c 56 2e 67 75 69 64 2b 2b 29 3b 76 61 72 20 74 3d 74 2e 6d 61 74 63 68 28 2f 5e 28 5b 5c 77 3a 2d 5d 2a 29 5c 73 2a 28 2e 2a 29 24 2f 29 2c 73 3d 74 5b 31 5d 2b 72 2e 65 76 65 6e 74 4e 61 6d 65 73 70 61 63 65 2c 74 3d 74 5b 32 5d 3b 74 3f 61 2e 6f 6e 28 73 2c 74 2c 69 29 3a 6f 2e 6f 6e 28 73 2c 69 29 7d 29 7d 2c 5f 6f 66 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 65 3d 28 65 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2e 6a 6f 69 6e 28 74 68 69 73 2e 65 76 65 6e 74 4e 61 6d 65 73 70 61 63 65 2b 22 20 22 Data Ascii: of e?r[e]:e).apply(r,arguments)}"string"!=typeof e&&(i.guid=e.guid=e.guid\|\|i.guid\|\|V.guid++);var t=t.match(/^([\w:-])\s(.*)$/),s=t[1]+r.eventNamespace,t=t[2];t?a.on(s,t,i):o.on(s,i)})},_off:function(t,e){e=(e\|\|"").split(" ").join(this.eventNamespace+" "
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 29 29 7d 7d 2c 56 2e 65 61 63 68 28 7b 73 68 6f 77 3a 22 66 61 64 65 49 6e 22 2c 68 69 64 65 3a 22 66 61 64 65 4f 75 74 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 56 2e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 5b 22 5f 22 2b 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 73 2c 6e 3d 28 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 7b 65 66 66 65 63 74 3a 74 7d 3a 74 29 3f 21 30 21 3d 3d 74 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 65 66 66 65 63 74 7c 7c 61 3a 6f 3b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 74 3d 74 7c 7c 7b 7d 29 3f 74 3d 7b 64 75 72 61 74 69 6f 6e 3a 74 7d 3a 21 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 73 3d 21 56 2e 69 73 45 6d 70 74 79 4f 62 Data Ascii: ))}},V.each({show:"fadeIn",hide:"fadeOut"},function(o,a){V.Widget.prototype["_"+o]=function(e,t,i){var s,n=(t="string"==typeof t?{effect:t}:t)?!0!==t&&"number"!=typeof t&&t.effect\|\|a:o;"number"==typeof(t=t\|\|{})?t={duration:t}:!0===t&&(t={}),s=!V.isEmptyOb
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 74 6f 22 3d 3d 3d 69 26 26 74 2e 68 65 69 67 68 74 3c 74 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3f 56 2e 70 6f 73 69 74 69 6f 6e 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 28 29 3a 30 2c 68 65 69 67 68 74 3a 65 3f 56 2e 70 6f 73 69 74 69 6f 6e 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 28 29 3a 30 7d 7d 2c 67 65 74 57 69 74 68 69 6e 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 56 28 74 7c 7c 77 69 6e 64 6f 77 29 2c 69 3d 49 28 65 5b 30 5d 29 2c 73 3d 21 21 65 5b 30 5d 26 26 39 3d 3d 3d 65 5b 30 5d 2e 6e 6f 64 65 54 79 70 65 3b 72 65 74 75 72 6e 7b 65 6c 65 6d 65 6e 74 3a 65 2c 69 73 57 69 6e 64 6f 77 3a 69 2c 69 73 44 6f 63 75 6d 65 6e 74 3a 73 2c 6f 66 66 73 65 74 3a 21 69 26 26 21 73 3f 56 28 Data Ascii: to"===i&&t.height<t.element[0].scrollHeight?V.position.scrollbarWidth():0,height:e?V.position.scrollbarWidth():0}},getWithinInfo:function(t){var e=V(t\|\|window),i=I(e[0]),s=!!e[0]&&9===e[0].nodeType;return{element:e,isWindow:i,isDocument:s,offset:!i&&!s?V(
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 26 26 28 79 5b 31 5d 3d 79 5b 30 5d 29 2c 22 72 69 67 68 74 22 3d 3d 3d 75 2e 61 74 5b 30 5d 3f 6d 2e 6c 65 66 74 2b 3d 70 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 75 2e 61 74 5b 30 5d 26 26 28 6d 2e 6c 65 66 74 2b 3d 70 2f 32 29 2c 22 62 6f 74 74 6f 6d 22 3d 3d 3d 75 2e 61 74 5b 31 5d 3f 6d 2e 74 6f 70 2b 3d 66 3a 22 63 65 6e 74 65 72 22 3d 3d 3d 75 2e 61 74 5b 31 5d 26 26 28 6d 2e 74 6f 70 2b 3d 66 2f 32 29 2c 64 3d 43 28 77 2e 61 74 2c 70 2c 66 29 2c 6d 2e 6c 65 66 74 2b 3d 64 5b 30 5d 2c 6d 2e 74 6f 70 2b 3d 64 5b 31 5d 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 74 2c 61 3d 56 28 74 68 69 73 29 2c 72 3d 61 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 6c 3d 61 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 65 3d 44 28 74 Data Ascii: &&(y[1]=y[0]),"right"===u.at[0]?m.left+=p:"center"===u.at[0]&&(m.left+=p/2),"bottom"===u.at[1]?m.top+=f:"center"===u.at[1]&&(m.top+=f/2),d=C(w.at,p,f),m.left+=d[0],m.top+=d[1],this.each(function(){var i,t,a=V(this),r=a.outerWidth(),l=a.outerHeight(),e=D(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.7	49805	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	574	OUT	GET /components/p9HJ4M2Uz7U4/d26139c0fd3b917ce03b.woff2 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:02 UTC	895	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: application/octet-stream Content-Length: 11256 Connection: close Last-Modified: Thu, 12 Sep 2024 11:04:14 GMT ETag: "66e2caae-2bf8" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-6010c0ef5f5e8a500aa4801070aa5a12 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://sedo.com Access-Control-Allow-Max-Age: 86400 Access-Control-Allow-Max-Methods: GET Vary: Origin CF-Cache-Status: HIT Age: 1893 Accept-Ranges: bytes Set-Cookie: __cf_bm=3tKm5SjMLiD_4SRQKJ2sigNzKz4MHi3WIDLQF98Zt90-1727736062-1.0.1.1-hBqTeh2OR2FazTTmlW22CXvblzT8yzD_Ho6ppZEv4zKTTVIZoNLp9gEs0Uw52DKteJVNJFafyIZHHXd71ejhoQ; path=/; expires=Mon, 30-Sep-24 23:11:02 GMT; domain=.sedo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8cb7b7d4fe155e86-EWR
2024-09-30 22:41:02 UTC	474	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 2b f8 00 0e 00 00 00 00 62 68 00 00 2b 9f 00 01 0c cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 40 1b b2 68 1c 81 60 06 60 00 83 66 11 08 0a f2 68 db 3c 01 36 02 24 03 87 44 0b 83 64 00 04 20 05 83 5c 07 86 39 1b e4 53 15 e3 98 a5 c0 c6 01 30 78 9f 33 45 11 6c 1c 50 10 cc 22 8a 0a ce 07 d9 ff df 12 64 1c db d0 ed 11 25 5a 49 9a 08 c7 b1 4a ab e6 52 69 6f 8b e3 08 4d 60 d7 52 29 b1 f7 79 cb 26 3e 0f 2a 94 dc 56 e8 d8 b4 e6 f0 5c 5d 3e 47 e1 6f 9d 74 56 47 b0 0c 79 ef f4 5f 0c 3b 8c 5a be 15 3a 79 ea 21 49 d1 e4 f9 e7 c7 3d df da e7 7e 18 0d f0 28 02 6c 93 55 d5 18 ea 84 38 55 ec 70 02 f0 ce f0 fc dc 7a 63 9f ac 45 fe 55 fd 25 0b 6a 15 0c 18 3d 4a 60 b4 80 03 36 30 c1 46 38 05 41 31 fb 14 ab 30 fa 3c 2b 38 Data Ascii: wOF2+bh+@h``fh<6$Dd \9S0x3ElP"d%ZIJRioM`R)y&>*V\]>GotVGy_;Z:y!I=~(lU8UpzcEU%j=J`60F8A10<+8
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 06 b4 75 a4 61 1a 80 87 75 eb 30 f6 72 9a e1 e0 00 1e 86 d2 71 07 30 01 28 8e 56 52 9a ad b4 5a 56 b2 3c 91 ed 4b af 28 13 94 2f 15 96 8e 1e 3f a3 9d fe 43 d2 00 c9 23 f6 f0 bf 6a ec 3f d4 8b 1e 02 08 b7 b6 ad c9 da f0 3f 33 eb 35 e9 27 0f 0c 92 e6 d2 10 52 6b ad ec 89 88 88 88 84 dc f5 9f 65 6c fd 5f 73 2f 22 6c 4a 05 d9 60 33 de cf 69 05 30 87 f4 2b 21 20 2a 28 e9 53 34 4a 96 6c 28 f5 d1 28 33 78 a1 cc 8a 46 99 6d 8e 00 9f 01 d4 9a 01 b3 48 98 04 9c bb e0 cc 07 51 0f de e6 9f 01 08 20 80 9e 32 b9 b6 76 28 01 0f dc d5 8e 1e 35 27 01 e0 0c a5 03 00 25 2c 3a 28 6c eb 0a e7 b1 68 d0 6d bb e3 6e f8 cc 8f fe 09 40 e1 c4 85 1e 21 94 78 7e 42 c5 c3 23 92 4b 52 a8 d5 72 fd b6 da 67 bf 6b 42 10 5b 90 37 97 d4 a0 56 b4 3a 74 5b 1b 35 57 2f 39 22 52 20 aa 93 d4 68 Data Ascii: uau0rq0(VRZV<K(/?C#j??35'Rkel_s/"lJ`3i0+! *(S4Jl((3xFmHQ 2v(5'%,:(lhmn@!x~B#KRrgkB[7V:t[5W/9"R h
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 34 30 42 b8 c2 78 7c 43 c3 9c 18 23 4d 89 7a 70 f6 ac 44 82 c0 80 4d 58 c8 b8 d3 aa d3 f0 79 d0 d5 eb 54 6a 96 39 9a f4 58 6d 86 b5 b6 9a 67 47 07 97 da 05 7b ec 81 cb ec 83 bd f6 87 eb 83 02 d9 2d 48 b0 10 11 d8 38 42 09 f3 7a 2b 4c 38 f7 33 13 41 20 42 a4 28 d1 62 88 c4 42 c4 89 97 80 2c 11 b0 02 1e e1 57 89 f6 6a c0 9a 09 90 bf 59 3a 2a 18 0d 9d 0a 83 1a 13 4b 50 67 b2 85 28 19 1c 0f 79 72 01 b3 1f 32 04 cc 08 c2 c1 45 26 4e a2 92 a1 4a ba c9 ab 4a bb e3 48 d1 01 f3 5e 00 d6 c2 a3 21 bc 1c 00 63 a1 04 fc 1a 1a 27 c1 a2 50 aa 7d 03 ec 21 a7 12 dc 36 1a c0 4e 94 9a 2a 80 0d 04 12 11 9d 19 2d 8c 60 b4 48 18 2f 8e 44 87 4d a2 7d 90 48 6f 24 20 78 13 0d 3f 41 0a 02 84 10 09 33 85 24 70 30 a3 50 c8 8c 01 3f 40 9c 00 89 8d 85 04 a5 cd 4c c0 a1 e8 60 7c 02 5c Data Ascii: 40Bx\|C#MzpDMXyTj9XmgG{-H8Bz+L83A B(bB,WjY:KPg(yr2E&NJJH^!c'P}!6N-`H/DM}Ho$ x?A3$p0P?@L`\|\
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: b1 bb 89 9e 64 92 f7 15 8e 74 bc 71 13 ed e1 e2 07 d7 4b b5 46 d0 5b cf 3a 31 45 da 3b 28 3d fa aa 70 0b 27 a3 6d c1 4e 17 79 75 a2 15 63 b1 66 43 64 ee 7d 1d ed e0 2c ef 2a 27 88 39 95 b6 65 66 5b aa 18 f0 9c 73 26 90 41 92 e1 7c c6 de 2c 30 bc 9a 9c fe 84 d4 6f d1 47 3d ac 9b 63 27 7d 9f 29 b6 c7 1b 62 de f4 87 d0 1d 69 97 73 31 c6 17 e1 af 89 82 ed 56 bc 8e 1a 12 97 23 b8 52 e0 70 84 ac 1c a3 bc c6 27 16 27 6f 2b 80 d4 ba b7 5f 7d 26 9a 2b 7a 20 33 42 33 b8 7b c1 76 1d e0 af 87 16 34 74 c0 cd 3c 5e 7a c0 51 bc 15 44 41 dd 0d 9e 14 07 1b 97 75 25 02 31 87 34 10 44 50 36 d2 0d 97 01 cb a6 81 58 81 c0 cc e0 d2 31 d0 33 09 ee c4 ea 49 d2 dd 1f 2f 33 d7 90 15 a0 da 55 0c f4 f8 0d d6 91 f6 70 42 f5 d0 90 e8 8f a7 03 9a c8 84 c2 31 30 c6 37 65 dd 45 63 2c 5b Data Ascii: dtqKF[:1E;(=p'mNyucfCd},*'9ef[s&A\|,0oG=c'})bis1V#Rp''o+_}&+z 3B3{v4t<^zQDAu%14DP6X13I/3UpB107eEc,[
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 35 3e 21 97 1c 8b dd 4b 2d 6f bb c3 5c f3 6f 7b ca 03 dc 5b 0e 4f d0 fa b7 e9 95 92 39 3b 04 58 b5 f4 64 0e 81 42 83 c2 18 d6 a6 22 b1 46 ca ee 7f 8b a3 4d 10 ba e9 97 eb 6d 82 43 ba 79 4f 48 4c 4b 13 81 52 26 89 46 db db 6c c0 99 cd 8d 59 c0 da fb 22 ed d4 f4 21 b6 32 5b 03 74 e9 ef dd 79 45 0f ff f5 b7 9f c1 bb 18 7f fe b1 ab 44 6c 78 68 99 c6 ad ed 41 63 68 65 f9 a6 fd 06 10 aa a3 17 97 e7 13 44 81 12 b5 ba 8c 19 66 94 b0 33 55 52 ca 31 9a 66 48 a5 67 c6 24 d4 93 11 ab 17 42 9d 38 fa 07 1c 8c 0a a0 fb 34 01 56 e9 3a ad 7c 5e 92 88 df 68 72 87 3c a0 71 9d ec cd c0 a8 8f 17 fa fd f2 7f 90 7f 4d cf 0d 5b 7e e5 42 d0 42 61 72 2c 1d 05 46 1b b6 f2 02 37 31 e7 e8 d0 cc 7b d6 77 92 33 82 f4 39 d2 b4 f7 5b d5 8d 23 d8 e9 73 69 55 1d b2 05 9c 5b d4 eb 34 85 08 Data Ascii: 5>!K-o\o{[O9;XdB"FMmCyOHLKR&FlY"!2[tyEDlxhAcheDf3UR1fHg$B84V:\|^hr<qM[~BBar,F71{w39[#siU[4
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: e2 96 37 f7 74 ce 71 a9 73 95 aa 3f be 5b 8b c2 4b f4 79 2a 7f 51 52 59 15 e9 fa 1c 86 40 96 41 13 e1 0b e4 74 a3 3a d8 e0 b4 a6 c2 9e ed 6c 2b bb 80 2c 96 17 d1 f5 7a e6 34 5b 43 8a 44 2f 17 ea d3 bb 80 b1 6e 84 98 9e 97 54 59 5a 39 e8 1b 34 14 ea 21 39 3b 56 d7 7d 5b 48 f8 29 08 b4 58 69 06 66 4a aa 0d 81 c9 d7 f9 46 ee de b2 0a 05 55 91 00 09 96 51 c8 51 59 d0 22 b6 41 c8 a7 ea 9d 66 0c 27 c1 32 7e b4 a0 e4 e2 3f 04 de 7d bc 31 91 13 93 18 b4 ff 7a ec 58 53 51 51 71 89 5a c7 cc 36 8a 2a 09 a9 42 47 74 c5 9b c7 65 8c 38 09 12 c0 64 c6 8a 25 71 4e 5b 69 f4 b4 57 0e a1 3c db 5a 33 4d e1 63 a5 49 79 70 d4 eb 22 1f 58 a4 a3 fa c8 64 3f 95 ea ef 8d e4 73 17 f8 5e fa 80 7d c2 0f 71 a2 f5 ba 73 02 62 fd 58 62 c1 2a 53 38 ad 59 a0 29 a5 2c 26 93 97 50 a8 4b 84 Data Ascii: 7tqs?[KyQRY@At:l+,z4[CD/nTYZ94!9;V}[H)XifJFUQQY"Af'2~?}1zXSQQqZ6BGte8d%qN[iW<Z3McIyp"Xd?s^}qsbXb*S8Y),&PK
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: e9 d3 cf 8f b2 8d ce 0c 2d dc 31 8f b3 f3 13 a7 73 db 2e 5e e1 93 e9 64 55 5b ee af e7 86 c1 14 6b 7c 07 76 ee f4 ed ae a9 f1 ed d9 b1 f3 53 be ba 18 db 30 1a 5d 6a 32 46 97 9c a9 c3 62 eb ce 8c ff 87 18 4d d1 a5 a3 0d c0 5e 3e b0 b3 c3 f6 97 09 f7 b8 90 d2 35 6d 3e 60 19 f4 da e9 4d 8e 52 4e 36 53 5e 22 67 dd de 3c 75 a9 4c 66 40 ec 44 19 c9 2a e4 33 0b d3 dd 79 e5 5f 2f 1c c6 6e f6 1c 06 59 eb ee d9 b9 12 85 4e 26 c2 63 47 ac 51 ca 7c f1 e4 f4 40 0c 97 24 64 5f b9 93 6c 59 5c 26 d0 20 19 89 25 2f b8 ca 64 ab 1c 1a 70 64 6b 85 74 e3 03 17 0e c9 aa 97 27 02 fe 7f 83 a4 80 0c 22 74 76 db a7 be a3 1e b7 6b 77 f3 6e 7c d6 bf 7d 7d f3 5d c0 b9 e6 8e 95 2b 51 9a b4 c9 9a ff 93 a8 83 d7 3c 71 9a fc aa b7 11 1b 34 d3 f1 3c 1b d6 45 75 c8 15 cc 9c 8f 5d 24 61 66 Data Ascii: -1s.^dU[k\|vS0]j2FbM^>5m>`MRN6S^"g<uLf@D*3y_/nYN&cGQ\|@$d_lY\& %/dpdkt'"tvkwn\|}}]+Q<q4<Eu]$af
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: c6 7e 3b 16 e4 37 29 54 a4 16 12 79 86 42 2e 88 26 61 ff 25 26 58 bf 21 3e fc 5a 48 98 4c b6 e2 69 11 0f fe 79 c0 22 36 75 eb c8 b2 4c 9e 0f 7c b2 41 05 b5 42 c2 2c 99 fb bb e4 e4 8a cc 8a 13 c2 75 ff 34 bc 4a 06 4b a6 90 42 7e 52 89 ba 36 84 30 9f 82 0d 68 7e 76 d5 82 e7 74 0d 5c 31 b6 43 d2 bf a8 b1 6f a3 2d df 03 2c 17 9c 99 82 3b cf 0f 70 79 2b cf 77 c2 d4 9e f3 2b 79 dc 81 f3 3d 14 03 c3 86 48 6c 8c 7e 42 09 62 03 87 37 93 d0 46 3d 85 a2 37 a2 49 2f ed cf c1 d3 e9 8c e9 30 bf c8 0c fa 74 80 59 ff 22 08 47 a3 e3 82 5e 8c 18 cd ef 92 93 df 99 cc 23 93 41 38 3a 0d 17 34 39 62 32 7b 67 90 48 d3 bc 26 b3 f5 a5 e2 12 5f 70 58 91 74 58 c0 bf 04 e6 ff 36 9a cc e4 7d c2 a1 74 5e 31 c3 f7 39 06 99 2d bb d2 11 59 ef aa 19 2b 63 53 e5 99 02 2b 8d 27 fd 8f 47 9b Data Ascii: ~;7)TyB.&a%&X!>ZHLiy"6uL\|AB,u4JKB~R60h~vt\1Co-,;py+w+y=Hl~Bb7F=7I/0tY"G^#A8:49b2{gH&_pXtX6}t^19-Y+cS+'G
2024-09-30 22:41:02 UTC	1199	IN	Data Raw: 1c 8c ad c3 ec 3d a9 d4 39 01 6a 7f 15 22 12 73 55 81 2e ea df 12 10 b0 11 45 7d 86 00 a8 b9 60 1a 05 10 1f 4c 77 2c 5f 66 dc 60 a5 a5 ac 1e ba 05 30 0c 96 80 ed d6 ec d2 87 6a cc a9 7f 1e 13 c9 1c ac 7c d3 cb b3 dd 48 d1 32 bb c6 9d ed 82 54 43 4b 05 bc 5d 37 a0 00 99 73 ef d3 6f d0 a8 8a f9 a9 bf 83 d0 f1 23 c0 7b cf d7 ee c0 2a 33 dc 54 e9 64 db 78 7f 5c 07 cc 14 00 20 c0 78 7f f2 06 98 f2 fa c8 fc e9 ba 1d a0 10 fe d9 1f c9 5f f5 f7 54 40 ed e8 ff 55 20 af 74 a4 d5 26 62 04 8c bc 03 f6 ef 99 75 91 a4 26 e1 cc f1 fc 81 51 3f 01 0f aa 96 9d a4 e5 5a 40 51 35 69 d8 45 47 a8 95 5c 85 6b 37 60 71 45 16 99 df fb 22 e1 56 38 50 94 82 3d 0f f0 ba c1 82 fc eb 48 1a 62 85 e8 31 a2 9b 3d 08 a4 26 78 ea 49 85 6d b3 47 03 fb c8 60 2f 89 22 2c 5b d3 5e 52 7b dc a1 Data Ascii: =9j"sU.E}`Lw,_f`0j\|H2TCK]7so#{*3Tdx\ x_T@U t&bu&Q?Z@Q5iEG\k7`qE"V8P=Hb1=&xImG`/",[^R{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.7	49809	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	567	OUT	GET /browser-ui/3.55.0/index.module.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:02 UTC	1010	IN	HTTP/1.1 200 OK x-goog-generation: 1726571800863192 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 120986 Content-Encoding: gzip x-goog-hash: crc32c=RR3iIw== x-goog-hash: md5=K5mk1ipxKJR3cOAyrVbzdw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 120986 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8lju3uI5JWLXNOEc9wzczw4460ckHHwH3zIjp4iQD2LXyWIQnDi_J5OwO2g_nuVd3A46nczXeCFa1vQ Server: UploadServer Date: Tue, 17 Sep 2024 11:17:13 GMT Expires: Wed, 17 Sep 2025 11:17:13 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:40 GMT ETag: "2b99a4d62a7128947770e032ad56f377" Content-Type: text/javascript Age: 1164229 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:02 UTC	380	IN	Data Raw: 1f 8b 08 08 18 65 e9 66 02 ff 74 6d 70 35 35 6b 6b 6e 72 75 6d 00 ec bd 0b 7f db 36 f2 28 fa 55 64 fe bb 5e b2 86 15 db 49 b3 5d 29 ac 56 91 95 44 ad 5f 6b d9 e9 43 57 ab a5 25 d8 62 23 93 2a 09 d9 71 2d dd cf 7e 67 06 0f 82 0f d9 4e 36 ed 9e 73 cf e9 2f 95 49 02 18 00 83 c1 60 30 98 19 dc 04 49 8d fb c7 17 bf f2 b1 a8 5f 26 9c ff ce dd fb 30 0a 45 18 cc c2 df 79 e3 72 11 8d 45 18 47 ee fd 75 3c 59 cc f8 49 20 a6 0d ee 3b 75 87 85 d7 f3 38 11 6f 54 86 a3 e0 9a 37 84 ef 8c 46 f2 fb 68 e4 ac fc fb 95 77 2f 92 bb fb 94 cf 2e 07 62 e8 47 fc b6 a6 0b b8 ce c2 61 4e c2 c5 22 89 6a b2 8c bb f0 1c 6f 35 0e c4 78 ea 46 de fd 38 8e 52 51 4b a8 d4 f9 e9 81 cb d9 2c 86 44 28 eb b1 d0 e7 fe 77 f7 f0 b5 9e f0 9b f8 03 97 3d a0 5c f5 34 19 7b 8c 43 c2 75 7c c3 5d 6f d5 Data Ascii: eftmp55kknrum6(Ud^I])VD_kCW%b#*q-~gN6s/I`0I_&0EyrEGu<YI ;u8oT7Fhw/.bGaN"jo5xF8RQK,D(w=\4{Cu\|]o
2024-09-30 22:41:02 UTC	1390	IN	Data Raw: 6b 1e 89 fa 38 e1 81 e0 dd 19 c7 37 d7 51 25 3c 0d 4a 56 e4 30 40 51 03 91 27 b3 67 c8 0b 3c 16 47 3c 49 e2 c4 f5 ee 53 17 3b d1 a5 b7 7f bf 09 c2 19 9f d4 44 ac c6 aa 51 fb ea 9e af fe ed c1 50 b8 63 6f 05 c5 66 71 30 81 52 6b 10 23 b3 ad bc a6 69 ea 94 07 93 7a 30 9f f3 68 d2 99 86 b3 09 a6 03 b8 52 69 a0 a2 15 16 d4 a4 58 13 30 40 c2 bb bf 01 d2 8d 34 1e 3e f0 bb d4 e5 34 6a ea cb 15 17 c7 b7 11 8c f5 9c 27 e2 ae 7f 77 7d 11 cf 52 59 2a f1 1f ca 83 60 c4 e6 a6 9b f8 49 fd 32 9c 09 9e b8 ae 99 06 50 af 22 80 4a 10 fb 5c 62 1c 30 86 6d ac f3 08 fa 9a 04 17 33 0e 5d f3 58 54 9f 2f d2 29 76 7a 76 07 c4 97 78 2b 4d 4d 2b d3 bb 08 ea bf bf 04 00 b2 7f bb cd e8 55 90 5c 11 ca d2 fa 8c 47 57 62 da 8c b6 b6 64 4f 42 3f 5a cc 66 1b be c9 31 88 86 2d fb a5 71 bf Data Ascii: k87Q%<JV0@Q'g<G<IS;DQPcofq0Rk#iz0hRiX0@4>4j'w}RY*`I2P"J\b0m3]XT/)vzvx+MM+U\GWbdOB?Zf1-q
2024-09-30 22:41:02 UTC	1390	IN	Data Raw: 09 07 40 26 b1 d7 08 18 a5 03 33 60 6f dd 04 e0 c2 03 7e e1 30 03 37 37 8f 21 8b c7 74 b7 be 13 88 79 85 03 af 49 88 f7 77 32 ec 9d ba 25 bc e1 7a 23 51 aa 17 9d 3e 1b b1 6b 76 c7 3a ec c2 df 61 c7 7e b2 b9 99 20 c9 2c 97 37 ec c8 3f d6 18 bc f5 8f d8 a9 2f 34 95 21 fa b1 bf 1f 10 31 13 a0 c2 c9 ab d3 e6 04 d7 4d 49 77 53 42 e0 87 c1 64 e8 cb ee c1 17 01 6f 30 c4 ce 45 1c cf 78 60 4d 93 29 7c 2c 4f 9e 69 0b 4b 36 32 a1 d1 ca 1d 91 d4 98 ff 76 11 5e 85 91 b0 cb f7 68 16 40 1f e9 8f 7c f6 1a 5d 77 ea 41 d2 19 bb d7 3c a8 31 5d 59 59 88 3f 37 a6 d0 fc 8b ef 76 20 e3 94 26 31 9b 4a a6 04 7f 81 1d c3 2f b0 e3 16 fd ca 61 9c 12 f5 34 00 b4 8b 8f 20 3d 12 04 42 c3 05 10 c9 f6 2e 2c 15 ee 9d ff de 9d b2 63 76 ed 4f b6 2e d8 ad e7 b5 2e fd ab 86 7b e9 1f 0f ee 86 Data Ascii: @&3`o~077!tyIw2%z#Q>kv:a~ ,7?/4!1MIwSBdo0Ex`M)\|,OiK62v^h@\|]wA<1]YY?7v &1J/a4 =B.,cvO..{
2024-09-30 22:41:02 UTC	1390	IN	Data Raw: 0d 92 db 99 31 6e 5b 48 88 eb 36 5c c7 68 b0 1c 20 a6 f3 cd cd 73 4b a7 95 d0 8e ac 25 8b 5e ca a3 2a b7 c3 8e 40 c8 b1 bf 5d d0 37 76 69 23 cc 3f 67 97 aa bc ff ab c7 8e 41 1a a9 a7 8b 0b 90 77 e0 bb dc d6 77 e0 29 15 81 c0 85 5a 3d 11 2f b8 34 3b fd 23 86 ad 8c fc 84 4d a9 bd b8 cb a4 4f 53 dc 6e c0 43 7a 01 0f 1e d3 82 d6 68 94 2a 09 2b f5 15 44 2d d7 9e a3 e6 6f 1f b6 97 37 7c d2 c7 84 37 49 7c 4d da 19 53 42 17 31 1f 68 97 47 8f c0 e9 46 f2 23 5b 0f c8 ed e8 cc 1e bb f1 55 2f 41 42 57 60 29 f1 c6 17 20 6c cb f6 3e d4 24 d9 68 c4 c4 f5 3c 8e 80 d6 7f 0c 67 b3 43 d8 26 0b 94 24 cb 5f 5d dd 4f 2b 71 3f 9c 98 12 80 32 29 e7 54 a4 7b 66 51 7a bc 5d 1d 98 18 37 6b 9a 77 ca c7 1c ca a8 9c 0f 24 4a 72 d9 d0 12 b1 06 96 4e e3 c5 6c d2 d1 a5 ce e7 13 1a 0c 62 Data Ascii: 1n[H6\h sK%^@]7vi#?gAww)Z=/4;#MOSnCzh+D-o7\|7I\|MSB1hGF#[U/ABW`) l>$h<gC&$_]O+q?2)T{fQz]7kw$JrNlb
2024-09-30 22:41:02 UTC	1390	IN	Data Raw: b5 fa 3f 43 f3 af 05 a5 af 3e 75 d6 7b 5a 39 2c 26 fb 57 65 b3 86 31 11 9f a4 3d ea 3b 0b 11 a7 55 9a 17 4f 1e 6b a1 92 58 1e b3 09 a5 53 07 32 1c e3 cf 1b a4 5d df dd 40 35 1e a4 7a c4 bc ee dc 33 39 66 03 8e e6 8d 78 54 74 c5 2c 95 45 f1 a8 91 4a b7 d0 26 2f 94 f5 89 fa 65 98 a4 52 94 d4 56 11 c2 5e 14 e5 31 56 aa 4a 46 50 2e 44 94 e5 0a c2 2c 1e e3 b9 64 ca 38 3c 64 18 f9 59 ea e8 25 62 7e b6 12 7e ac b0 00 81 5e 92 74 2b 4d 67 52 6b a9 e0 ea 3c 43 fe cd 99 52 a0 81 85 5f f1 1d f6 6d 8f da 90 8c 71 b1 30 e6 1a 82 cc 35 0c ea 82 16 1a 6e 34 c8 c4 44 6b a0 ab cc 4c c6 9f 63 66 d2 73 95 c2 7e cc 48 b7 89 4a fc 10 1f f4 a9 9c 85 aa df 6d 43 d3 7b b4 dd 20 03 e7 71 c7 d9 9a 6e 6d a1 b9 07 67 b0 07 48 d1 c6 a8 91 b7 c2 2a 19 55 20 d3 62 80 9f 9b 70 92 cb ac Data Ascii: ?C>u{Z9,&We1=;UOkXS2]@5z39fxTt,EJ&/eRV^1VJFP.D,d8<dY%b~~^t+MgRk<CR_mq05n4DkLcfs~HJmC{ qnmgH*U bp
2024-09-30 22:41:02 UTC	1390	IN	Data Raw: 94 f0 b6 83 59 78 15 65 8d 2d 64 54 b0 ed 9c a6 e9 af 8f 4f 81 88 14 ac 0b 18 62 18 36 83 30 95 a8 ca ab d4 0c 5d 3a b9 bd df 3b ef 03 6b 3c c9 83 11 f1 9c 40 6d 27 c1 24 5c a4 6b 8a e4 81 63 19 aa 60 7d a1 d7 c7 c0 15 0f f3 55 5d c4 42 c4 d7 8f d4 a6 0a e6 2b 54 25 4b 75 1e bf fe be db 39 83 15 a6 df a3 f5 48 95 92 ce 4b db f3 38 0d 91 72 2d 44 16 0b c8 f6 95 f2 eb 21 2a 66 ef c0 40 e1 64 2e 15 c0 a9 c5 13 22 df 3c e8 8c ac 0b 6d 34 03 24 e7 19 e7 6b 38 33 2c 9e c0 1a 41 3e 0a 27 d9 9a 14 81 1c 4d cc 17 90 85 9c 73 02 f8 91 fc 71 bf dd 7f 47 5f 82 74 aa be 1c 9f 13 73 9c c4 0b c9 01 65 85 62 4d 85 b0 ac c1 fc fd 19 26 5e 12 c2 d4 bd cb 16 36 fa 9a 72 20 fa 89 fa 0e b8 80 55 08 3f 0b f4 bd 53 5f ff 79 0e ab c1 e9 11 7d ff 6d 01 8c 3f 89 54 ca 51 f7 fc ec Data Ascii: Yxe-dTOb60]:;k<@m'$\kc`}U]B+T%Ku9HK8r-D!*f@d."<m4$k83,A>'MsqG_tsebM&^6r U?S_y}m?TQ
2024-09-30 22:41:02 UTC	1390	IN	Data Raw: 6b 2c d9 a2 0d e3 89 42 d9 16 f0 06 03 c5 26 fe 42 19 e3 68 8b a8 cd 4d 1d 2f c3 cc e7 89 c1 d7 04 88 6a 14 dc 06 a1 70 bc 96 30 ba 6e 34 d7 a1 af 1e 29 c4 f3 27 5b a1 ab 70 c3 a9 95 40 7c c5 64 85 33 9d 8e 16 69 06 72 15 44 d5 64 1f 0a b8 8b 12 40 7d e8 52 86 bb 0a 5c ea b5 b7 92 66 40 89 8c 16 51 9a 27 d6 44 8e 2c 4c 27 19 f5 e1 94 13 f6 90 e2 59 56 48 d3 0b 1f 2d 76 9d fa 69 2b 95 7d 48 20 a5 01 40 56 ab b5 51 04 50 36 4b 31 8c 0f 9d 4d 25 20 ee 2b 30 a6 a6 10 86 95 3c 6d f8 47 3e 5e 08 15 70 24 f1 b2 40 26 2a 88 c9 5b f4 1e 41 f6 89 6a bf 60 06 74 3b b9 ab 25 8b 28 92 11 48 10 04 1e 62 c1 76 42 da 1d 25 12 ac c4 19 bc 87 0a 64 aa 9a a0 70 a3 bc 37 27 b0 69 47 96 b8 92 ae 7d d7 5c 4c e3 89 1f 82 6c 00 f8 f5 d3 66 53 76 28 86 95 62 c2 67 fc 0a 26 0d 56 Data Ascii: k,B&BhM/jp0n4)'[p@\|d3irDd@}R\f@Q'D,L'YVH-vi+}H @VQP6K1M% +0<mG>^p$@&*[Aj`t;%(HbvB%dp7'iG}\LlfSv(bg&V
2024-09-30 22:41:02 UTC	1390	IN	Data Raw: 26 72 ff a6 d3 5e f9 86 0a f5 f6 4a 0d 2e ec 6d b5 48 84 73 df fa 9c c9 43 12 56 b0 b9 39 ce 13 f4 ab d4 88 53 59 e5 d9 37 d4 be 36 0b f9 33 a0 76 09 eb ab 09 cd 10 7c 72 5d 2b ed f7 b4 31 2e ef 75 01 0f 35 32 4f 44 7d 71 ed 36 84 41 5b 88 1a 15 af 81 c0 a9 5a e0 7c 46 83 e1 3f 26 37 75 05 ab e4 cc 7f 63 ed c8 27 72 e4 4d 98 93 e2 c8 27 24 94 85 e5 51 34 93 33 cc 0f 94 32 69 a4 c6 87 76 33 15 69 85 ca e9 6d 85 cb 90 43 cf 34 c9 d0 c1 48 ed 0d a5 5c b8 b9 69 d1 0e 40 7d e5 db bd a6 35 8c ec b7 d5 02 86 9b 8b 8c 3e 51 17 9f 9f 44 5c 4d 1f 0c 55 e1 ae e3 5e 34 af ec 6a 70 f3 a0 7c 11 e4 c6 d3 8d 81 bf e8 97 46 39 6e ec e3 5c c3 ea b3 8a 99 94 ef b8 0c ce 93 35 87 ca 36 ac bd bc ca e1 1a ee e3 1b ce cb e5 66 cc ee 9d d9 87 1a 80 72 72 36 ac fd bc b6 fa 17 da Data Ascii: &r^J.mHsCV9SY763v\|r]+1.u52OD}q6A[Z\|F?&7uc'rM'$Q432iv3imC4H\i@}5>QD\MU^4jp\|F9n\56frr6
2024-09-30 22:41:02 UTC	1390	IN	Data Raw: e2 68 5b 1f 60 19 c1 bf fe ff 44 3d 20 4a f4 2c c1 ac 17 dc 9c 71 31 2a 10 60 43 14 d1 a6 92 fd 4e 83 1b 3c bf 2e 75 09 d8 85 dc af e2 a5 36 ae 1d b4 24 93 3d 15 c2 8a 61 5e b9 8d 64 bd 58 46 25 c3 c3 c2 b2 c3 75 0c d5 6f 61 75 32 97 e2 1c eb a9 2d 0d 01 ac c9 88 51 f5 f2 2e d0 f2 98 8a 39 b0 1e 52 01 e0 02 7d 2e cb b6 72 43 d0 70 da 9a 8c 54 c6 67 ff 72 5b 8d f3 70 d9 f3 22 01 4f df 2e 77 5f 2e 9f ef 79 f0 d8 99 05 d7 73 3e f1 24 84 af 9e c9 18 ba 91 d7 52 9d 53 2b af 35 bb 55 c2 bd be af 61 b9 14 df 99 93 52 3a 7b 33 6f 4d 6b 67 c5 e4 85 6c 92 50 01 69 b0 d1 a2 1d 56 a2 ef 54 31 d6 7c 56 d0 94 9c dd f0 43 94 5b 45 b3 05 6a a5 83 dd a8 72 d6 90 d4 40 24 8b 31 08 01 1a c6 d0 2d c4 a5 37 9d ba 8f c8 03 3c 92 e3 8e be cb a1 6d 94 aa f5 85 f7 69 03 64 a2 46 Data Ascii: h[`D= J,q1*`CN<.u6$=a^dXF%uoau2-Q.9R}.rCpTgr[p"O.w_.ys>$RS+5UaR:{3oMkglPiVT1\|VC[Ejr@$1-7<midF
2024-09-30 22:41:02 UTC	1390	IN	Data Raw: 8a f6 c0 75 a7 e1 14 7a 56 46 2f 0a ff 4c a0 4b 65 a2 7c 52 d0 06 58 1d d9 d2 a3 da 19 40 ae ea 01 58 b7 ae a2 c6 c4 b6 53 03 81 47 ab 00 2c 99 5f e4 dc 8f d6 1c 4a 6f 94 63 ec 15 8f c7 93 92 4d 29 ee 25 5c 85 4c a1 7c 45 56 e8 58 85 b7 10 23 f3 40 c1 09 1a 83 84 2c 77 9b 42 b3 00 3c 9c ae ba 83 a5 af 7c cc f9 44 c5 e0 2b 7c 60 f9 e0 87 da 49 fc b4 db 3f c1 47 0a 11 80 22 d2 36 94 99 e3 a3 0a 23 40 b9 ce 7b 59 fa 22 74 56 ee 8f 78 ca f1 23 5d b4 e1 15 20 cb c0 63 be 83 b1 8d e6 14 08 e5 b4 8b 81 50 d0 7c 87 f6 8e 32 0c 00 46 8b 22 b7 7f 0c 07 45 d1 72 ce 0f 0e fa 9d d3 6e f7 08 ad 7a d0 71 1c e3 26 a5 b0 71 e0 91 84 d2 de ff 19 81 80 c4 02 2d f8 1d 5b f0 7b 55 0b 06 d2 b5 fe fd 9e bf 37 f4 1d f9 08 00 06 32 e2 97 ff 7c 28 03 7d 01 8c 1f 10 c6 0f 6b 60 bc Data Ascii: uzVF/LKe\|RX@XSG,_JocM)%\L\|EVX#@,wB<\|D+\|`I?G"6#@{Y"tVx#] cP\|2F"Ernzq&q-[{U72\|(}k`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.7	49807	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	574	OUT	GET /components/p9HJ4M2Uz7U4/a7d29342348138d42728.woff2 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:02 UTC	895	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: application/octet-stream Content-Length: 11400 Connection: close Last-Modified: Thu, 12 Sep 2024 11:04:14 GMT ETag: "66e2caae-2c88" X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-a36252eea2780502349fb64d133a9940 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://sedo.com Access-Control-Allow-Max-Age: 86400 Access-Control-Allow-Max-Methods: GET Vary: Origin CF-Cache-Status: HIT Age: 1893 Accept-Ranges: bytes Set-Cookie: __cf_bm=ciGIoBFwH7X.wWZMbZvgZeAeOKNzH7ikG4vZhHchW6w-1727736062-1.0.1.1-i0YBTejTJhUvVIBRDmGXUAzG.DLWq_MeEaS2TG6GLDo01fWKL2GCAMoiCWyeeCTvD2IDcSx4uBf6HPfyOZwBmA; path=/; expires=Mon, 30-Sep-24 23:11:02 GMT; domain=.sedo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8cb7b7d4fb8a4245-EWR
2024-09-30 22:41:02 UTC	474	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 2c 88 00 0e 00 00 00 00 63 40 00 00 2c 2f 00 01 0c cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 40 1b b2 70 1c 81 60 06 60 00 83 66 11 08 0a f4 4c dc 66 01 36 02 24 03 87 44 0b 83 64 00 04 20 05 83 46 07 86 39 1b 80 54 05 dc 18 ba 61 e3 00 20 d8 77 52 51 54 70 46 c8 fe 3f 26 50 91 b1 76 f0 74 1f 8a 57 54 18 15 42 21 8e 75 bc 9b 6c 8a 16 9e c9 83 b6 f2 a1 6d 1c ff ae d7 75 de 97 9f e3 c7 b6 4e 5f 3d 8e 63 27 b7 fc 95 22 93 75 10 f5 ce e5 d8 f8 90 c5 0e 49 92 26 cf c7 cb d1 d7 b9 f5 3e d1 43 22 32 32 2a 53 04 86 13 21 25 94 09 bb 5d 43 34 67 4d 92 45 35 62 1b 51 22 8e 47 9c 08 09 51 c4 82 78 c1 2b f4 4b 05 68 1d a8 09 b4 57 da e3 7b d5 ab 98 9f 78 7b 57 f5 d3 fa d1 36 11 bf c3 ef 5e 68 ac 62 9a 66 a9 ae 84 Data Ascii: wOF2,c@,/@p``fLf6$Dd F9Ta wRQTpF?&PvtWTB!ulmuN_=c'"uI&>C"22*S!%]C4gME5bQ"GQx+KhW{x{W6^hbf
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 36 54 8c 19 42 80 ab eb 57 9f f8 6d d8 5b 9f f6 3a fc bd d2 ec 27 64 25 eb ca 54 86 61 10 11 91 f4 b8 42 97 b1 f9 c8 42 0c ca 0b ca 64 18 ff a6 02 98 c3 45 95 50 90 54 08 4a 4b 46 c8 e5 80 50 9b 8c d0 ac 05 c2 c4 64 84 49 ba 21 fd 0a 10 bf 78 60 16 11 3d e4 ee 7b da 3c 20 fa ac e3 3b 9b 01 0e 04 d0 9f 05 d8 9f 19 01 79 e6 c9 ed cd 20 fa 21 0f c8 dd 2d 20 48 a0 34 3c 7b 43 60 06 7f 61 cc 63 d4 64 86 0d 0e ba ec 8e 57 41 66 46 16 05 0e 37 32 08 d1 c2 24 c0 c2 93 92 f3 69 35 cf 02 23 c6 6c 72 52 18 2c 08 be 19 69 73 f2 a6 aa c5 ab 41 37 d2 60 ac b7 6d 97 28 68 b1 b3 bc c1 48 7b c6 7a d5 76 24 a1 11 b8 d1 96 4a e1 aa b1 d5 90 02 1c f0 08 e5 82 80 9c 0e 8d f4 87 cd 8d b6 eb 66 63 5b c5 83 73 9b db b3 1d 5f 10 6c fb f0 21 d8 03 2c 9b 09 a5 ce 99 4d 51 83 47 20 Data Ascii: 6TBWm[:'d%TaBBdEPTJKFPdI!x`={< ;y !- H4<{C`acdWAfF72$i5#lrR,isA7`m(hH{zv$Jfc[s_l!,MQG
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 11 db 2e 3e 05 57 05 aa 5a e3 15 99 a8 5b a3 99 16 6b b6 cc 88 ff f9 42 60 bf 51 38 d3 46 38 cb 18 9c 6d d3 a5 9d 03 01 b2 41 b0 10 a1 22 31 b1 84 61 e3 e0 0a 17 41 6d 47 4a f1 b7 65 94 68 31 62 f1 c5 11 88 97 20 11 51 12 60 69 58 38 04 00 cb 01 96 57 40 9c 0b 15 19 8c 82 2a 15 4d 1a 3a c6 6b 33 15 36 53 68 90 21 70 70 22 0f 34 66 94 21 61 47 e2 0d 3d c6 c6 48 72 19 aa 63 ab 26 55 cd 6d 30 c4 a8 80 fe c2 01 2b c0 be eb a9 2d 05 48 4e 46 40 92 81 c8 1d 12 c5 dd c9 01 36 25 65 22 bc 74 14 80 8d 30 dd 54 48 66 10 48 a4 38 3b 46 b8 c2 18 51 30 41 3c 8d e1 4d 63 52 d0 a8 64 14 c9 de 46 c1 1a 24 c3 41 08 9e c2 1a d2 a0 13 3b 1a 49 ed 58 70 04 f1 12 34 4e 0a 0d d6 cd 4e c4 d2 e4 10 5c 29 d8 78 30 1e df 61 13 64 49 13 42 d9 6c 6d 0e 31 30 89 04 26 93 42 3a 19 0d Data Ascii: .>WZ[kB`Q8F8mA"1aAmGJeh1b Q`iX8W@*M:k36Sh!pp"4f!aG=Hrc&Um0+-HNF@6%e"t0THfH8;FQ0A<McRdF$A;IXp4NN\)x0adIBlm10&B:
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 02 a5 55 0e a1 1b c8 24 87 8d 10 0e bf e4 76 a3 c6 31 be 68 b0 13 be ec ef c4 b9 dc cd f3 35 1f a0 c5 6b bd 8b 95 7c 9f ab f5 f5 6d 75 80 02 b7 a8 8c 6e 40 49 03 e9 00 cb ab 85 42 be 5e 2a 56 dc e0 27 fb 5a b5 88 ae 94 0b 04 29 e2 89 6f e2 4c 6e e7 f2 76 40 eb 4f 5b e8 86 13 6e b0 54 98 f3 44 b3 6d 80 04 ef ba 41 75 8b 60 54 15 3d 11 6f a9 50 81 7d d5 a7 e5 38 05 2f 5a 1c 06 31 68 0c 14 54 34 8d 4a 22 15 53 9a 9b 7c 2d 50 db 2b 32 a4 6c 03 b1 cb ac c7 ba c7 8e bf a4 6b bb 52 52 a8 ae 8d cf 46 36 a5 2c 8a 02 cc cf c6 f8 36 86 ca 61 93 8f 5f c1 bd 65 5b 74 6e 28 29 1d e2 48 98 c8 f6 50 47 c9 e9 47 7e 7d 16 e9 72 11 2a 0c 8f c7 1b b5 32 14 f1 72 0c b6 23 5b 9a a6 66 5e 34 2f c2 b3 e5 f8 a8 88 8c ea 31 4e b9 d2 a2 91 cb 40 b1 0a 28 83 bf a2 59 77 21 0d 3a ec Data Ascii: U$v1h5k\|mun@IB^V'Z)oLnv@O[nTDmAu`T=oP}8/Z1hT4J"S\|-P+2lkRRF6,6a_e[tn()HPGG~}r2r#[f^4/1N@(Yw!:
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 32 5f 23 c9 c6 f8 97 fb 8e 2c 0d d4 e9 ce b1 8c 98 2a a5 c4 dd 29 e4 72 10 5f 84 35 9c 6c ed ae e3 78 f9 dc 76 52 26 34 50 27 a7 ae 65 51 62 4d 87 22 e4 fd 71 2c 8e 03 4a 90 d2 f4 21 c0 bf 28 f8 81 f8 b5 d6 84 fd bd 7a 36 68 f7 28 4f 6a fc b1 c8 3e 9c 9d b1 0f 5e 4c 91 8d ab 1d 17 f4 14 cc b5 e3 cd a7 03 34 12 ad a0 5f d3 7b 01 f9 27 53 39 61 29 94 d3 5a 48 02 42 42 c5 c0 da 9a c6 58 5d 2b 1a c4 a9 99 f5 98 a7 d5 ac af 8d 5a 57 45 3e f1 cb 1e 64 b4 b7 65 5d d8 a8 d6 16 fa 3c f5 b8 69 6c ec 34 75 47 ba 18 d6 b1 61 67 e8 c9 ac c2 96 e1 90 53 2a 1e b7 30 dd 5e 2d 47 a7 79 9f 5a 29 5a 7e 87 f4 ca 15 76 74 4d 7e 08 15 aa b4 26 18 a9 f4 6a 2d 89 fc 84 7e da 9e c0 99 bd 6d e4 8f 03 61 5f 15 c5 21 77 eb 9f be 03 d2 f4 ac 90 a1 17 7d 47 c0 c2 d7 2b fc 4d fa 35 3b Data Ascii: 2_#,)r_5lxvR&4P'eQbM"q,J!(z6h(Oj>^L4_{'S9a)ZHBBX]+ZWE>de]<il4uGagS0^-GyZ)Z~vtM~&j-~ma_!w}G+M5;
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 8b a2 d3 6e 09 67 9d 73 27 f1 7d 20 ef 9c eb 24 c2 1f 69 67 72 84 26 aa 48 8d 29 4c 53 52 02 e9 3a 2b 95 4b 35 93 3e a0 5a b4 79 8d ef 1f 60 48 5c 75 a2 89 cf 8e d2 bc 08 a3 66 1a 35 80 ff 3a 9b 51 aa d2 78 28 42 91 9e 3a b3 cf f5 90 48 e9 6e 4b d6 73 b9 49 ba f2 6e 0a 6d be db 10 e9 a4 f0 44 6e 4a 96 9a 5a 0a 04 af 33 eb db 2e 5d 63 a5 71 b9 37 df a2 5c 87 dc e7 f5 75 a8 4b 16 76 4a 71 53 af a7 3b df 10 50 53 77 7c f3 e9 e9 4c 12 91 eb 4c d2 31 fe 9f 9b 45 2f cd d2 d8 a9 5c 81 99 1c 81 75 cb f0 14 33 94 eb 2b 32 d2 36 ac 3b f3 a7 9d 28 11 7b a8 4a 35 ad c4 5d 6e 55 e6 a6 e3 ee f9 66 cb 00 af 6f 33 41 5f 6a af d5 d5 8e ba 46 b5 4a 0d 64 b7 ea bd 39 e8 d9 c1 a0 33 8f 65 e1 6b 69 d3 ba dd 09 54 ac c8 13 8d fc eb fa 49 26 32 d9 1f 0c e1 66 12 c9 44 1e d4 c1 Data Ascii: ngs'} $igr&H)LSR:+K5>Zy`H\uf5:Qx(B:HnKsInmDnJZ3.]cq7\uKvJqS;PSw\|LL1E/\u3+26;({J5]nUfo3A_jFJd93ekiTI&2fD
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 51 d5 36 8b df 86 79 8c 8e ba 41 a3 b7 8b 94 17 3d f3 80 3e a8 f4 4d 15 b5 cd 6b 53 92 37 6f b5 33 6c 96 7e 76 9f ae 2f 9a 1f eb aa 9f 1d a0 65 1b 3e 4b 78 0b 4f fd ed fc db fc 4a 7a ca 33 1b 0f 1f 76 b3 74 e0 56 62 32 f1 22 85 b1 a7 47 c1 b1 d2 27 e7 15 b3 33 f8 66 9c 83 a0 65 53 0c d9 0f a6 a5 25 db e8 14 ff a4 09 d4 6c 9d 29 03 5e 3a 62 1e 7d e3 2b 79 f0 b3 a0 ec 91 3d 41 9d da 55 99 fc c7 18 f8 6f 76 a0 71 f3 17 5f 34 8e 05 ca 1d 9d bb d9 5c a6 21 5c 85 d5 71 55 46 63 5c 65 f4 15 02 e1 66 b4 fc 3f c9 38 5f df 03 72 75 8b 7e ec 94 ef 53 27 af 55 65 f4 e9 eb 40 ab c9 d4 d2 61 ad 60 b9 58 a9 99 86 6c b6 8e 77 ec c5 e4 02 99 aa a0 ba c6 cb 67 16 ea cb 4b eb e6 2e ec c0 1e 30 ad 01 ba de 2b 36 7e 7a 46 8e 52 41 c8 7d 6d 8f 4b 57 49 f5 71 db f1 58 e1 46 29 Data Ascii: Q6yA=>MkS7o3l~v/e>KxOJz3vtVb2"G'3feS%l)^:b}+y=AUovq_4\!\qUFc\ef?8_ru~S'Ue@a`XlwgK.0+6~zFRA}mKWIqXF)
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: c8 c3 24 38 3d 92 7a cb 54 7e 69 a1 a2 3f c4 27 9a 44 4a ba 34 42 18 f9 f1 db 44 d2 4b 44 04 68 bf e4 4c f7 c7 2d f6 66 14 27 ef 95 e7 be 7e 74 95 c8 e4 65 bc 6e 93 5e 8c b9 24 47 5f ea d3 8d 14 bf 40 71 8b fb e8 16 ec 8b d0 3b 1b ab 2a 9d 0d 7a 5d 5e 43 65 55 5e a3 56 c2 14 e6 a6 51 a1 8d c9 72 74 fe ac c9 05 9b a5 5e 6e d0 4e a5 6c a6 1a c8 ce 1b d4 3f f4 24 33 27 d3 b0 43 21 ae 80 96 c3 ce 34 aa 94 04 77 95 e9 e5 c6 d4 48 60 2f c7 91 c8 f0 77 54 ea 9b 74 8e b4 96 44 08 c0 c9 dd a8 c0 9a 93 1c ec 15 9c 02 4b 2b bd 19 02 b3 f0 85 a5 42 82 28 87 5b 0e 7e 5b 6a 44 35 41 62 67 56 e0 0e 3f a3 ce 3e c2 3b 29 a3 1f cc af 32 c0 2c 04 df 9d 22 2f 55 d4 86 c5 ac a4 e1 aa b2 ea 07 f5 38 56 96 c2 a0 3e 2d a9 82 c4 b8 13 ac 31 af 2d f4 0c 01 f7 13 d8 83 20 d7 ac ea Data Ascii: $8=zT~i?'DJ4BDKDhL-f'~ten^$G_@q;*z]^CeU^VQrt^nNl?$3'C!4wH`/wTtDK+B([~[jD5AbgV?>;)2,"/U8V>-1-
2024-09-30 22:41:02 UTC	1343	IN	Data Raw: 02 f2 f9 81 a0 06 b8 f9 9d 27 9f c1 65 3c 33 d9 57 17 21 6c 15 b6 25 ff 44 d0 91 ec c8 1b 89 27 e6 62 5d 44 f1 36 91 80 47 29 46 01 3f 43 b6 a5 6a ff a3 f0 3b 90 3a 55 ea 02 f2 41 6d 0d 65 af 62 aa 58 d5 c2 6d ac e0 6a 0d 40 af ba 41 0b 73 4e 46 a7 6d 34 9d fd f9 8d b0 0b 9d 95 ce ce 6c 4f 7e ed 94 9e 2d 69 ac fd 54 9b 4b db ea 10 27 e9 12 27 fc 4f 02 91 cc a7 cd 84 ec a5 00 d3 ba e7 f8 2d 31 59 96 26 28 fb 33 9d 3f fb 3d 1b 4a 6c 71 45 3d 2c 68 8f d2 54 68 dc a0 39 0f 95 33 82 cc ba e5 41 52 ee c0 26 6d e7 7d ad 41 93 c4 48 e6 d4 27 d4 73 e3 2d 12 f5 a1 33 d5 89 5c cb f7 d6 55 76 9c 75 d1 55 40 0f 18 00 43 17 bf af 74 59 55 5b cd 2e 5b 96 d5 36 4b aa 20 73 6b 91 9d 45 4a 53 fd e4 f8 37 79 67 15 40 d1 01 ee ab dd 10 80 cc 79 f5 9e df 3e dc a3 98 ac 3f 0a Data Ascii: 'e<3W!l%D'b]D6G)F?Cj;:UAmebXmj@AsNFm4lO~-iTK''O-1Y&(3?=JlqE=,hTh93AR&m}AH's-3\UvuU@CtYU[.[6K skEJS7yg@y>?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.7	49806	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	574	OUT	GET /components/p9HJ4M2Uz7U4/98a8d93f852421263258.woff2 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:02 UTC	895	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: application/octet-stream Content-Length: 10672 Connection: close Last-Modified: Thu, 12 Sep 2024 11:04:14 GMT ETag: "66e2caae-29b0" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-915ffc0083a5100d09f31621d8cde30a X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://sedo.com Access-Control-Allow-Max-Age: 86400 Access-Control-Allow-Max-Methods: GET Vary: Origin CF-Cache-Status: HIT Age: 4048 Accept-Ranges: bytes Set-Cookie: __cf_bm=6uGeo4Z_TXvBJMxC0JfBcTgxj33KGGN6j8CmHqcVJ8k-1727736062-1.0.1.1-UIlczW.Le4BHn8QquyyzJXIakd1tvp2XJUbJIWzwIddxuK5vNQG0DEnEOJ6SD5AfyCO8X9woYzuYxleHwhQFMg; path=/; expires=Mon, 30-Sep-24 23:11:02 GMT; domain=.sedo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8cb7b7d4ff804262-EWR
2024-09-30 22:41:02 UTC	474	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 29 b0 00 0e 00 00 00 00 61 28 00 00 29 59 00 01 0c cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 40 1b b0 0c 1c 81 60 06 60 00 83 66 11 08 0a f3 14 db 6f 01 36 02 24 03 87 44 0b 83 64 00 04 20 05 83 4a 07 86 39 1b a9 52 15 e3 98 a5 c0 c6 01 60 8f dd 5e 51 04 1b 07 14 04 b3 1d 19 a8 0b 82 d2 d6 ec ff af 49 87 dc d6 b3 55 1c 40 91 ed d0 50 b5 a7 c9 a8 73 9a fa 82 ce ab d1 4d 85 c2 50 c1 0a 3d 86 20 12 3a 12 f7 d2 a6 1d 28 e1 4e f0 61 37 3f 2c bc fa 02 85 8f c2 5a 31 94 33 7f 51 49 5a 2e e5 35 14 bf a4 9c 4f 47 3b 24 49 82 c9 c3 f7 63 df ce bd 2b 2e 88 6b c2 d3 46 bc 11 0a 15 1a 43 29 84 48 55 4f 3b 24 d1 88 37 fe 1b 9e df 66 0f f8 46 a1 28 92 02 9f 0a 01 41 b0 51 4a 01 9d 32 14 8c 64 56 ce 9a b9 b5 d3 25 57 Data Ascii: wOF2)a()Y@``fo6$Dd J9R`^QIU@PsMP= :(Na7?,Z13QIZ.5OG;$Ic+.kFC)HUO;$7fF(AQJ2dV%W
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 0e 67 58 84 d4 3e 65 cb b2 01 0f 10 d2 e3 f1 b2 49 ca 3e 3d e1 46 50 ce 09 a4 1a 48 37 90 29 a4 e4 cb 21 ad d4 a9 34 42 4a 11 e5 46 b9 aa a4 b4 ba d5 b1 f7 35 d9 96 4c 63 c6 ac be cc 19 c6 3d 3f ed e7 2a 24 2a a1 12 3b ad fc bd 93 d9 4d ad 01 79 24 b1 27 77 33 45 25 14 88 8d d4 c9 85 50 81 f8 f6 aa b1 8f a4 4b 2e 60 84 1a 96 19 9b 38 a8 8c 92 6b ed 2b 73 6f 92 d9 dc 7d c7 ce 75 ec fb 25 12 82 48 10 91 20 21 ed 3e 7a 0c b7 f4 cb a8 60 41 2c 80 71 d0 ef d4 02 d0 2c fa 25 77 90 30 08 aa bd 10 21 59 0a 84 52 21 42 8d 5a 08 2d 42 84 56 6d 90 6e 03 44 df 80 46 52 3a c8 bd ef 49 69 00 7d f9 7b 63 0d 20 81 00 ca 2f 28 e7 b5 19 02 f2 d2 8f 7a 0c f4 7d 04 08 38 ee db 47 02 92 67 90 20 b0 d0 3d 69 a1 51 a4 d9 9f 36 da e3 a4 6b 1e 7b e9 ef 00 a2 56 3d 7d 3e 3c 04 20 Data Ascii: gX>eI>=FPH7)!4BJF5Lc=?$;My$'w3E%PK.`8k+so}u%H !>z`A,q,%w0!YR!BZ-BVmnDFR:Ii}{c /(z}8Gg =iQ6k{V=}><
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 62 8b 79 33 4a e1 cd 2c 15 52 9a 7a 2c 51 d2 e5 f2 91 67 1c 5f 85 4a 08 95 2a c3 56 ae 96 af f1 1a f9 6b d2 8c fe e5 7b 31 b4 2e 33 b9 eb d6 83 6f 36 90 60 0e 0c 32 57 48 34 cf 7c 14 0e 48 f5 1b 74 f5 3b a4 fa 03 ba 5a 00 59 7a 21 cf 42 c8 b2 48 c8 b3 d8 32 4c cb 61 a0 d5 50 a0 0f 0a ac 23 02 7b 73 78 86 b5 09 18 60 00 e2 7c a4 c2 9f 01 0e 68 81 e5 8b d7 0b b5 eb 53 0f a3 be 5a d2 60 bc 0f 4b 22 4c 06 10 c4 63 c3 20 b9 3c af 88 e2 fa 61 83 b8 71 bf fc 55 6a 07 b2 fb 83 d4 16 56 81 f0 6a 20 a3 72 db 90 5c 91 66 d0 1d 82 9c 05 26 71 40 9b e8 92 b8 a3 d2 bd b5 42 62 fe c8 41 42 8e 16 85 09 15 6f ce 74 2e 40 5e 5f 06 e0 c8 e3 62 c6 1c 59 30 90 4d ee 28 14 84 42 22 21 18 a8 23 54 e2 63 ba eb 4d a3 07 80 ca 45 be bf ae 00 54 cd 87 79 06 88 9b 00 f1 7e 7f 02 c6 Data Ascii: by3J,Rz,Qg_J*Vk{1.3o6`2WH4\|Ht;ZYz!BH2LaP#{sx`\|hSZ`K"Lc <aqUjVj r\f&q@BbABot.@^_bY0M(B"!#TcMETy~
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: c2 f3 ec 50 81 cc 63 7f 14 0e e9 20 17 83 80 b5 b0 d4 0f 44 63 71 99 0a f4 d1 7e 25 29 ab e4 95 09 93 3a 1b 9f ba 92 85 fd ad 98 dc fe 8d 1e 74 2b c7 1d 55 4f 82 fd ef 3b a4 d4 89 fc f4 84 66 71 56 6f 8c c9 63 8d bf 07 b0 70 90 9b 1a 57 cd 14 77 9d fc 49 04 bb 4f 2c 02 15 66 1e e9 31 73 52 9a ad 27 9c b8 97 88 3b 25 09 02 ae 50 61 d8 f6 d7 2a ff 0b c8 8a 9c 0b d6 9c d3 84 3a 82 aa 07 14 04 10 2b db 02 06 e2 20 aa 5b 43 cf ac 0f 2c 04 fc f8 1b b4 2a a5 b0 47 c5 1f 58 f7 0a 1d 49 e9 de 93 47 4f 51 c6 50 9c 98 6b cb 22 07 36 70 92 f5 87 4b 83 46 d0 77 e4 2a 0f 1b 03 1a fc 9a 23 88 fb dd e2 4c b3 81 e3 85 b2 ef 77 cd cc 73 72 52 34 cf 0c fa ab e5 54 32 78 a3 dd 41 e0 bd 88 34 17 b2 45 fd 1d 69 5f 56 a1 a7 a7 7f c1 9b 03 ef 0c f3 a4 a4 c7 da c1 eb 49 df 54 b1 Data Ascii: Pc Dcq~%):t+UO;fqVocpWwIO,f1sR';%Pa:+ [C,GXIGOQPk"6pKFw*#LwsrR4T2xA4Ei_VIT
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: b2 54 11 3d 60 58 55 1d 18 1c b0 17 61 4d 73 7b 37 ad 37 d6 12 70 16 cb 85 fb aa e9 b7 cb 08 ad 62 b8 b0 59 2d 87 0b ba 95 71 31 b4 fa d1 5a 87 35 ad 2d cf c8 1d 1c 90 d6 06 44 1f f4 fc 3f 87 da e5 5e fc 78 0a 04 2b 90 81 88 bd 9e 8c 16 7f a8 52 a8 b5 29 67 62 1b d8 09 0d 72 99 a5 57 e4 a6 71 a9 6a 4c be 4a 3e 94 8e 3f 46 a1 57 d6 03 f1 8c c3 39 71 45 1d dc a1 b6 dd 30 3f 1a e5 43 c1 c4 3f 78 7f f2 8e a4 8e 5d 6f 36 98 0f cd 30 6f 7a 99 f9 90 99 a9 57 1d cb cd 0f 68 09 a0 54 90 83 76 1e c2 57 6f 85 56 e1 aa 0e 39 17 4c df 45 eb d9 7a a2 67 98 57 fe 2e 90 d0 f3 5a 9e 89 56 33 6b a4 81 fb d6 cd dd 05 e9 7c 74 06 b5 8c 67 d0 89 73 03 43 7f 3e eb 11 34 51 a9 ad 82 c8 0e bd 4b 91 89 e5 2b 8f 9f 07 84 b1 16 f9 c4 74 5b 7d 70 ac aa 48 c6 c8 2d 6f bc 01 53 8c b5 Data Ascii: T=`XUaMs{77pbY-q1Z5-D?^x+R)gbrWqjLJ>?FW9qE0?C?x]o60ozWhTvWoV9LEzgW.ZV3k\|tgsC>4QK+t[}pH-oS
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: a0 72 72 07 ba 79 76 9d 26 93 21 95 66 f0 d3 e6 db 55 2a fe 2d c8 00 99 3e 3c fb 40 4c 04 ac e1 72 e1 4e 55 0f 0e f0 8c 3d cb d9 d7 75 f1 bd 7a 1a 07 24 23 49 b9 91 5c e1 85 55 18 97 f1 00 c9 e9 f4 8f 00 ef fc 10 74 b9 ab cf 39 df 25 be e4 35 f5 47 ae e2 33 ed 65 85 b6 27 89 d9 f8 c1 3e f2 1f 57 a6 63 c8 7d 54 9c 13 e4 ae d1 86 28 c9 35 be 9e 3f af 90 b9 19 a7 e5 35 34 f6 b9 08 03 4e a4 ca e0 b9 27 16 af 51 e0 45 41 9e ef 96 90 38 e9 37 a1 f8 38 33 0f e4 a4 10 42 a5 15 ec 5a 90 52 ad 99 9c e8 12 30 65 de d4 fa ae fa 4d 02 15 c1 bb 68 2a b1 5d d1 2e 08 d1 05 9d c0 9a c4 40 31 2a 86 6e 3e 71 d3 38 3f cf f1 52 43 57 0d 7c 39 df 99 86 31 49 80 d7 e8 15 c5 2d 8c 09 63 86 8c 54 49 ed cb a8 6f d9 e8 49 d0 33 ba 91 7d d9 ea 66 b2 41 36 ef a4 69 c1 97 7f 97 5c 9e Data Ascii: rryv&!fU-><@LrNU=uz$#I\Ut9%5G3e'>Wc}T(5?54N'QEA8783BZR0eMh].@1*n>q8?RCW\|91I-cTIoI3}fA6i\
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 92 63 39 70 dc 25 2b 29 54 6a 21 5c a0 01 84 7d 6e 86 f7 5c 59 d7 f8 dd 73 1c 41 a8 db 73 7c 7d e3 d3 6c 51 bb c8 74 0f 04 8f df 11 1d c7 76 e3 0e 05 0b 76 88 c2 23 c6 9a 32 0b 27 d9 49 a0 d0 c3 e5 0f a7 ba 12 3e b0 4e d8 7b e9 29 40 05 c6 7e 97 bd a3 29 d7 9d ec cb c9 7e 64 57 3c 29 2c 24 d7 ca cf 97 47 08 13 03 7a 68 1a 09 35 ef 85 f6 ba 50 30 50 ee 9e fe d7 2e 44 a6 dd 20 91 23 29 f8 49 7f dc f4 ab 39 e0 9f f8 f9 7b 30 ec c6 22 73 04 9f 38 8a d0 24 7d 62 62 7d 0a 1b 18 67 9f 9a 29 e4 70 cb 8c d9 97 2b ff da c7 2e 83 9d 6f 4e 0a d0 a3 2f 70 47 7c 6f f9 0e 84 f2 ee aa 6e 99 ef e9 aa d3 20 d3 40 e5 d8 74 34 9a ce c6 a1 36 dd 01 2f e4 79 77 f3 c0 a9 1d aa 12 dd fd e9 d3 75 f7 54 a5 95 42 85 5d 72 b5 ac cc 8e 51 d8 cb 33 01 f9 cc c7 98 aa 54 77 ef 92 91 f7 Data Ascii: c9p%+)Tj!\}n\YsAs\|}lQtvv#2'I>N{)@~)~dW<),$Gzh5P0P.D #)I9{0"s8$}bb}g)p+.oN/pG\|on @t46/ywuTB]rQ3Tw
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: e8 7c 00 7d c6 48 cb 08 f0 1d ea d9 9d 64 5a 1a db 06 3e eb b9 29 1c 4e 0a 77 dc 54 4c 23 13 9e 1f f8 a2 02 63 33 6e ee 98 b3 2a 64 66 30 64 a4 aa 72 4e ef 2c c1 97 f9 83 d0 25 fa 38 6c 65 c7 4a 67 b5 74 6c 0e 79 49 a1 d2 b2 ee 25 f3 e7 b0 ab 85 33 21 23 55 0b 30 07 10 63 66 a7 48 b8 b4 1b 59 6c 2c 36 f8 55 ba 36 58 0d 3e 91 c5 41 cb b3 44 1d 83 39 7f dd b6 f0 8f 4c f7 1e c7 51 d1 d3 fb 3d 32 db 9c 60 cd cd be f4 45 1d c0 f3 49 f8 e0 98 f6 6e c0 8c e9 e8 d7 f5 01 f9 fe ee 9b 42 83 40 7b b3 3b 7f 51 bd c4 08 99 4d d6 83 1d fb f3 db fb 97 6c ea 17 e8 0b 0d c4 b8 27 c5 e8 f8 58 d1 83 0e 2f ef 4f 6e 63 f0 1c cf f1 20 76 ff 1d 0e 89 4e 48 54 eb 53 64 bd 30 7a db 13 33 98 bf 1b ae 82 41 a9 9c e9 a4 d3 9d 4c e7 dd 5c 9c 23 50 ba 33 da 8c a3 54 47 48 a5 96 2a 7d Data Ascii: \|}HdZ>)NwTL#c3ndf0drN,%8leJgtlyI%3!#U0cfHYl,6U6X>AD9LQ=2`EInB@{;QMl'X/Onc vNHTSd0z3AL\#P3TGH}
2024-09-30 22:41:02 UTC	615	IN	Data Raw: 50 d5 1e 00 41 00 1c 33 24 f4 bd 1a 36 44 31 08 f7 42 f0 86 2e a6 9a bc a1 2b 4e c8 ae a0 19 e2 49 55 ab 49 bd 42 c5 60 e9 89 5d 8d 06 30 b3 7a b5 60 1a 55 ec 0a 55 b2 14 66 a9 a6 cb ae d5 0b 21 26 a5 20 15 45 4d 47 43 df e4 65 d2 8e d4 a3 f2 c1 2a 9a a4 1c 33 9b e2 c2 6e 50 ae f6 ee c8 70 ce 6b 62 96 0a 06 39 29 2e 2b cd 46 85 3b 47 37 1f 9b 62 61 c7 e9 d5 ec 2a 15 c3 b8 44 3b ab 94 1b 47 06 51 dc 92 88 0c 47 00 5f 5c 56 24 1b d5 89 5c f6 47 26 4c ed 8b d9 15 a9 35 4e 31 31 03 bf 6a 12 8d 5a d5 29 6e 48 95 58 c0 4e c4 a9 b8 5a 22 48 f1 24 cb ce ff 32 09 86 ec 9f 40 24 02 05 50 4b 46 d3 39 b8 78 f8 4b 10 e7 26 12 4c 4c 42 2a 84 8c 7c f1 e7 e7 1b 26 5c 84 48 51 a2 c5 d0 d1 8b 97 b0 5c 69 9f c9 52 b0 f5 fe b5 97 2e 43 a6 2c d9 72 e4 da ec 8c 53 b6 18 a7 90 Data Ascii: PA3$6D1B.+NIUIB`]0z`UUf!& EMGCe3nPpkb9).+F;G7baD;GQG_\V$\G&L5N11jZ)nHXNZ"H$2@$PKF9xK&LLB*\|&\HQ\iR.C,rS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.7	49808	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	574	OUT	GET /components/p9HJ4M2Uz7U4/2febe6dbe65f64ce36be.woff2 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:02 UTC	895	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: application/octet-stream Content-Length: 27332 Connection: close Last-Modified: Thu, 12 Sep 2024 11:04:14 GMT ETag: "66e2caae-6ac4" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-7a1f8ed01a38ed6ad2b0a38cd9f87e33 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://sedo.com Access-Control-Allow-Max-Age: 86400 Access-Control-Allow-Max-Methods: GET Vary: Origin CF-Cache-Status: HIT Age: 2874 Accept-Ranges: bytes Set-Cookie: __cf_bm=Hm8JEbnn5SUOBlEM7cXLYAx.aR522..EBz4IGCLdWxY-1727736062-1.0.1.1-pJ93mc96bJELaqFr394NVHiKhhG5G9_m_KzPoEMfVU_hKJ5cEKLjelEuz.9vFWqISw4KDezcfqO9KtnQepMkyw; path=/; expires=Mon, 30-Sep-24 23:11:02 GMT; domain=.sedo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8cb7b7d51d1172aa-EWR
2024-09-30 22:41:02 UTC	474	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6a c4 00 14 00 00 00 01 60 00 00 00 6a 51 00 02 05 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 81 08 3f 46 46 54 4d 1c 1a 28 1b 82 e3 16 1c 86 0a 06 60 00 83 52 08 4c 09 84 65 11 08 0a 82 a5 60 82 86 7b 01 36 02 24 03 87 28 0b 83 56 00 04 20 05 8e 3e 07 85 64 0c 82 4c 3f 77 65 62 66 06 5b 67 4d 71 00 6f ba 49 2b b7 83 f3 b3 ad cf 4c 95 28 b7 5d 05 b7 63 cb 4d 3f 6f 64 46 b2 d2 a8 f7 ec ff ff 9c a4 32 86 26 55 d3 96 02 a0 9b fb 21 37 9c 64 09 42 04 05 02 12 d2 e5 d4 22 04 0f a4 27 79 75 8c a8 9c be 1c 73 2c 43 a5 b6 8b 33 7b 87 28 d0 ad db d1 b9 85 ac a8 1e d3 39 65 fb b0 1e 59 1f 2c 3f 2b 75 54 24 ac e9 54 df b7 3d 69 ea 97 96 8b c2 ab d5 b1 3f 54 c6 be 29 29 e7 36 eb d0 2b a4 b5 dc 4c ec cb 74 6c cb 21 Data Ascii: wOF2j`jQ?FFTM(`RLe`{6$(V >dL?webf[gMqoI+L(]cM?odF2&U!7dB"'yus,C3{(9eY,?+uT$T=i?T))6+Ltl!
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: c3 0a eb 6b ba 94 57 85 9a 3e 6d 71 fe 0d 0e 20 bc b4 00 fe 89 36 f7 a0 c1 50 e3 39 fa ea 18 dc 96 f9 5f af 66 f9 5e f2 99 eb 5f f9 ba f6 59 ba af f8 5a f7 95 96 56 75 ad 38 dd d7 94 6e cc e2 bb 9e 22 84 30 4e 9b 6b 46 18 31 a9 42 2c 62 58 06 13 c4 63 11 c3 60 1e 62 11 bc b4 41 84 c1 57 ee 9d d6 eb b1 64 a9 db 33 72 d9 72 a5 fd 7e 77 7f 2e 23 a4 94 8a 43 68 00 0c a0 61 81 2c 79 0b 58 98 11 c9 22 9e 83 cf 4c a8 be de f5 99 ff fe 00 f6 ef b4 fc 67 c9 6b 69 55 6c 59 5b 2b 9a b4 a6 74 80 48 00 d7 be 30 1a 40 86 85 9e ff ea 8f 7d 1f ab 5a 91 5b 8a bf 3e 4c b4 45 2d bb d8 4e 9a b0 31 8c 64 3f 88 4e ba fa 17 df 7d fa 33 61 9a ed bf 82 c6 a4 81 86 86 f6 67 f2 6d 44 d7 fe 9c 4b 26 9e 44 a6 69 bc 13 24 17 65 1a 5d 2d fc f7 d9 2a 3f 6b b0 67 b8 b2 01 87 b0 77 46 bb Data Ascii: kW>mq 6P9_f^_YZVu8n"0NkF1B,bXc`bAWd3rr~w.#Cha,yX"LgkiUlY[+tH0@}Z[>LE-N1d?N}3agmDK&Di$e]-*?kgwF
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 3d dd fc 62 ba df b3 c6 38 ec c5 16 6d 7f e4 ce fe 6f 9b be 36 4c 47 67 cc 4d f8 6d bc 8c e9 e0 86 85 7a 6c 0e 13 c6 9c 3a 6b cf 38 ca ee 4e b9 6a 2c 33 fe 8c 4e dd ba 30 90 29 fd 5c eb c5 39 d3 6e 95 53 ee 17 48 9c 0e 04 9c ab 9c 73 ae 48 5e 1b d5 d7 03 d6 57 82 4c 5d 37 16 83 6a 26 72 a6 dd 2a 57 22 7c e0 ca 12 7b 0d 67 00 5e 57 25 39 e5 60 5f c7 97 4a 4d f8 33 6c ba fa fe d3 c6 39 54 e8 ea 1f 55 f5 97 e7 e9 ea 49 1c df 00 9c 85 60 34 55 e0 7f b6 fa 24 bb 2f 66 fe 48 fd 39 a8 d7 06 0e b1 9b 21 9a 2b 81 a0 76 49 2a 19 f3 d1 df d9 e9 a9 45 12 92 d3 96 9c 63 c4 b2 62 d7 92 ae 0f 05 98 4c 05 e6 38 1b a2 ad b3 66 50 2b a6 59 fe e7 40 a8 24 cb 66 0e e3 9d 92 29 7d 6b e5 47 39 46 25 0c 49 66 0e fc 28 31 3f 92 38 67 ca a2 36 83 09 8e f6 83 91 40 4b 03 3c 4b b0 Data Ascii: =b8mo6LGgMmzl:k8Nj,3N0)\9nSHsH^WL]7j&rW"\|{g^W%9`_JM3l9TUI`4U$/fH9!+vIEcbL8fP+Y@$f)}kG9F%If(1?8g6@K<K
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 32 41 34 64 52 50 79 7f 66 11 14 0a 3a 8d d8 2c 72 c7 f6 2c 05 f3 66 61 ca 69 ae d5 a1 85 2f ba ec 4f 96 90 9a 6f 0e ab 00 02 36 05 52 c0 2c d9 81 b4 8d 6f 0a 83 66 f1 fa 67 e8 a6 36 b3 b5 ef d7 f0 4c 82 ce 9c 92 56 98 03 5e b6 0e 7d 0d 66 ec 3d 7e 30 f8 37 ff d6 d1 91 69 ee 1f 5a 77 ed a3 31 20 fd c1 06 a9 6f 27 68 bb db 45 f6 61 76 ff 67 bc 4e f8 78 ea c9 b5 65 a1 bc da 43 cf 19 b3 2f 95 22 2e 60 19 ab 1d 82 84 f1 f4 50 3f 59 be 35 c9 9b 60 c4 c5 76 a0 d3 05 11 41 58 50 20 c5 6a 35 ed 77 67 07 20 51 21 be 2a 9d 2d 6e 78 82 1c 03 12 4f fb 51 a1 92 7f e7 0e 64 4f 9e 09 8c 72 14 e6 d1 2a 18 f5 da 64 54 74 65 ea 30 03 49 ae fe b0 ac ed ba 15 61 a5 16 b5 e8 89 b3 0a 34 91 35 be e8 03 25 c1 1a 70 32 9c cc 7d 3d af 18 ad 35 a7 f6 64 14 e1 46 66 c8 76 04 f1 d0 Data Ascii: 2A4dRPyf:,r,fai/Oo6R,ofg6LV^}f=~07iZw1 o'hEavgNxeC/".`P?Y5`vAXP j5wg Q!-nxOQdOrdTte0Ia45%p2}=5dFfv
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 72 a0 bd e7 02 af c1 c8 54 d5 a6 46 48 09 45 15 2a 2f 20 15 22 3b 7f 23 49 73 fd 24 77 ba 62 05 22 70 0e 01 09 b1 fe 9c 88 59 20 86 3b b0 1f d0 67 d3 86 bc 66 6c 61 64 08 d2 8f 98 11 7b 6a 9f 1d f0 ae 20 71 b9 11 6b 10 44 0c 18 49 47 86 0b 84 66 3e 2e 8a d5 50 3e 35 10 44 99 a8 44 d4 5f 1f 97 b2 05 3a 72 6c 5a a7 e8 ec fb c8 34 e0 c2 c7 25 b0 b7 ef 95 b8 bd d8 6c 55 d6 f6 24 e3 91 d0 f6 55 1a 96 99 a2 b8 a5 fc 16 40 75 2a b4 d2 b0 31 50 e1 69 2b 8a 95 23 51 68 90 ab da 95 8a 77 61 e7 99 ac b9 48 05 bd 07 a3 fc 6b 05 3a ab f2 6c 92 64 24 0c 80 7a 2a 2b d4 09 41 be 8f 46 14 98 12 fa 1d 28 b8 cb 67 0d 24 af 56 ec d2 5b 34 16 15 93 59 1b 07 50 53 1a d1 ec 8e 8e 5d 9e d9 84 d4 ad 13 99 e6 dc 6a 73 f3 00 54 13 07 e4 c5 6e 7c 37 8f aa 44 1e 2d 0b 82 6c 6c 95 2c Data Ascii: rTFHE/ ";#Is$wb"pY ;gflad{j qkDIGf>.P>5DD_:rlZ4%lU$U@u1Pi+#QhwaHk:ld$z*+AF(g$V[4YPS]jsTn\|7D-ll,
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 2b 4a bd 04 ea 1e 86 61 22 2a fb f0 14 1d 59 a3 29 4f 42 67 5a f8 c7 10 6c 7f 9a b2 aa 2f 1f ba 96 d8 48 95 6b f1 54 58 ec 90 14 23 a3 b6 af 8c 8b e6 d1 b2 8d c2 d3 db 32 0b a5 38 55 68 8e 27 ef 77 2c 45 b8 ef 26 ae e7 8e 3f 93 28 8c 97 b6 83 3a a6 44 a7 ba 12 af 96 84 9d 97 ae e1 2e ae b1 59 b6 84 6f 1b 68 cd d9 0b 88 25 2a 85 f4 30 0a a5 6c 96 d4 70 73 ce 03 d4 1c 33 a5 d3 d9 cf 99 2d a1 93 32 ed 98 a5 e4 bd 90 24 82 6f a6 37 58 6f a7 68 46 6c 03 e7 73 d0 e0 59 31 d3 62 bd a7 c4 a5 1d e5 fd e4 78 b1 d2 3c 2b 6a 46 74 dc 5b e3 8b 50 1a 63 6e 3b 91 a8 01 fe 10 c3 79 7e 42 9b 88 62 05 31 bf ad 5f 30 0b 27 f2 f5 67 7f 53 28 48 2e e5 3d 09 d5 4c c5 71 b6 4f 21 63 ac 2d 78 3d 2d 39 1c 65 9d a2 7a c2 08 59 50 fc 68 6b 50 c2 fe d8 6c cc 4d 2c 6b 3b ff bc 36 8a Data Ascii: +Ja"Y)OBgZl/HkTX#28Uh'w,E&?(:D.Yoh%0lps3-2$o7XohFlsY1bx<+jFt[Pcn;y~Bb1_0'gS(H.=LqO!c-x=-9ezYPhkPlM,k;6
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: f6 24 1f 4a 8c b5 d4 16 89 ae 30 51 c4 2c d4 6a ad dc b0 2b 11 e0 1b 7b ea 8b 50 00 0f 74 85 2b c3 f4 ac ad e1 d5 fb be f6 c0 cf 6c 97 8e ae 63 a1 f9 fd 2a d5 d3 1f eb 15 f8 e3 ff 77 74 65 72 20 55 62 f8 6d b4 ae cd 50 01 f9 9c 2e 70 97 d4 08 52 80 56 0d 6b ac 51 70 87 42 cf 38 70 ee 35 1a 25 56 7c 29 79 73 47 f0 33 eb 4a e0 43 3d a7 81 60 69 17 09 16 34 81 25 87 34 b2 32 26 66 d3 e2 8a ed e8 5e f8 4f 58 c4 21 b3 5a 88 92 e3 09 63 38 b8 a6 47 c0 c0 96 1b e5 f2 c8 91 b5 00 0c d4 25 14 1b 7a c0 bb 3e 80 b5 97 c3 a1 29 ba 9e 31 b7 b8 c5 0d 41 97 3f b0 52 63 f5 54 83 61 5f c2 52 39 60 f4 db 94 35 cd ec ba fd df 40 bc 16 14 ab 6a 4b 65 a9 82 8f 82 52 40 98 c3 f3 31 ae e9 12 1e 17 1d 41 4d 33 f8 2c 54 9b 01 ad d4 72 cd 92 59 73 11 39 71 2d 79 85 f2 37 ef 6c ad Data Ascii: $J0Q,j+{Pt+lc*wter UbmP.pRVkQpB8p5%V\|)ysG3JC=`i4%42&f^OX!Zc8G%z>)1A?RcTa_R9`5@jKeR@1AM3,TrYs9q-y7l
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 9f 8f 3c f6 c4 53 cf 3c f7 d2 6b 6f 80 80 e9 ee f4 fc 42 c6 e0 a8 1a 75 f1 73 dc 39 10 1e 5f 70 2d 63 6e 51 ba 52 c3 15 8d b9 d5 9f 7e 78 cc 31 72 1d 00 3d 2e 30 57 0c ec 38 4e ac 50 03 b0 13 b5 42 31 10 76 9e 5e 9d 0b 60 00 57 52 f6 43 30 90 2d 93 20 0a d3 fa 45 25 e3 3c 09 87 cd 23 c4 62 13 00 19 5b 7d 5d bf 69 31 a9 7b af 2a 77 9a 7f 3d e3 63 bf ef 7e 4c 65 69 e0 21 26 25 ea 4d 4f cc f9 1b e5 e2 34 5d 18 fd f4 1e d9 6d 12 f5 d8 0f 76 35 16 3f 3c 20 02 d7 6a 35 61 1e 08 7c d9 7f bc 16 58 58 53 c6 ac 75 73 ce d0 91 eb c1 1c 18 17 6e 76 51 2f 45 34 e0 64 9f 4e cf 62 bf 00 02 63 ff b0 6a e1 eb b5 7b 19 d8 0f ad 0b 82 90 da 18 04 f2 f5 ea 7b 7c 53 ce ee 9c 67 45 eb 81 8c 8d 5f 38 50 2a 7c 19 1d 3d 10 df 8a d6 58 cb be 7d 96 06 8e 82 61 e3 7e 03 e0 ce bf 97 Data Ascii: <S<koBus9_p-cnQR~x1r=.0W8NPB1v^`WRC0- E%<#b[}]i1{w=c~Lei!&%MO4]mv5?< j5a\|XXSusnvQ/E4dNbcj{{\|SgE_8P\|=X}a~
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 1b 66 ad cd cb ad a5 81 49 7a 95 12 cb 71 8c 47 3d 2d 0f 09 07 97 dd 47 b7 0b 5a 62 ad 8b e3 51 ff 1a f2 96 65 a7 9b c8 67 67 de 6f 03 b3 5a f3 a2 7f 0e f2 a0 7a 3e 63 37 a8 33 5f 57 0a fe 94 c7 63 c0 c7 51 fd a6 66 9e 0a 10 fd 22 43 f7 72 8e 05 86 70 19 8b 4b a9 b3 5c d6 a0 56 bb 18 23 c7 94 46 b9 11 2d 61 a0 28 c5 95 2e 1d 4d bd d6 96 93 a3 dd cf 85 a0 73 8d 0c d6 4a b1 cc 11 06 d8 87 ef 12 18 01 84 ce 65 8c 52 a3 d9 72 8f 07 91 66 7c e9 29 e7 57 c7 bd 7c a9 c7 50 15 2f cc 68 3e 34 0b 8e b4 32 d7 dc 17 2c 2c a7 50 79 dd 55 74 56 34 49 57 2e 7e 67 e5 74 23 c5 27 95 cc 3d 45 9a fe ec 40 8a 5f 9b 23 df 43 a5 7f f1 7a 5f 64 5a 6a 76 97 14 05 ea b7 a2 13 8c 7c f6 22 a8 78 e4 cb 3c 57 b7 12 0c ef 21 62 8c 40 49 4a b3 b2 97 27 73 47 ca 80 4c 8c 6b 86 df 5d 35 Data Ascii: fIzqG=-GZbQeggoZz>c73_WcQf"CrpK\V#F-a(.MsJeRrf\|)W\|P/h>42,,PyUtV4IW.~gt#'=E@_#Cz_dZjv\|"x<W!b@IJ'sGLk]5
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: f7 55 22 ff b1 9a c3 9c 9d e7 5b 5d 61 ec 5a d3 f4 8d f0 cb f8 70 47 49 8a 00 f9 9a 0f d0 a4 0c 6b d0 72 8b ba 6b 11 8b 57 1b 1e 6d 99 90 88 f1 65 6e 67 89 b8 75 c5 08 aa 38 8b 64 7e 0c 5a d1 77 4f 0c da 97 3b 45 4e 37 33 ab df 95 e9 f7 c1 7b 9c 5d e4 97 83 20 b8 3c b6 ff 40 66 2d b2 d0 0a 07 d7 eb d2 8c d3 c4 71 ec 19 56 45 a5 99 60 79 32 c3 5c 43 c5 42 eb a2 1d 7f eb ab 8d 8e 5b 7a 06 a6 57 04 12 78 9a 3f 5a 1b cf 60 8f 81 80 50 31 6a 12 05 69 2f 91 f1 48 26 55 4f a3 6d 49 89 72 7a a6 62 6b 98 9e 3d c9 f5 8b 30 b0 00 e3 88 77 69 70 21 08 36 ce 97 9c 22 27 51 6e 1c 4b a1 48 a4 68 a8 91 ec a5 4a 46 ee 73 13 16 2d 9a 47 18 28 68 9d 16 24 f9 65 f9 dc a9 90 71 bc a3 e5 8e a5 1d cb 2f b0 8c 58 e2 b7 7c 87 ab 7e a5 71 46 14 52 5f 78 3e 8e 68 36 57 99 71 9a fb Data Ascii: U"[]aZpGIkrkWmengu8d~ZwO;EN73{] <@f-qVE`y2\CB[zWx?Z`P1ji/H&UOmIrzbk=0wip!6"'QnKHhJFs-G(h$eq/X\|~qFR_x>h6Wq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.7	49810	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	370	OUT	GET /browser-ui/latest/loader.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:02 UTC	1009	IN	HTTP/1.1 200 OK x-goog-generation: 1726571827632279 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 8553 Content-Encoding: gzip x-goog-hash: crc32c=LoTiLg== x-goog-hash: md5=2m/YaWSIIpsB7mg8hopp1A== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 8553 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Access-Control-Expose-Headers: Content-Length Access-Control-Expose-Headers: Transfer-Encoding X-GUploader-UploadID: AD-8ljs5cm5OkPEwOSO0cpBQjV81GV0B3OMeTMFJU0F3_Wvt3tRMmOHE14uFMWYXXR9OPy3k_xjND-ionA Server: UploadServer Date: Mon, 30 Sep 2024 22:24:20 GMT Expires: Mon, 30 Sep 2024 23:24:20 GMT Cache-Control: public, max-age=3600, no-transform Age: 1002 Last-Modified: Tue, 17 Sep 2024 11:17:07 GMT ETag: "da6fd8696488229b01ee683c868a69d4" Content-Type: text/javascript Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:02 UTC	381	IN	Data Raw: 1f 8b 08 08 33 65 e9 66 02 ff 74 6d 70 35 61 79 37 33 62 34 68 00 ed 3d 69 57 e3 48 92 df f7 57 08 ed 3e 4a 6a 84 0f a8 53 20 fc 5c 2e 57 35 d3 5c 83 a9 ea e9 01 8f 9f 2c a7 6d 35 b2 e4 56 4a 50 34 78 7f fb 46 e4 21 a5 7c 61 30 35 3b 6f 67 f9 80 53 79 44 46 44 46 64 44 de 1b fd 34 f4 12 3f 0a 0d f3 5e 4f 29 d1 68 12 fb 5e a2 ef dd b8 b1 46 1c 8c 8a 3d 12 62 24 dd f6 46 63 dd 4a 9c ac 08 31 ef 63 92 a4 71 a8 91 52 fd f8 ac d3 3c a9 7f 3c 6a 7e 72 74 77 34 6e 86 6e 37 20 3d dd 82 a4 6f a7 87 9f 3a 67 e7 cd cf cd 8b c6 cf 9d 56 f3 fc db 61 a3 d9 82 6c 37 91 df 3b 8b 49 9f 24 de b0 45 e2 1b df 23 14 4b 7c 3c 3a 6d fc d2 f9 54 bf a8 77 8e ea bf 35 cf 3b 67 5f 5b 3f 3b 7a 37 88 bc eb 4f 6e e2 1e b9 77 24 3e 4b e9 10 33 37 4e 4f 2e ce 4f 8f 8e 20 db 21 d4 ed 45 Data Ascii: 3eftmp5ay73b4h=iWHW>JjS \.W5\,m5VJP4xF!\|a05;ogSyDFDFdD4?^O)h^F=b$FcJ1cqR<<j~rtw4nn7 =o:gVal7;I$E#K\|<:mTw5;g_[?;z7Onw$>K37NO.O !E
2024-09-30 22:41:02 UTC	1390	IN	Data Raw: 8c d3 80 50 92 70 12 5b f5 93 4f 1f 4f ff 06 fc ff e6 e8 d4 0d 7b dd e8 3b 8b 6f 5e 5c 00 c6 ad 4e a3 de f8 19 aa 87 02 09 20 4c 1b ae 37 24 85 0c 08 52 a6 0a 98 17 a7 e7 4d d9 56 90 de b9 38 ed 9c d4 8f 9b 9d e3 fa d9 19 63 03 4d a2 98 88 56 3b ec 5d 44 27 ee 88 1c bb e3 b1 60 49 eb eb 19 34 79 0b 2a 07 c9 00 62 cf a0 25 a1 50 3a 1e c7 84 d2 c6 68 fc c9 a7 e3 c0 bd c3 bc 17 8d cf b9 f0 24 5e 5f 11 9e 2f 67 8a 5c 0d c6 aa 5c 01 db 5a 87 a7 27 8e 0e 7c a2 20 8f 8c ab 4d a8 b4 51 bf 68 7e ea 7c ab 4a a6 76 5a f5 6f 80 72 0e 87 30 20 df aa 82 bb 2d f7 86 23 3d 31 ee 27 a6 15 83 d8 7b 9d d4 ef 48 b8 7b 52 e2 35 55 e6 43 47 97 f1 ba e3 24 77 63 12 f5 b5 d6 dd a8 1b 05 9b 9b 3a 65 81 e9 84 92 9f 90 d8 05 c6 d5 e6 28 91 c8 49 26 f6 3c 0d 03 98 8b ab 23 25 10 6b Data Ascii: Pp[OO{;o^\N L7$RMV8cMV;]D'`I4y*b%P:h$^_/g\\Z'\| MQh~\|JvZor0 -#=1'{H{R5UCG$wc:e(I&<#%k
2024-09-30 22:41:02 UTC	1390	IN	Data Raw: b6 65 a8 76 9d 1b 07 77 7b 61 55 a1 93 6c 85 e4 56 ab 83 12 dd 19 f1 56 d5 2c fd 1e f9 21 d0 58 d1 33 53 c2 c1 87 0a f9 d6 3c 31 cf e1 ec 54 a0 46 ce 21 09 0f c0 6d 81 93 62 96 62 82 23 22 b0 97 a8 04 e8 9a 20 5b 22 c0 91 13 06 79 91 30 a0 74 db a9 ee b9 07 4e b4 c7 8c 51 0a 0d 77 e9 b6 0f 52 10 11 f8 cd b4 63 2f 4f 03 16 cb 54 2c e1 c2 77 24 f3 55 f6 10 de 84 04 d0 1d e4 25 f6 8b d0 b6 ab 13 6e 1e c7 f3 6c 2c f0 ea b2 8d d5 31 1a 15 f7 03 f2 cb 6a e6 24 e5 ee 08 a3 36 76 2a 7b f1 be e4 ce 5e bc e5 54 cd 90 f7 03 d0 3f 5c c6 ed dc e5 0a 11 19 70 03 7b f3 b1 99 87 0a e6 5e 84 0b a6 cd 22 03 54 e5 c8 ec 87 1c a1 7b 21 a0 80 0e eb a7 a0 49 e2 ac 43 f2 19 93 5c 4a fd 41 51 4d a4 9f 89 72 0f 85 41 8c dd 78 00 ae 6a 98 50 51 03 88 6f 2e 24 f4 a0 5a a3 db 55 bb Data Ascii: evw{aUlVV,!X3S<1TF!mbb#" ["y0tNQwRc/OT,w$U%nl,1j$6v*{^T?\p{^"T{!IC\JAQMrAxjPQo.$ZU
2024-09-30 22:41:02 UTC	1390	IN	Data Raw: f9 4c ac a3 7e 3c 3c 6c 54 ad 10 dd cf be 3f 48 79 3a 60 ab b3 a9 5a dd 07 cf 1e 47 82 a5 db d8 4f 44 da e2 e9 ea 10 bd 4f 18 46 4e d8 42 43 b4 78 f2 51 7a de e1 9e 3a 0d 79 86 53 0f f1 ec b4 76 36 28 c5 d9 ed 04 07 a5 d6 9c 99 e3 04 24 e5 96 8d eb 9a 71 0c 4c d1 bf a2 b3 0a 3d 72 a2 d1 61 94 06 3d ad 4b 34 57 13 05 f3 81 0b 14 f0 65 d3 88 99 58 52 62 b3 20 ce 82 71 a3 92 dd 44 bc cf 09 c5 0f 28 98 c0 48 02 46 5e f7 ac 77 51 ac 9b ce d6 19 66 27 94 a9 6a 02 41 8c 78 c1 5c 78 17 97 cb f3 64 c5 b8 8e 2f 2e c2 d3 b3 ec 85 ee 65 71 a9 42 b6 c9 04 c6 ec b1 c3 d6 01 36 37 5d 43 99 d8 c6 75 9b 90 c5 81 00 4c 3b ec d1 7c 87 fd 43 f5 b9 d3 db 9e 01 2a b3 63 e2 f4 03 0b ee e2 20 9c 07 5f 9b 38 46 63 c1 37 10 4c 59 b0 fa ce 54 54 c7 5b bc c2 56 23 b9 d6 11 2e c7 bd Data Ascii: L~<<lT?Hy:`ZGODOFNBCxQz:ySv6($qL=ra=K4WeXRb qD(HF^wQf'jAx\xd/.eqB67]CuL;\|C*c _8Fc7LYTT[V#.
2024-09-30 22:41:02 UTC	1390	IN	Data Raw: 03 f8 43 51 66 2b a5 2b ea 01 5b 4d 7d 0c 65 06 f0 87 a2 cc 56 b4 9f d0 e1 88 55 ef f5 c4 9b 55 ba 7e 87 09 d6 83 33 25 2b fe 14 42 2e a2 d4 1b ae d0 7f 2e 43 f4 05 1a e0 ce ed 3e 45 4d 67 16 c8 97 a3 9f 41 ff b1 44 a4 de 93 88 50 76 0c ac 27 48 59 bd eb 0a 93 d8 37 f2 30 fa be b2 fd 95 5b 4d d6 a3 a0 50 f1 ba 54 c8 bd 3a ab 11 90 ed e7 59 8f 02 59 e9 ba c8 f3 1d 33 ab a1 2e 76 d5 ac 87 38 af 70 5d b4 e5 8e 99 15 bb 7d b9 ab 66 3d d4 65 a5 eb 22 7f bd cd f7 52 ad 86 7c b6 df 6a 3d e4 65 a5 eb 22 3f c2 cd 5d 23 42 29 c1 13 0f ab 91 20 f6 1b 3d d6 6d 16 41 ff d8 be f3 8f 3f 9e d2 77 e6 d9 71 af 58 d9 97 f3 b7 b5 99 5d 63 85 bd 65 8f 11 5c 80 fa 90 7d 99 97 3f 8e ee 11 f5 c9 43 c2 77 1a ad d6 78 b3 9b 01 1f 6d 47 a8 43 7b 88 6f 6c f3 f9 62 76 45 49 6f 70 55 Data Ascii: CQf++[M}eVUU~3%+B..C>EMgADPv'HY70[MPT:YY3.v8p]}f=e"R\|j=e"?]#B) =mA?wqX]ce\}?CwxmGC{olbvEIopU
2024-09-30 22:41:02 UTC	1390	IN	Data Raw: e9 eb 28 2e 5d d1 09 62 ee 91 ea f1 99 45 7f 68 e3 99 0e d1 14 48 a5 27 5b 45 c9 0a b2 50 e8 fe a5 4e 5d 56 b6 df b6 51 99 ac f2 c0 0d dc ef 77 1a 4b 79 0e 17 a7 ea 9e 55 ae cb 7f 6c b7 31 d3 f3 81 cf 6f 22 71 6e 41 b9 f3 0a b7 9c 4f 9f d6 c0 c3 22 eb d2 a4 ae e2 2c 45 05 57 19 5e 18 89 a5 15 16 c6 c7 73 6b 5e 9f f8 6c 49 5c 5f a6 29 27 e9 08 da c0 90 87 13 0a 87 67 0d d3 54 ee 59 c4 ab 5c 85 30 67 17 9a 49 cc f3 c3 18 e0 f5 1e 38 bb 93 17 d5 e9 47 2b fd 21 6d 04 83 b5 88 be 48 65 e2 c6 9e 29 35 5f 45 40 5e b2 fa a5 f5 31 f7 f2 9f 56 5b 61 f6 f4 45 6a 4d 6e 96 56 c8 ae 24 7b b1 7a 56 f1 36 df fc d3 bd cd 79 22 9c ed 8a 61 b7 e9 3d a1 87 23 ec 98 6d be 47 48 6e c7 32 8b 7e 79 7e 4d 4d 89 dd b5 24 0f f2 2e b4 8f 88 c7 f2 95 83 39 a0 e5 bd 4e 0b c6 68 4f d8 Data Ascii: (.]bEhH'[EPN]VQwKyUl1o"qnAO",EW^sk^lI\_)'gTY\0gI8G+!mHe)5_E@^1V[aEjMnV${zV6y"a=#mGHn2~y~MM$.9NhO
2024-09-30 22:41:02 UTC	1222	IN	Data Raw: 44 81 8e 9d bf b4 4e 4f c4 75 94 3c d1 cc 25 59 bc 60 83 f7 95 64 77 eb 38 f8 58 08 3e 00 c5 d4 aa 01 86 44 be e9 a0 44 ed a9 c6 c7 f0 d1 e5 18 b9 61 cf f2 a5 23 ab 5c 2f c3 5f 32 e1 4f dd b1 fc fc ed 28 5b d4 fe 8d 3d 42 16 43 d7 c3 5c 2d b0 33 68 bc a0 33 f3 4b 3c 30 c1 0b 85 92 1a a3 83 d3 ed f7 ef 0c 6a da 74 0f 29 9c c7 27 c3 b5 f4 9f 74 85 50 f0 97 01 b7 cc 0a e2 ce 22 ab eb 14 de 1e 5d f4 a2 20 08 7a d1 58 df 30 e1 17 71 d3 46 de d0 47 1c 05 dd 1a 5a 78 01 88 5a d6 19 e0 e5 1b c7 ff ea cd 0e dd bc 3b f6 a7 5b 3e 8f cd 1b 9f c7 3d a9 fd 79 91 7f 11 11 e8 a0 df da 9a f2 5b 2d fe b2 e2 46 f6 fa 5e 67 6f ca 91 5d e8 b3 e2 c3 69 e0 7c 8d c0 1a 81 23 df c3 27 17 67 ed 71 6f 1c e3 8c a2 4f 28 7b 3c 50 35 89 d8 4d 30 d8 59 cd d2 f0 75 54 c3 67 85 cc f4 dd Data Ascii: DNOu<%Y`dw8X>DDa#\/_2O([=BC\-3h3K<0jt)'tP"] zX0qFGZxZ;[>=y[-F^go]i\|#'gqoO({<P5M0YuTg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.7	49811	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	569	OUT	GET /typo3temp/assets/js/cfd16b174d7f7b046e20adbc2e0a1094.js?1689601391 HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:02 UTC	519	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 17 Jul 2023 13:43:11 GMT ETag: W/"64b5456f-c5a" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-e3bd12867c77704b6d6493516f7b8076 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1699 Server: cloudflare CF-RAY: 8cb7b7d79b6917d9-EWR
2024-09-30 22:41:02 UTC	850	IN	Data Raw: 63 35 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 2f 2a 2a 0a 20 20 20 2a 20 44 65 63 6f 64 69 6e 67 20 68 65 6c 70 65 72 20 66 75 6e 63 74 69 6f 6e 0a 20 20 20 2a 0a 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 6e 75 6d 62 65 72 7d 20 63 68 61 72 43 6f 64 65 0a 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 6e 75 6d 62 65 72 7d 20 73 74 61 72 74 0a 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 6e 75 6d 62 65 72 7d 20 65 6e 64 0a 20 20 20 2a 20 40 70 61 72 61 6d 20 7b 6e 75 6d 62 65 72 7d 20 6f 66 66 73 65 74 0a 20 20 20 2a 20 40 72 65 74 75 72 6e 20 7b 73 74 72 69 6e 67 7d 0a 20 20 20 2a 2f 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 65 63 72 79 70 74 43 68 61 72 63 6f 64 65 28 63 68 61 72 43 6f 64 65 2c 20 73 74 61 72 74 2c 20 65 6e 64 2c 20 6f 66 66 73 65 74 29 20 Data Ascii: c5a(function() { /** * Decoding helper function * * @param {number} charCode * @param {number} start * @param {number} end * @param {number} offset * @return {string} */ function decryptCharcode(charCode, start, end, offset)
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 6c 74 20 2b 3d 20 64 65 63 72 79 70 74 43 68 61 72 63 6f 64 65 28 63 68 61 72 43 6f 64 65 2c 30 78 32 42 2c 30 78 33 41 2c 6f 66 66 73 65 74 29 3b 09 2f 2a 20 30 2d 39 20 2e 20 2c 20 2d 20 2b 20 2f 20 3a 20 2a 2f 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 63 68 61 72 43 6f 64 65 20 3e 3d 20 30 78 34 30 20 26 26 20 63 68 61 72 43 6f 64 65 20 3c 3d 20 30 78 35 41 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 2b 3d 20 64 65 63 72 79 70 74 43 68 61 72 63 6f 64 65 28 63 68 61 72 43 6f 64 65 2c 30 78 34 30 2c 30 78 35 41 2c 6f 66 66 73 65 74 29 3b 09 2f 2a 20 41 2d 5a 20 40 20 2a 2f 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 63 68 61 72 43 6f 64 65 20 3e 3d 20 30 78 36 31 20 26 26 20 63 68 61 72 43 6f 64 65 20 3c 3d 20 30 78 37 Data Ascii: lt += decryptCharcode(charCode,0x2B,0x3A,offset);/* 0-9 . , - + / : / } else if (charCode >= 0x40 && charCode <= 0x5A) { result += decryptCharcode(charCode,0x40,0x5A,offset);/ A-Z @ */ } else if (charCode >= 0x61 && charCode <= 0x7
2024-09-30 22:41:02 UTC	950	IN	Data Raw: 79 70 74 4d 61 69 6c 74 6f 27 5d 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 5b 27 6c 69 6e 6b 54 6f 5f 55 6e 43 72 79 70 74 4d 61 69 6c 74 6f 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 2c 20 6f 66 66 73 65 74 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 46 75 6e 63 74 69 6f 6e 20 6c 69 6e 6b 54 6f 5f 55 6e 43 72 79 70 74 4d 61 69 6c 74 6f 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 20 69 6e 20 54 59 50 4f 33 20 76 31 32 2e 30 27 29 3b 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 26 26 20 6f 66 66 73 65 74 29 20 7b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 Data Ascii: yptMailto'] === 'undefined') { window['linkTo_UnCryptMailto'] = function(value, offset) { console.warn('Function linkTo_UnCryptMailto() is deprecated and will be remove in TYPO3 v12.0'); if (value && offset) { document.location.hre
2024-09-30 22:41:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.7	49812	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	559	OUT	GET /fileadmin/images/legacy/images/icons/icn-check-beige.svg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:02 UTC	486	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Wed, 14 Sep 2022 10:45:45 GMT ETag: W/"6321b0d9-262" X-Sedo-Request-Id: ID-848758bd5-kxgbq-9d252447f992a840e6a041cb508cee75 Age: 4282 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Server: cloudflare CF-RAY: 8cb7b7d79f034268-EWR
2024-09-30 22:41:02 UTC	617	IN	Data Raw: 32 36 32 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 Data Ascii: 262<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"
2024-09-30 22:41:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.7	49813	104.16.141.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	773	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1 Host: sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US
2024-09-30 22:41:02 UTC	367	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8017 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Strict-Transport-Security: max-age=2592000 Server: cloudflare CF-RAY: 8cb7b7d87de619aa-EWR
2024-09-30 22:41:02 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 66 2c 67 2c 6c 2c 6d 2c 76 2c 78 2c 7a 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 55 2c 42 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 42 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 70 61 72 73 65 49 6e 74 28 55 28 33 39 36 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 55 28 33 36 38 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 55 28 34 31 32 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 36 30 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 33 37 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 55 28 33 32 33 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 31 35 29 29 2f 37 2a 28 2d 70 61 Data Ascii: window._cf_chl_opt={cFPWv:'g'};~function(V,f,g,l,m,v,x,z){V=b,function(c,d,U,B,C){for(U=b,B=c();!![];)try{if(C=parseInt(U(396))/1(parseInt(U(368))/2)+parseInt(U(412))/3+-parseInt(U(360))/4+-parseInt(U(337))/5(parseInt(U(323))/6)+-parseInt(U(315))/7*(-pa
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 3a 4c 7c 7c 46 28 44 2b 4a 2c 43 5b 4a 5d 29 29 3a 46 28 44 2b 4a 2c 4b 29 2c 49 2b 2b 29 3b 72 65 74 75 72 6e 20 45 3b 66 75 6e 63 74 69 6f 6e 20 46 28 4d 2c 4e 2c 61 33 29 7b 61 33 3d 62 2c 4f 62 6a 65 63 74 5b 61 33 28 33 37 30 29 5d 5b 61 33 28 33 32 37 29 5d 5b 61 33 28 33 34 37 29 5d 28 45 2c 4e 29 7c 7c 28 45 5b 4e 5d 3d 5b 5d 29 2c 45 5b 4e 5d 5b 61 33 28 33 30 39 29 5d 28 4d 29 7d 7d 2c 76 3d 56 28 33 37 39 29 5b 56 28 33 38 30 29 5d 28 27 3b 27 29 2c 78 3d 76 5b 56 28 33 30 37 29 5d 5b 56 28 33 32 34 29 5d 28 76 29 2c 66 5b 56 28 34 30 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 42 2c 43 2c 61 36 2c 44 2c 45 2c 46 2c 47 29 7b 66 6f 72 28 61 36 3d 56 2c 44 3d 4f 62 6a 65 63 74 5b 61 36 28 33 38 31 29 5d 28 43 29 2c 45 3d 30 3b 45 3c 44 5b 61 36 28 33 Data Ascii: :L\|\|F(D+J,C[J])):F(D+J,K),I++);return E;function F(M,N,a3){a3=b,Object[a3(370)][a3(327)][a3(347)](E,N)\|\|(E[N]=[]),E[N][a3(309)](M)}},v=V(379)[V(380)](';'),x=v[V(307)][V(324)](v),f[V(400)]=function(B,C,a6,D,E,F,G){for(a6=V,D=Object[a6(381)](C),E=0;E<D[a6(3
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 2c 4e 5b 61 61 28 33 30 39 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 4a 3d 28 4b 2d 2d 2c 30 3d 3d 4b 26 26 28 4b 3d 4d 61 74 68 5b 61 61 28 33 39 37 29 5d 28 32 2c 4d 29 2c 4d 2b 2b 29 2c 48 5b 53 5d 3d 4c 2b 2b 2c 53 74 72 69 6e 67 28 52 29 29 7d 69 66 28 4a 21 3d 3d 27 27 29 7b 69 66 28 4f 62 6a 65 63 74 5b 61 61 28 33 37 30 29 5d 5b 61 61 28 33 32 37 29 5d 5b 61 61 28 33 34 37 29 5d 28 49 2c 4a 29 29 7b 69 66 28 32 35 36 3e 4a 5b 61 61 28 33 38 38 29 5d 28 30 29 29 7b 66 6f 72 28 47 3d 30 3b 47 3c 4d 3b 4f 3c 3c 3d 31 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 61 28 33 30 39 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 61 28 33 38 38 29 5d 28 30 29 2c Data Ascii: ,N[aa(309)](F(O)),O=0):P++,T>>=1,G++);J=(K--,0==K&&(K=Math[aa(397)](2,M),M++),H[S]=L++,String(R))}if(J!==''){if(Object[aa(370)][aa(327)][aa(347)](I,J)){if(256>J[aa(388)](0)){for(G=0;G<M;O<<=1,E-1==P?(P=0,N[aa(309)](F(O)),O=0):P++,G++);for(T=J[aa(388)](0),
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 4c 3d 47 5b 33 5d 3d 54 2c 4b 5b 61 64 28 33 30 39 29 5d 28 54 29 3b 3b 29 7b 69 66 28 50 3e 44 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 33 39 37 29 5d 28 32 2c 4a 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 54 3d 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 33 39 37 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c Data Ascii: );break;case 2:return''}for(L=G[3]=T,K[ad(309)](T);;){if(P>D)return'';for(Q=0,R=Math[ad(397)](2,J),M=1;M!=R;S=O&N,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=(0<S?1:0)*M,M<<=1);switch(T=Q){case 0:for(Q=0,R=Math[ad(397)](2,8),M=1;R!=M;S=O&N,O>>=1,O==0&&(O=E,N=F(P++)),Q\|
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 69 66 28 6e 75 6c 6c 3d 3d 43 5b 44 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 43 5b 44 5d 3f 27 75 27 3a 27 78 27 7d 63 61 74 63 68 28 47 29 7b 72 65 74 75 72 6e 27 69 27 7d 72 65 74 75 72 6e 20 42 5b 61 31 28 33 37 38 29 5d 5b 61 31 28 33 36 36 29 5d 28 43 5b 44 5d 29 3f 27 61 27 3a 43 5b 44 5d 3d 3d 3d 42 5b 61 31 28 33 37 38 29 5d 3f 27 43 27 3a 21 30 3d 3d 3d 43 5b 44 5d 3f 27 54 27 3a 43 5b 44 5d 3d 3d 3d 21 31 3f 27 46 27 3a 28 45 3d 74 79 70 65 6f 66 20 43 5b 44 5d 2c 61 31 28 34 31 31 29 3d 3d 45 3f 6e 28 42 2c 43 5b 44 5d 29 3f 27 4e 27 3a 27 66 27 3a 6d 5b 45 5d 7c 7c 27 3f 27 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 63 2c 61 32 2c 64 29 7b 66 6f 72 28 61 32 3d 56 2c 64 3d 5b 5d 3b 6e 75 6c 6c 21 3d 3d 63 3b 64 3d 64 5b 61 32 28 33 32 Data Ascii: if(null==C[D])return void 0===C[D]?'u':'x'}catch(G){return'i'}return B[a1(378)][a1(366)](C[D])?'a':C[D]===B[a1(378)]?'C':!0===C[D]?'T':C[D]===!1?'F':(E=typeof C[D],a1(411)==E?n(B,C[D])?'N':'f':m[E]\|\|'?')}function s(c,a2,d){for(a2=V,d=[];null!==c;d=d[a2(32
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 5b 59 28 33 38 37 29 5d 2b 59 28 33 34 34 29 2b 63 29 2c 43 5b 59 28 33 37 36 29 5d 28 59 28 34 30 34 29 2c 59 28 34 30 37 29 29 2c 43 5b 59 28 33 39 32 29 5d 28 4a 53 4f 4e 5b 59 28 33 34 31 29 5d 28 42 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 68 29 7b 72 65 74 75 72 6e 20 61 68 3d 27 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 72 65 70 6c 61 63 65 2c 63 68 6c 41 70 69 55 72 6c 2c 46 75 6e 63 74 69 6f 6e 2c 37 72 51 5a 62 50 44 2c 74 69 6d 65 6f 75 74 2c 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 4f 62 6a 65 63 74 2c 61 70 70 65 6e 64 43 68 69 6c 64 2c 63 6f 6e 63 61 74 2c 75 6e 64 65 66 69 6e 65 64 2c 69 6e 64 65 78 4f 66 2c 39 32 30 38 38 36 61 6a 47 6a 56 57 2c 62 69 6e 64 2c 64 6f 63 75 6d 65 6e 74 2c 37 36 39 33 35 36 30 42 57 61 73 79 Data Ascii: [Y(387)]+Y(344)+c),C[Y(376)](Y(404),Y(407)),C[Y(392)](JSON[Y(341)](B))}function a(ah){return ah='addEventListener,replace,chlApiUrl,Function,7rQZbPD,timeout,getPrototypeOf,Object,appendChild,concat,undefined,indexOf,920886ajGjVW,bind,document,7693560BWasy
2024-09-30 22:41:02 UTC	170	IN	Data Raw: 43 68 61 72 43 6f 64 65 2c 2f 30 2e 32 33 35 37 32 38 30 30 35 39 37 38 32 37 33 33 3a 31 37 32 37 37 33 34 33 34 35 3a 6e 53 54 56 48 36 64 5f 5a 50 4d 39 64 65 4e 4a 6f 74 42 37 6e 53 64 47 6c 50 77 64 44 34 30 6b 38 73 6e 32 79 37 4d 46 79 36 59 2f 2c 73 70 6c 69 63 65 2c 6a 73 64 2c 69 6e 63 6c 75 64 65 73 2c 6e 61 76 69 67 61 74 6f 72 2c 70 75 73 68 2c 69 66 72 61 6d 65 27 2e 73 70 6c 69 74 28 27 2c 27 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 68 7d 2c 61 28 29 7d 7d 28 29 Data Ascii: CharCode,/0.2357280059782733:1727734345:nSTVH6d_ZPM9deNJotB7nSdGlPwdD40k8sn2y7MFy6Y/,splice,jsd,includes,navigator,push,iframe'.split(','),a=function(){return ah},a()}}()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.7	49814	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	551	OUT	GET /components/zkLxDsbw1hz2/e3c69f63348c1ec6e547.png HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:02 UTC	475	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:02 GMT Content-Type: image/png Content-Length: 4210 Connection: close Last-Modified: Thu, 12 Sep 2024 08:56:03 GMT ETag: "66e2aca3-1072" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-4df5e05732e4a8eaf3ff67bea98018ef X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4221 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7d8a9bc1906-EWR
2024-09-30 22:41:02 UTC	894	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 14 08 06 00 00 00 0a 94 36 4e 00 00 0a 43 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 aa 0d 00 ec f4 49 Data Ascii: PNGIHDR6NCiCCPICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"I
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 84 31 c2 27 22 93 a8 4f b4 25 7a 12 f9 c4 78 62 3a b1 90 58 46 ac 26 ee 21 1e 21 9e 25 5e 27 0e 13 5f 93 48 24 0e c9 92 e4 4e 0a 21 25 90 32 49 0b 49 6b 48 db 48 2d a4 53 a4 3e d2 10 69 9c 4c 26 eb 90 6d c9 de e4 08 b2 80 ac 20 97 91 b7 90 0f 90 4f 92 fb c9 c3 e4 b7 14 3a c5 88 e2 4c 09 a2 24 52 a4 94 12 4a 35 65 3f e5 04 a5 9f 32 42 99 a0 aa 51 cd a9 9e d4 08 aa 88 3a 9f 5a 49 6d a0 76 50 2f 53 87 a9 13 34 75 9a 25 cd 9b 16 43 cb a4 2d a3 d5 d0 9a 69 67 69 f7 68 2f e9 74 ba 09 dd 83 1e 45 97 d0 97 d2 6b e8 07 e9 e7 e9 83 f4 77 0c 0d 86 0d 83 c7 48 62 28 19 6b 19 7b 19 a7 18 b7 19 2f 99 4c a6 05 d3 97 99 c8 54 30 d7 32 1b 99 67 98 0f 98 6f 55 58 2a f6 2a 7c 15 91 ca 12 95 3a 95 56 95 7e 95 e7 aa 54 55 73 55 3f d5 79 aa 0b 54 ab 55 0f ab 5e 56 7d a6 46 55 Data Ascii: 1'"O%zxb:XF&!!%^'_H$N!%2IIkHH-S>iL&m O:L$RJ5e?2BQ:ZImvP/S4u%C-igih/tEkwHb(k{/LT02goUX**\|:V~TUsU?yTU^V}FU
2024-09-30 22:41:02 UTC	1369	IN	Data Raw: 6b bd 45 7d f5 6e d2 ee 82 dd 8f 1a 62 1b ba bf e6 7e dd b8 47 77 4f c5 9e 8f 7b a5 7b 07 f6 45 ef eb 6a 74 6f 6c dc af bf bf b2 09 6d 52 36 8d 1e 48 3a 70 e5 9b 80 6f da 9b ed 9a 77 b5 70 5a 2a 0e c2 41 e5 c1 27 df a6 7c 7b e3 50 e8 a1 ce c3 dc c3 cd df 99 7f b7 f5 08 eb 48 79 2b d2 3a bf 75 ac 2d a3 6d a0 3d a1 bd ef e8 8c a3 9d 1d 5e 1d 47 be b7 ff 7e ef 31 e3 63 75 c7 35 8f 57 9e a0 9d 28 3d f1 f9 e4 82 93 e3 a7 64 a7 9e 9d 4e 3f 3d d4 99 dc 79 f7 4c fc 99 6b 5d 51 5d bd 67 43 cf 9e 3f 17 74 ee 4c b7 5f f7 c9 f3 de e7 8f 5d f0 bc 70 f4 22 f7 62 db 25 b7 4b ad 3d ae 3d 47 7e 70 fd e1 48 af 5b 6f eb 65 f7 cb ed 57 3c ae 74 f4 4d eb 3b d1 ef d3 7f fa 6a c0 d5 73 d7 f8 d7 2e 5d 9f 79 bd ef c6 ec 1b b7 6e 26 dd 1c b8 25 ba f5 f8 76 f6 ed 17 77 0a ee 4c dc Data Ascii: kE}nb~GwO{{EjtolmR6H:powpZ*A'\|{PHy+:u-m=^G~1cu5W(=dN?=yLk]Q]gC?tL_]p"b%K==G~pH[oeW<tM;js.]yn&%vwL
2024-09-30 22:41:02 UTC	578	IN	Data Raw: a6 bc c2 35 db e4 f5 bd bd bd ef f4 3c a0 24 55 fc 2e 6a 07 1e f1 87 66 93 99 bf 3e 1c a5 9c 2e 1b 9c 05 1e 91 d6 df 92 9c 2e 3c 1c 2a fc b0 47 b6 0f fd 5e 26 9f cf a7 1c 0e 87 61 fb fe 87 e2 27 d5 0f ca 7e 10 2f 83 98 a5 14 f2 31 12 ae 23 be d7 1a bf 73 19 d0 e3 f1 ec 62 79 a8 64 9b 85 c6 c6 c6 35 ac 1e 18 ba 0f 1d 1e 19 19 29 ea 3a 91 0a e3 bb 15 52 79 58 ed f3 c8 c2 17 0d 5f ae 21 23 22 dd 4b fb 67 1f cb c3 ab 82 a0 0b 2f 18 0c 6a f6 e1 45 59 68 6a 6a d2 ec 43 40 87 17 17 17 8b 16 c7 fe 65 c3 6d 36 2d 7e 90 05 c4 8e f5 79 ac fc ee 43 87 5d 2e 57 f1 46 09 c8 c4 ed 76 bf c0 86 3e 81 71 4e 5c 76 e1 f7 01 36 77 00 a5 f7 9d a1 c3 41 64 ac 8a 47 a8 13 99 b0 8a 57 2a 0e c4 7f fa de 10 de f8 f8 f8 39 fb 90 b9 07 50 7a df 59 14 bb 14 09 5f 60 79 02 95 e3 07 3d Data Ascii: 5<$U.jf>..<G^&a'~/1#sbyd5):RyX_!#"Kg/jEYhjjC@em6-~yC].WFv>qN\v6wAdGW9PzY_`y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.7	49817	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	551	OUT	GET /components/p9HJ4M2Uz7U4/b75b73e313804cf110ea.svg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:03 UTC	511	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:03 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2024 11:04:14 GMT ETag: W/"66e2caae-61ea" X-Sedo-Request-Id: ID-6b9769b6b9-tg4lb-6a7678c95ae5eb148e73acdf2b41b2d7 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4789 Server: cloudflare CF-RAY: 8cb7b7d9d9bf4217-EWR
2024-09-30 22:41:03 UTC	858	IN	Data Raw: 36 31 65 61 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 35 30 22 20 68 65 69 67 68 74 3d 22 36 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 30 20 36 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 38 30 2e 31 39 39 36 20 33 37 2e 34 39 39 38 48 38 38 2e 39 32 34 35 56 30 48 38 30 2e 31 39 39 36 56 31 31 2e 35 37 34 39 43 37 39 2e 31 36 31 32 20 31 31 2e 30 36 37 38 20 37 38 2e 30 39 32 35 20 31 30 2e 36 32 35 33 20 37 36 2e 39 39 39 36 20 31 30 2e 32 34 39 39 43 37 35 2e 37 30 32 37 20 39 2e 38 Data Ascii: 61ea<svg width="250" height="65" viewBox="0 0 250 65" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M80.1996 37.4998H88.9245V0H80.1996V11.5749C79.1612 11.0678 78.0925 10.6253 76.9996 10.2499C75.7027 9.8
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 35 32 35 35 20 33 31 2e 38 37 35 34 20 37 33 2e 36 39 35 34 20 33 31 2e 37 35 31 32 20 37 32 2e 39 32 39 35 20 33 31 2e 34 33 37 39 43 37 32 2e 31 36 33 36 20 33 31 2e 31 32 34 36 20 37 31 2e 34 38 34 34 20 33 30 2e 36 33 31 33 20 37 30 2e 39 34 39 36 20 32 39 2e 39 39 39 38 43 36 39 2e 38 37 38 37 20 32 38 2e 32 34 36 36 20 36 39 2e 33 39 36 39 20 32 36 2e 31 39 36 36 20 36 39 2e 35 37 34 36 20 32 34 2e 31 34 39 39 43 36 39 2e 34 35 33 35 20 32 32 2e 30 33 31 35 20 37 30 2e 30 35 32 36 20 31 39 2e 39 33 34 35 20 37 31 2e 32 37 34 36 20 31 38 2e 31 39 39 39 43 37 31 2e 39 30 37 37 20 31 37 2e 34 36 38 35 20 37 32 2e 37 30 33 32 20 31 36 2e 38 39 35 34 20 37 33 2e 35 39 37 35 20 31 36 2e 35 32 36 34 43 37 34 2e 34 39 31 37 20 31 36 2e 31 35 37 34 20 37 35 Data Ascii: 5255 31.8754 73.6954 31.7512 72.9295 31.4379C72.1636 31.1246 71.4844 30.6313 70.9496 29.9998C69.8787 28.2466 69.3969 26.1966 69.5746 24.1499C69.4535 22.0315 70.0526 19.9345 71.2746 18.1999C71.9077 17.4685 72.7032 16.8954 73.5975 16.5264C74.4917 16.1574 75
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 37 35 36 20 31 35 2e 30 38 36 31 20 34 33 2e 30 34 39 38 20 31 35 2e 31 34 39 39 43 34 31 2e 35 36 34 37 20 31 35 2e 30 38 35 31 20 34 30 2e 31 30 34 33 20 31 35 2e 35 34 35 33 20 33 38 2e 39 32 34 38 20 31 36 2e 34 34 39 39 43 33 38 2e 33 34 38 33 20 31 36 2e 39 38 30 33 20 33 37 2e 38 39 20 31 37 2e 36 32 36 32 20 33 37 2e 35 37 39 39 20 31 38 2e 33 34 35 36 43 33 37 2e 32 36 39 37 20 31 39 2e 30 36 34 39 20 33 37 2e 31 31 34 37 20 31 39 2e 38 34 31 36 20 33 37 2e 31 32 34 38 20 32 30 2e 36 32 34 39 48 34 38 2e 33 39 39 37 5a 4d 32 35 2e 33 39 39 39 20 32 38 2e 39 39 39 38 43 32 35 2e 34 31 31 32 20 33 30 2e 33 35 39 33 20 32 35 2e 30 36 39 32 20 33 31 2e 36 39 38 35 20 32 34 2e 34 30 37 35 20 33 32 2e 38 38 36 31 43 32 33 2e 37 34 35 38 20 33 34 2e 30 Data Ascii: 756 15.0861 43.0498 15.1499C41.5647 15.0851 40.1043 15.5453 38.9248 16.4499C38.3483 16.9803 37.89 17.6262 37.5799 18.3456C37.2697 19.0649 37.1147 19.8416 37.1248 20.6249H48.3997ZM25.3999 28.9998C25.4112 30.3593 25.0692 31.6985 24.4075 32.8861C23.7458 34.0
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 34 39 39 20 31 35 2e 34 39 39 39 43 31 32 2e 38 33 38 37 20 31 35 2e 34 36 34 38 20 31 31 2e 36 33 32 34 20 31 35 2e 36 36 38 37 20 31 30 2e 34 39 39 39 20 31 36 2e 30 39 39 39 43 39 2e 35 34 39 39 35 20 31 36 2e 34 37 34 39 20 39 2e 30 37 34 39 35 20 31 37 2e 30 32 34 39 20 39 2e 30 37 34 39 35 20 31 37 2e 37 32 34 39 43 39 2e 30 35 32 37 39 20 31 38 2e 30 30 35 34 20 39 2e 31 30 30 35 38 20 31 38 2e 32 38 36 39 20 39 2e 32 31 34 30 32 20 31 38 2e 35 34 34 33 43 39 2e 33 32 37 34 36 20 31 38 2e 38 30 31 38 20 39 2e 35 30 33 30 32 20 31 39 2e 30 32 37 20 39 2e 37 32 34 39 34 20 31 39 2e 31 39 39 39 43 31 30 2e 36 36 38 38 20 31 39 2e 37 32 38 38 20 31 31 2e 37 30 33 32 20 32 30 2e 30 37 36 34 20 31 32 2e 37 37 34 39 20 32 30 2e 32 32 34 39 4c 31 35 2e 36 Data Ascii: 499 15.4999C12.8387 15.4648 11.6324 15.6687 10.4999 16.0999C9.54995 16.4749 9.07495 17.0249 9.07495 17.7249C9.05279 18.0054 9.10058 18.2869 9.21402 18.5443C9.32746 18.8018 9.50302 19.027 9.72494 19.1999C10.6688 19.7288 11.7032 20.0764 12.7749 20.2249L15.6
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 20 31 38 2e 33 31 36 20 31 31 32 2e 31 37 34 20 31 37 2e 35 37 34 39 43 31 31 31 2e 37 30 38 20 31 36 2e 39 33 36 38 20 31 31 31 2e 30 36 35 20 31 36 2e 34 34 39 39 20 31 31 30 2e 33 32 34 20 31 36 2e 31 37 34 39 43 31 30 39 2e 35 37 34 20 31 35 2e 38 39 30 34 20 31 30 38 2e 37 37 37 20 31 35 2e 37 34 36 34 20 31 30 37 2e 39 37 34 20 31 35 2e 37 34 39 39 43 31 30 37 2e 32 31 38 20 31 35 2e 37 34 32 31 20 31 30 36 2e 34 36 36 20 31 35 2e 38 36 30 34 20 31 30 35 2e 37 34 39 20 31 36 2e 30 39 39 39 43 31 30 35 2e 30 31 39 20 31 36 2e 33 38 32 31 20 31 30 34 2e 33 37 34 20 31 36 2e 38 34 36 39 20 31 30 33 2e 38 37 34 20 31 37 2e 34 34 39 39 43 31 30 33 2e 32 34 35 20 31 38 2e 31 39 35 39 20 31 30 32 2e 37 37 37 20 31 39 2e 30 36 34 31 20 31 30 32 2e 34 39 39 Data Ascii: 18.316 112.174 17.5749C111.708 16.9368 111.065 16.4499 110.324 16.1749C109.574 15.8904 108.777 15.7464 107.974 15.7499C107.218 15.7421 106.466 15.8604 105.749 16.0999C105.019 16.3821 104.374 16.8469 103.874 17.4499C103.245 18.1959 102.777 19.0641 102.499
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 33 33 35 20 31 35 31 2e 33 38 20 32 32 2e 30 36 34 32 20 31 35 31 2e 34 39 39 20 32 34 2e 32 32 34 39 43 31 35 31 2e 34 34 36 20 32 36 2e 33 35 30 32 20 31 35 32 2e 32 30 36 20 32 38 2e 34 31 35 36 20 31 35 33 2e 36 32 34 20 32 39 2e 39 39 39 38 43 31 35 34 2e 33 34 20 33 30 2e 37 30 30 33 20 31 35 35 2e 31 39 35 20 33 31 2e 32 34 32 34 20 31 35 36 2e 31 33 34 20 33 31 2e 35 39 31 33 43 31 35 37 2e 30 37 33 20 33 31 2e 39 34 30 31 20 31 35 38 2e 30 37 35 20 33 32 2e 30 38 37 38 20 31 35 39 2e 30 37 34 20 33 32 2e 30 32 34 38 43 31 36 30 2e 30 37 20 33 32 2e 30 33 36 31 20 31 36 31 2e 30 36 33 20 33 31 2e 39 30 39 39 20 31 36 32 2e 30 32 34 20 33 31 2e 36 34 39 38 43 31 36 32 2e 37 38 31 20 33 31 2e 34 34 34 34 20 31 36 33 2e 35 31 31 20 33 31 2e 31 35 30 Data Ascii: 335 151.38 22.0642 151.499 24.2249C151.446 26.3502 152.206 28.4156 153.624 29.9998C154.34 30.7003 155.195 31.2424 156.134 31.5913C157.073 31.9401 158.075 32.0878 159.074 32.0248C160.07 32.0361 161.063 31.9099 162.024 31.6498C162.781 31.4444 163.511 31.150
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 35 39 32 20 33 32 2e 31 34 35 38 20 31 38 33 2e 37 39 39 20 33 31 2e 38 32 34 38 43 31 38 33 2e 30 37 20 33 31 2e 35 34 31 32 20 31 38 32 2e 34 33 31 20 33 31 2e 30 36 36 32 20 31 38 31 2e 39 34 39 20 33 30 2e 34 34 39 38 43 31 38 31 2e 33 36 34 20 32 39 2e 37 31 35 36 20 31 38 30 2e 39 34 35 20 32 38 2e 38 36 32 34 20 31 38 30 2e 37 32 34 20 32 37 2e 39 34 39 38 43 31 38 30 2e 34 33 34 20 32 36 2e 36 37 39 32 20 31 38 30 2e 32 39 39 20 32 35 2e 33 37 38 20 31 38 30 2e 33 32 34 20 32 34 2e 30 37 34 39 43 31 38 30 2e 32 38 38 20 32 32 2e 36 38 34 34 20 31 38 30 2e 34 34 38 20 32 31 2e 32 39 35 39 20 31 38 30 2e 37 39 39 20 31 39 2e 39 34 39 39 43 31 38 31 2e 30 33 33 20 31 39 2e 30 33 32 32 20 31 38 31 2e 34 36 39 20 31 38 2e 31 37 38 32 20 31 38 32 2e 30 Data Ascii: 592 32.1458 183.799 31.8248C183.07 31.5412 182.431 31.0662 181.949 30.4498C181.364 29.7156 180.945 28.8624 180.724 27.9498C180.434 26.6792 180.299 25.378 180.324 24.0749C180.288 22.6844 180.448 21.2959 180.799 19.9499C181.033 19.0322 181.469 18.1782 182.0
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 30 32 34 39 56 32 30 2e 36 34 39 39 43 32 34 30 2e 35 32 36 20 31 39 2e 38 37 34 39 20 32 34 30 2e 33 35 37 20 31 39 2e 31 31 31 33 20 32 34 30 2e 30 34 39 20 31 38 2e 33 39 39 39 43 32 33 39 2e 37 38 20 31 37 2e 38 33 31 34 20 32 33 39 2e 33 30 37 20 31 37 2e 33 38 35 31 20 32 33 38 2e 37 32 34 20 31 37 2e 31 34 39 39 43 32 33 37 2e 39 32 38 20 31 36 2e 38 34 31 38 20 32 33 37 2e 30 37 36 20 31 36 2e 37 30 35 34 20 32 33 36 2e 32 32 34 20 31 36 2e 37 34 39 39 43 32 33 35 2e 34 39 39 20 31 36 2e 37 35 30 38 20 32 33 34 2e 37 38 20 31 36 2e 38 37 37 37 20 32 33 34 2e 30 39 39 20 31 37 2e 31 32 34 39 43 32 33 33 2e 32 30 36 20 31 37 2e 34 35 36 38 20 32 33 32 2e 33 34 34 20 31 37 2e 38 36 36 37 20 32 33 31 2e 35 32 34 20 31 38 2e 33 34 39 39 5a 4d 31 30 2e Data Ascii: 0249V20.6499C240.526 19.8749 240.357 19.1113 240.049 18.3999C239.78 17.8314 239.307 17.3851 238.724 17.1499C237.928 16.8418 237.076 16.7054 236.224 16.7499C235.499 16.7508 234.78 16.8777 234.099 17.1249C233.206 17.4568 232.344 17.8667 231.524 18.3499ZM10.
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 35 38 2e 33 39 35 34 20 38 2e 30 37 37 35 37 20 35 38 2e 36 38 38 33 20 37 2e 37 34 39 39 36 20 35 38 2e 38 39 39 37 43 37 2e 33 36 31 37 37 20 35 39 2e 31 36 31 35 20 36 2e 39 31 35 35 31 20 35 39 2e 33 32 34 36 20 36 2e 34 34 39 39 36 20 35 39 2e 33 37 34 37 43 35 2e 37 37 32 35 20 35 39 2e 34 38 35 39 20 35 2e 30 38 36 34 32 20 35 39 2e 35 33 36 31 20 34 2e 33 39 39 39 38 20 35 39 2e 35 32 34 37 48 31 2e 38 39 39 39 39 56 35 34 2e 31 39 39 37 48 34 2e 37 39 39 39 37 43 35 2e 33 33 32 39 20 35 34 2e 31 37 30 35 20 35 2e 38 36 37 30 33 20 35 34 2e 31 37 30 35 20 36 2e 33 39 39 39 36 20 35 34 2e 31 39 39 37 43 36 2e 37 38 34 38 36 20 35 34 2e 32 33 32 34 20 37 2e 31 35 39 31 31 20 35 34 2e 33 34 32 39 20 37 2e 34 39 39 39 36 20 35 34 2e 35 32 34 37 43 37 Data Ascii: 58.3954 8.07757 58.6883 7.74996 58.8997C7.36177 59.1615 6.91551 59.3246 6.44996 59.3747C5.7725 59.4859 5.08642 59.5361 4.39998 59.5247H1.89999V54.1997H4.79997C5.3329 54.1705 5.86703 54.1705 6.39996 54.1997C6.78486 54.2324 7.15911 54.3429 7.49996 54.5247C7
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 36 2e 33 36 33 20 36 31 2e 31 34 32 37 20 31 36 37 2e 33 35 32 20 36 31 2e 30 35 38 39 20 31 36 38 2e 33 32 34 20 36 30 2e 38 37 34 36 43 31 36 39 2e 31 33 33 20 36 30 2e 37 30 38 32 20 31 36 39 2e 39 30 39 20 36 30 2e 34 31 32 37 20 31 37 30 2e 36 32 34 20 35 39 2e 39 39 39 37 43 31 37 31 2e 35 38 36 20 35 39 2e 33 37 30 32 20 31 37 32 2e 33 37 37 20 35 38 2e 35 31 31 20 31 37 32 2e 39 32 34 20 35 37 2e 34 39 39 37 5a 4d 31 36 39 2e 35 32 34 20 35 31 2e 33 39 39 37 43 31 36 39 2e 38 38 35 20 35 32 2e 31 38 32 31 20 31 37 30 2e 30 35 36 20 35 33 2e 30 33 38 36 20 31 37 30 2e 30 32 34 20 35 33 2e 38 39 39 37 4c 31 36 39 2e 39 39 39 20 35 33 2e 38 37 34 37 43 31 37 30 2e 30 35 31 20 35 34 2e 36 39 37 32 20 31 36 39 2e 39 30 36 20 35 35 2e 35 32 30 32 20 31 Data Ascii: 6.363 61.1427 167.352 61.0589 168.324 60.8746C169.133 60.7082 169.909 60.4127 170.624 59.9997C171.586 59.3702 172.377 58.511 172.924 57.4997ZM169.524 51.3997C169.885 52.1821 170.056 53.0386 170.024 53.8997L169.999 53.8747C170.051 54.6972 169.906 55.5202 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.7	49816	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	551	OUT	GET /components/zkLxDsbw1hz2/b75b73e313804cf110ea.svg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:03 UTC	511	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:03 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2024 08:56:03 GMT ETag: W/"66e2aca3-61ea" X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-92b2a58748d632a33dfa01dcbe09aa73 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 5822 Server: cloudflare CF-RAY: 8cb7b7d9d9d943ed-EWR
2024-09-30 22:41:03 UTC	858	IN	Data Raw: 36 31 65 61 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 35 30 22 20 68 65 69 67 68 74 3d 22 36 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 30 20 36 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 38 30 2e 31 39 39 36 20 33 37 2e 34 39 39 38 48 38 38 2e 39 32 34 35 56 30 48 38 30 2e 31 39 39 36 56 31 31 2e 35 37 34 39 43 37 39 2e 31 36 31 32 20 31 31 2e 30 36 37 38 20 37 38 2e 30 39 32 35 20 31 30 2e 36 32 35 33 20 37 36 2e 39 39 39 36 20 31 30 2e 32 34 39 39 43 37 35 2e 37 30 32 37 20 39 2e 38 Data Ascii: 61ea<svg width="250" height="65" viewBox="0 0 250 65" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M80.1996 37.4998H88.9245V0H80.1996V11.5749C79.1612 11.0678 78.0925 10.6253 76.9996 10.2499C75.7027 9.8
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 35 32 35 35 20 33 31 2e 38 37 35 34 20 37 33 2e 36 39 35 34 20 33 31 2e 37 35 31 32 20 37 32 2e 39 32 39 35 20 33 31 2e 34 33 37 39 43 37 32 2e 31 36 33 36 20 33 31 2e 31 32 34 36 20 37 31 2e 34 38 34 34 20 33 30 2e 36 33 31 33 20 37 30 2e 39 34 39 36 20 32 39 2e 39 39 39 38 43 36 39 2e 38 37 38 37 20 32 38 2e 32 34 36 36 20 36 39 2e 33 39 36 39 20 32 36 2e 31 39 36 36 20 36 39 2e 35 37 34 36 20 32 34 2e 31 34 39 39 43 36 39 2e 34 35 33 35 20 32 32 2e 30 33 31 35 20 37 30 2e 30 35 32 36 20 31 39 2e 39 33 34 35 20 37 31 2e 32 37 34 36 20 31 38 2e 31 39 39 39 43 37 31 2e 39 30 37 37 20 31 37 2e 34 36 38 35 20 37 32 2e 37 30 33 32 20 31 36 2e 38 39 35 34 20 37 33 2e 35 39 37 35 20 31 36 2e 35 32 36 34 43 37 34 2e 34 39 31 37 20 31 36 2e 31 35 37 34 20 37 35 Data Ascii: 5255 31.8754 73.6954 31.7512 72.9295 31.4379C72.1636 31.1246 71.4844 30.6313 70.9496 29.9998C69.8787 28.2466 69.3969 26.1966 69.5746 24.1499C69.4535 22.0315 70.0526 19.9345 71.2746 18.1999C71.9077 17.4685 72.7032 16.8954 73.5975 16.5264C74.4917 16.1574 75
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 37 35 36 20 31 35 2e 30 38 36 31 20 34 33 2e 30 34 39 38 20 31 35 2e 31 34 39 39 43 34 31 2e 35 36 34 37 20 31 35 2e 30 38 35 31 20 34 30 2e 31 30 34 33 20 31 35 2e 35 34 35 33 20 33 38 2e 39 32 34 38 20 31 36 2e 34 34 39 39 43 33 38 2e 33 34 38 33 20 31 36 2e 39 38 30 33 20 33 37 2e 38 39 20 31 37 2e 36 32 36 32 20 33 37 2e 35 37 39 39 20 31 38 2e 33 34 35 36 43 33 37 2e 32 36 39 37 20 31 39 2e 30 36 34 39 20 33 37 2e 31 31 34 37 20 31 39 2e 38 34 31 36 20 33 37 2e 31 32 34 38 20 32 30 2e 36 32 34 39 48 34 38 2e 33 39 39 37 5a 4d 32 35 2e 33 39 39 39 20 32 38 2e 39 39 39 38 43 32 35 2e 34 31 31 32 20 33 30 2e 33 35 39 33 20 32 35 2e 30 36 39 32 20 33 31 2e 36 39 38 35 20 32 34 2e 34 30 37 35 20 33 32 2e 38 38 36 31 43 32 33 2e 37 34 35 38 20 33 34 2e 30 Data Ascii: 756 15.0861 43.0498 15.1499C41.5647 15.0851 40.1043 15.5453 38.9248 16.4499C38.3483 16.9803 37.89 17.6262 37.5799 18.3456C37.2697 19.0649 37.1147 19.8416 37.1248 20.6249H48.3997ZM25.3999 28.9998C25.4112 30.3593 25.0692 31.6985 24.4075 32.8861C23.7458 34.0
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 34 39 39 20 31 35 2e 34 39 39 39 43 31 32 2e 38 33 38 37 20 31 35 2e 34 36 34 38 20 31 31 2e 36 33 32 34 20 31 35 2e 36 36 38 37 20 31 30 2e 34 39 39 39 20 31 36 2e 30 39 39 39 43 39 2e 35 34 39 39 35 20 31 36 2e 34 37 34 39 20 39 2e 30 37 34 39 35 20 31 37 2e 30 32 34 39 20 39 2e 30 37 34 39 35 20 31 37 2e 37 32 34 39 43 39 2e 30 35 32 37 39 20 31 38 2e 30 30 35 34 20 39 2e 31 30 30 35 38 20 31 38 2e 32 38 36 39 20 39 2e 32 31 34 30 32 20 31 38 2e 35 34 34 33 43 39 2e 33 32 37 34 36 20 31 38 2e 38 30 31 38 20 39 2e 35 30 33 30 32 20 31 39 2e 30 32 37 20 39 2e 37 32 34 39 34 20 31 39 2e 31 39 39 39 43 31 30 2e 36 36 38 38 20 31 39 2e 37 32 38 38 20 31 31 2e 37 30 33 32 20 32 30 2e 30 37 36 34 20 31 32 2e 37 37 34 39 20 32 30 2e 32 32 34 39 4c 31 35 2e 36 Data Ascii: 499 15.4999C12.8387 15.4648 11.6324 15.6687 10.4999 16.0999C9.54995 16.4749 9.07495 17.0249 9.07495 17.7249C9.05279 18.0054 9.10058 18.2869 9.21402 18.5443C9.32746 18.8018 9.50302 19.027 9.72494 19.1999C10.6688 19.7288 11.7032 20.0764 12.7749 20.2249L15.6
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 20 31 38 2e 33 31 36 20 31 31 32 2e 31 37 34 20 31 37 2e 35 37 34 39 43 31 31 31 2e 37 30 38 20 31 36 2e 39 33 36 38 20 31 31 31 2e 30 36 35 20 31 36 2e 34 34 39 39 20 31 31 30 2e 33 32 34 20 31 36 2e 31 37 34 39 43 31 30 39 2e 35 37 34 20 31 35 2e 38 39 30 34 20 31 30 38 2e 37 37 37 20 31 35 2e 37 34 36 34 20 31 30 37 2e 39 37 34 20 31 35 2e 37 34 39 39 43 31 30 37 2e 32 31 38 20 31 35 2e 37 34 32 31 20 31 30 36 2e 34 36 36 20 31 35 2e 38 36 30 34 20 31 30 35 2e 37 34 39 20 31 36 2e 30 39 39 39 43 31 30 35 2e 30 31 39 20 31 36 2e 33 38 32 31 20 31 30 34 2e 33 37 34 20 31 36 2e 38 34 36 39 20 31 30 33 2e 38 37 34 20 31 37 2e 34 34 39 39 43 31 30 33 2e 32 34 35 20 31 38 2e 31 39 35 39 20 31 30 32 2e 37 37 37 20 31 39 2e 30 36 34 31 20 31 30 32 2e 34 39 39 Data Ascii: 18.316 112.174 17.5749C111.708 16.9368 111.065 16.4499 110.324 16.1749C109.574 15.8904 108.777 15.7464 107.974 15.7499C107.218 15.7421 106.466 15.8604 105.749 16.0999C105.019 16.3821 104.374 16.8469 103.874 17.4499C103.245 18.1959 102.777 19.0641 102.499
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 33 33 35 20 31 35 31 2e 33 38 20 32 32 2e 30 36 34 32 20 31 35 31 2e 34 39 39 20 32 34 2e 32 32 34 39 43 31 35 31 2e 34 34 36 20 32 36 2e 33 35 30 32 20 31 35 32 2e 32 30 36 20 32 38 2e 34 31 35 36 20 31 35 33 2e 36 32 34 20 32 39 2e 39 39 39 38 43 31 35 34 2e 33 34 20 33 30 2e 37 30 30 33 20 31 35 35 2e 31 39 35 20 33 31 2e 32 34 32 34 20 31 35 36 2e 31 33 34 20 33 31 2e 35 39 31 33 43 31 35 37 2e 30 37 33 20 33 31 2e 39 34 30 31 20 31 35 38 2e 30 37 35 20 33 32 2e 30 38 37 38 20 31 35 39 2e 30 37 34 20 33 32 2e 30 32 34 38 43 31 36 30 2e 30 37 20 33 32 2e 30 33 36 31 20 31 36 31 2e 30 36 33 20 33 31 2e 39 30 39 39 20 31 36 32 2e 30 32 34 20 33 31 2e 36 34 39 38 43 31 36 32 2e 37 38 31 20 33 31 2e 34 34 34 34 20 31 36 33 2e 35 31 31 20 33 31 2e 31 35 30 Data Ascii: 335 151.38 22.0642 151.499 24.2249C151.446 26.3502 152.206 28.4156 153.624 29.9998C154.34 30.7003 155.195 31.2424 156.134 31.5913C157.073 31.9401 158.075 32.0878 159.074 32.0248C160.07 32.0361 161.063 31.9099 162.024 31.6498C162.781 31.4444 163.511 31.150
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 35 39 32 20 33 32 2e 31 34 35 38 20 31 38 33 2e 37 39 39 20 33 31 2e 38 32 34 38 43 31 38 33 2e 30 37 20 33 31 2e 35 34 31 32 20 31 38 32 2e 34 33 31 20 33 31 2e 30 36 36 32 20 31 38 31 2e 39 34 39 20 33 30 2e 34 34 39 38 43 31 38 31 2e 33 36 34 20 32 39 2e 37 31 35 36 20 31 38 30 2e 39 34 35 20 32 38 2e 38 36 32 34 20 31 38 30 2e 37 32 34 20 32 37 2e 39 34 39 38 43 31 38 30 2e 34 33 34 20 32 36 2e 36 37 39 32 20 31 38 30 2e 32 39 39 20 32 35 2e 33 37 38 20 31 38 30 2e 33 32 34 20 32 34 2e 30 37 34 39 43 31 38 30 2e 32 38 38 20 32 32 2e 36 38 34 34 20 31 38 30 2e 34 34 38 20 32 31 2e 32 39 35 39 20 31 38 30 2e 37 39 39 20 31 39 2e 39 34 39 39 43 31 38 31 2e 30 33 33 20 31 39 2e 30 33 32 32 20 31 38 31 2e 34 36 39 20 31 38 2e 31 37 38 32 20 31 38 32 2e 30 Data Ascii: 592 32.1458 183.799 31.8248C183.07 31.5412 182.431 31.0662 181.949 30.4498C181.364 29.7156 180.945 28.8624 180.724 27.9498C180.434 26.6792 180.299 25.378 180.324 24.0749C180.288 22.6844 180.448 21.2959 180.799 19.9499C181.033 19.0322 181.469 18.1782 182.0
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 30 32 34 39 56 32 30 2e 36 34 39 39 43 32 34 30 2e 35 32 36 20 31 39 2e 38 37 34 39 20 32 34 30 2e 33 35 37 20 31 39 2e 31 31 31 33 20 32 34 30 2e 30 34 39 20 31 38 2e 33 39 39 39 43 32 33 39 2e 37 38 20 31 37 2e 38 33 31 34 20 32 33 39 2e 33 30 37 20 31 37 2e 33 38 35 31 20 32 33 38 2e 37 32 34 20 31 37 2e 31 34 39 39 43 32 33 37 2e 39 32 38 20 31 36 2e 38 34 31 38 20 32 33 37 2e 30 37 36 20 31 36 2e 37 30 35 34 20 32 33 36 2e 32 32 34 20 31 36 2e 37 34 39 39 43 32 33 35 2e 34 39 39 20 31 36 2e 37 35 30 38 20 32 33 34 2e 37 38 20 31 36 2e 38 37 37 37 20 32 33 34 2e 30 39 39 20 31 37 2e 31 32 34 39 43 32 33 33 2e 32 30 36 20 31 37 2e 34 35 36 38 20 32 33 32 2e 33 34 34 20 31 37 2e 38 36 36 37 20 32 33 31 2e 35 32 34 20 31 38 2e 33 34 39 39 5a 4d 31 30 2e Data Ascii: 0249V20.6499C240.526 19.8749 240.357 19.1113 240.049 18.3999C239.78 17.8314 239.307 17.3851 238.724 17.1499C237.928 16.8418 237.076 16.7054 236.224 16.7499C235.499 16.7508 234.78 16.8777 234.099 17.1249C233.206 17.4568 232.344 17.8667 231.524 18.3499ZM10.
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 35 38 2e 33 39 35 34 20 38 2e 30 37 37 35 37 20 35 38 2e 36 38 38 33 20 37 2e 37 34 39 39 36 20 35 38 2e 38 39 39 37 43 37 2e 33 36 31 37 37 20 35 39 2e 31 36 31 35 20 36 2e 39 31 35 35 31 20 35 39 2e 33 32 34 36 20 36 2e 34 34 39 39 36 20 35 39 2e 33 37 34 37 43 35 2e 37 37 32 35 20 35 39 2e 34 38 35 39 20 35 2e 30 38 36 34 32 20 35 39 2e 35 33 36 31 20 34 2e 33 39 39 39 38 20 35 39 2e 35 32 34 37 48 31 2e 38 39 39 39 39 56 35 34 2e 31 39 39 37 48 34 2e 37 39 39 39 37 43 35 2e 33 33 32 39 20 35 34 2e 31 37 30 35 20 35 2e 38 36 37 30 33 20 35 34 2e 31 37 30 35 20 36 2e 33 39 39 39 36 20 35 34 2e 31 39 39 37 43 36 2e 37 38 34 38 36 20 35 34 2e 32 33 32 34 20 37 2e 31 35 39 31 31 20 35 34 2e 33 34 32 39 20 37 2e 34 39 39 39 36 20 35 34 2e 35 32 34 37 43 37 Data Ascii: 58.3954 8.07757 58.6883 7.74996 58.8997C7.36177 59.1615 6.91551 59.3246 6.44996 59.3747C5.7725 59.4859 5.08642 59.5361 4.39998 59.5247H1.89999V54.1997H4.79997C5.3329 54.1705 5.86703 54.1705 6.39996 54.1997C6.78486 54.2324 7.15911 54.3429 7.49996 54.5247C7
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 36 2e 33 36 33 20 36 31 2e 31 34 32 37 20 31 36 37 2e 33 35 32 20 36 31 2e 30 35 38 39 20 31 36 38 2e 33 32 34 20 36 30 2e 38 37 34 36 43 31 36 39 2e 31 33 33 20 36 30 2e 37 30 38 32 20 31 36 39 2e 39 30 39 20 36 30 2e 34 31 32 37 20 31 37 30 2e 36 32 34 20 35 39 2e 39 39 39 37 43 31 37 31 2e 35 38 36 20 35 39 2e 33 37 30 32 20 31 37 32 2e 33 37 37 20 35 38 2e 35 31 31 20 31 37 32 2e 39 32 34 20 35 37 2e 34 39 39 37 5a 4d 31 36 39 2e 35 32 34 20 35 31 2e 33 39 39 37 43 31 36 39 2e 38 38 35 20 35 32 2e 31 38 32 31 20 31 37 30 2e 30 35 36 20 35 33 2e 30 33 38 36 20 31 37 30 2e 30 32 34 20 35 33 2e 38 39 39 37 4c 31 36 39 2e 39 39 39 20 35 33 2e 38 37 34 37 43 31 37 30 2e 30 35 31 20 35 34 2e 36 39 37 32 20 31 36 39 2e 39 30 36 20 35 35 2e 35 32 30 32 20 31 Data Ascii: 6.363 61.1427 167.352 61.0589 168.324 60.8746C169.133 60.7082 169.909 60.4127 170.624 59.9997C171.586 59.3702 172.377 58.511 172.924 57.4997ZM169.524 51.3997C169.885 52.1821 170.056 53.0386 170.024 53.8997L169.999 53.8747C170.051 54.6972 169.906 55.5202 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.7	49815	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:02 UTC	778	OUT	GET /components/zkLxDsbw1hz2/9f07a3eca6d4792ac529.svg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:03 UTC	512	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:03 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2024 08:56:03 GMT ETag: W/"66e2aca3-4886a" X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-bf8e18219780622f2b76c5cae529d44f X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4299 Server: cloudflare CF-RAY: 8cb7b7d9dd9c3300-EWR
2024-09-30 22:41:03 UTC	857	IN	Data Raw: 37 64 39 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 0a 3c 21 2d 2d 49 63 6f 6e 73 20 66 72 6f 6d 20 64 69 72 65 63 74 6f 72 79 20 22 22 2d 2d 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 30 30 22 20 68 65 69 67 68 74 3d 22 32 39 32 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 32 39 32 35 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6e 73 23 22 20 78 6d 6c 6e Data Ascii: 7d9e<?xml version="1.0"?>...Icons from directory ""--><svg xmlns="http://www.w3.org/2000/svg" width="300" height="2925" viewBox="0 0 300 2925"><svg xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:cc="http://creativecommons.org/ns#" xmln
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 2d 37 36 2e 38 37 34 20 37 35 2e 38 32 37 2d 34 32 2e 34 35 37 20 30 2d 37 36 2e 38 37 34 2d 33 33 2e 39 34 39 2d 37 36 2e 38 37 34 2d 37 35 2e 38 32 37 73 33 34 2e 34 31 38 2d 37 35 2e 38 32 37 20 37 36 2e 38 37 34 2d 37 35 2e 38 32 37 63 34 32 2e 34 35 37 20 30 20 37 36 2e 38 37 34 20 33 33 2e 39 34 39 20 37 36 2e 38 37 34 20 37 35 2e 38 32 37 7a 22 2f 3e 3c 67 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 65 66 22 3e 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 62 72 2d 70 6f 6c 79 67 6f 6e 35 35 39 22 20 64 3d 22 6d 20 32 32 38 2e 35 34 32 36 33 2c 31 30 37 2e 36 37 39 37 39 20 2d 32 2e 35 38 37 36 39 2c 2d 31 2e 34 36 35 30 34 20 2d 32 2e 36 37 33 38 38 2c 31 2e 33 30 31 31 32 20 30 2e 35 39 33 37 2c 2d 32 Data Ascii: -76.874 75.827-42.457 0-76.874-33.949-76.874-75.827s34.418-75.827 76.874-75.827c42.457 0 76.874 33.949 76.874 75.827z"/><g fill-rule="evenodd" fill="#ffffef"><polygon id="br-polygon559" d="m 228.54263,107.67979 -2.58769,-1.46504 -2.67388,1.30112 0.5937,-2
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 30 32 2e 37 33 20 32 32 38 2e 31 33 20 31 30 34 2e 37 34 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 62 72 2d 70 6f 6c 79 67 6f 6e 35 36 32 22 20 64 3d 22 6d 20 32 32 38 2e 35 34 32 36 33 2c 31 30 37 2e 36 37 39 37 39 20 2d 32 2e 35 38 37 36 39 2c 2d 31 2e 34 36 35 30 34 20 2d 32 2e 36 37 33 38 38 2c 31 2e 33 30 31 31 32 20 30 2e 35 39 33 37 2c 2d 32 2e 39 31 33 37 37 20 2d 32 2e 30 36 33 37 31 2c 2d 32 2e 31 34 30 39 33 20 32 2e 39 35 34 36 32 2c 2d 30 2e 33 33 35 37 37 20 31 2e 33 39 38 34 33 2c 2d 32 2e 36 32 34 32 39 31 20 31 2e 32 33 32 33 36 2c 32 2e 37 30 36 32 36 31 20 32 2e 39 32 37 39 39 2c 30 2e 35 31 39 30 33 20 2d 32 2e 31 39 32 39 39 2c 32 2e 30 30 38 33 32 20 7a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 2e 33 32 30 Data Ascii: 02.73 228.13 104.74"/><polygon id="br-polygon562" d="m 228.54263,107.67979 -2.58769,-1.46504 -2.67388,1.30112 0.5937,-2.91377 -2.06371,-2.14093 2.95462,-0.33577 1.39843,-2.624291 1.23236,2.706261 2.92799,0.51903 -2.19299,2.00832 z" transform="matrix(1.320
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 2e 31 34 30 39 33 20 32 2e 39 35 34 36 32 2c 2d 30 2e 33 33 35 37 37 20 31 2e 33 39 38 34 33 2c 2d 32 2e 36 32 34 32 39 31 20 31 2e 32 33 32 33 36 2c 32 2e 37 30 36 32 36 31 20 32 2e 39 32 37 39 39 2c 30 2e 35 31 39 30 33 20 2d 32 2e 31 39 32 39 39 2c 32 2e 30 30 38 33 32 20 7a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 2e 35 35 36 37 20 30 20 30 20 31 2e 35 38 37 37 20 2d 31 37 39 2e 32 38 20 31 32 33 2e 38 35 29 22 20 70 6f 69 6e 74 73 3d 22 32 32 38 2e 35 34 20 31 30 37 2e 36 38 20 32 32 35 2e 39 36 20 31 30 36 2e 32 32 20 32 32 33 2e 32 38 20 31 30 37 2e 35 32 20 32 32 33 2e 38 38 20 31 30 34 2e 36 20 32 32 31 2e 38 31 20 31 30 32 2e 34 36 20 32 32 34 2e 37 37 20 31 30 32 2e 31 32 20 32 32 36 2e 31 36 20 39 39 2e 35 30 31 20 32 32 Data Ascii: .14093 2.95462,-0.33577 1.39843,-2.624291 1.23236,2.706261 2.92799,0.51903 -2.19299,2.00832 z" transform="matrix(1.5567 0 0 1.5877 -179.28 123.85)" points="228.54 107.68 225.96 106.22 223.28 107.52 223.88 104.6 221.81 102.46 224.77 102.12 226.16 99.501 22
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 39 30 2e 33 38 29 22 20 70 6f 69 6e 74 73 3d 22 32 32 38 2e 35 34 20 31 30 37 2e 36 38 20 32 32 35 2e 39 36 20 31 30 36 2e 32 32 20 32 32 33 2e 32 38 20 31 30 37 2e 35 32 20 32 32 33 2e 38 38 20 31 30 34 2e 36 20 32 32 31 2e 38 31 20 31 30 32 2e 34 36 20 32 32 34 2e 37 37 20 31 30 32 2e 31 32 20 32 32 36 2e 31 36 20 39 39 2e 35 30 31 20 32 32 37 2e 34 20 31 30 32 2e 32 31 20 32 33 30 2e 33 32 20 31 30 32 2e 37 33 20 32 32 38 2e 31 33 20 31 30 34 2e 37 34 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 62 72 2d 70 6f 6c 79 67 6f 6e 35 36 39 22 20 64 3d 22 6d 20 32 32 38 2e 35 34 32 36 33 2c 31 30 37 2e 36 37 39 37 39 20 2d 32 2e 35 38 37 36 39 2c 2d 31 2e 34 36 35 30 34 20 2d 32 2e 36 37 33 38 38 2c 31 2e 33 30 31 31 32 20 30 2e 35 39 33 37 2c 2d 32 2e 39 Data Ascii: 90.38)" points="228.54 107.68 225.96 106.22 223.28 107.52 223.88 104.6 221.81 102.46 224.77 102.12 226.16 99.501 227.4 102.21 230.32 102.73 228.13 104.74"/><polygon id="br-polygon569" d="m 228.54263,107.67979 -2.58769,-1.46504 -2.67388,1.30112 0.5937,-2.9
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 32 38 2e 31 33 20 31 30 34 2e 37 34 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 62 72 2d 70 6f 6c 79 67 6f 6e 35 37 32 22 20 64 3d 22 6d 20 32 32 38 2e 35 34 32 36 33 2c 31 30 37 2e 36 37 39 37 39 20 2d 32 2e 35 38 37 36 39 2c 2d 31 2e 34 36 35 30 34 20 2d 32 2e 36 37 33 38 38 2c 31 2e 33 30 31 31 32 20 30 2e 35 39 33 37 2c 2d 32 2e 39 31 33 37 37 20 2d 32 2e 30 36 33 37 31 2c 2d 32 2e 31 34 30 39 33 20 32 2e 39 35 34 36 32 2c 2d 30 2e 33 33 35 37 37 20 31 2e 33 39 38 34 33 2c 2d 32 2e 36 32 34 32 39 31 20 31 2e 32 33 32 33 36 2c 32 2e 37 30 36 32 36 31 20 32 2e 39 32 37 39 39 2c 30 2e 35 31 39 30 33 20 2d 32 2e 31 39 32 39 39 2c 32 2e 30 30 38 33 32 20 7a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 2e 30 33 39 33 20 30 20 30 20 31 Data Ascii: 28.13 104.74"/><polygon id="br-polygon572" d="m 228.54263,107.67979 -2.58769,-1.46504 -2.67388,1.30112 0.5937,-2.91377 -2.06371,-2.14093 2.95462,-0.33577 1.39843,-2.624291 1.23236,2.706261 2.92799,0.51903 -2.19299,2.00832 z" transform="matrix(1.0393 0 0 1
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 2c 2d 30 2e 33 33 35 37 37 20 31 2e 33 39 38 34 33 2c 2d 32 2e 36 32 34 32 39 31 20 31 2e 32 33 32 33 36 2c 32 2e 37 30 36 32 36 31 20 32 2e 39 32 37 39 39 2c 30 2e 35 31 39 30 33 20 2d 32 2e 31 39 32 39 39 2c 32 2e 30 30 38 33 32 20 7a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 2e 30 33 39 33 20 30 20 30 20 31 2e 30 36 20 32 30 2e 30 39 38 20 31 37 38 2e 37 31 29 22 20 70 6f 69 6e 74 73 3d 22 32 32 38 2e 35 34 20 31 30 37 2e 36 38 20 32 32 35 2e 39 36 20 31 30 36 2e 32 32 20 32 32 33 2e 32 38 20 31 30 37 2e 35 32 20 32 32 33 2e 38 38 20 31 30 34 2e 36 20 32 32 31 2e 38 31 20 31 30 32 2e 34 36 20 32 32 34 2e 37 37 20 31 30 32 2e 31 32 20 32 32 36 2e 31 36 20 39 39 2e 35 30 31 20 32 32 37 2e 34 20 31 30 32 2e 32 31 20 32 33 30 2e 33 32 Data Ascii: ,-0.33577 1.39843,-2.624291 1.23236,2.706261 2.92799,0.51903 -2.19299,2.00832 z" transform="matrix(1.0393 0 0 1.06 20.098 178.71)" points="228.54 107.68 225.96 106.22 223.28 107.52 223.88 104.6 221.81 102.46 224.77 102.12 226.16 99.501 227.4 102.21 230.32
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 38 2e 35 34 20 31 30 37 2e 36 38 20 32 32 35 2e 39 36 20 31 30 36 2e 32 32 20 32 32 33 2e 32 38 20 31 30 37 2e 35 32 20 32 32 33 2e 38 38 20 31 30 34 2e 36 20 32 32 31 2e 38 31 20 31 30 32 2e 34 36 20 32 32 34 2e 37 37 20 31 30 32 2e 31 32 20 32 32 36 2e 31 36 20 39 39 2e 35 30 31 20 32 32 37 2e 34 20 31 30 32 2e 32 31 20 32 33 30 2e 33 32 20 31 30 32 2e 37 33 20 32 32 38 2e 31 33 20 31 30 34 2e 37 34 22 2f 3e 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 62 72 2d 70 6f 6c 79 67 6f 6e 35 37 39 22 20 64 3d 22 6d 20 32 32 38 2e 35 34 32 36 33 2c 31 30 37 2e 36 37 39 37 39 20 2d 32 2e 35 38 37 36 39 2c 2d 31 2e 34 36 35 30 34 20 2d 32 2e 36 37 33 38 38 2c 31 2e 33 30 31 31 32 20 30 2e 35 39 33 37 2c 2d 32 2e 39 31 33 37 37 20 2d 32 2e 30 36 33 37 31 2c 2d 32 2e 31 Data Ascii: 8.54 107.68 225.96 106.22 223.28 107.52 223.88 104.6 221.81 102.46 224.77 102.12 226.16 99.501 227.4 102.21 230.32 102.73 228.13 104.74"/><polygon id="br-polygon579" d="m 228.54263,107.67979 -2.58769,-1.46504 -2.67388,1.30112 0.5937,-2.91377 -2.06371,-2.1
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 62 72 2d 70 6f 6c 79 67 6f 6e 35 38 32 22 20 64 3d 22 6d 20 32 32 38 2e 35 34 32 36 33 2c 31 30 37 2e 36 37 39 37 39 20 2d 32 2e 35 38 37 36 39 2c 2d 31 2e 34 36 35 30 34 20 2d 32 2e 36 37 33 38 38 2c 31 2e 33 30 31 31 32 20 30 2e 35 39 33 37 2c 2d 32 2e 39 31 33 37 37 20 2d 32 2e 30 36 33 37 31 2c 2d 32 2e 31 34 30 39 33 20 32 2e 39 35 34 36 32 2c 2d 30 2e 33 33 35 37 37 20 31 2e 33 39 38 34 33 2c 2d 32 2e 36 32 34 32 39 31 20 31 2e 32 33 32 33 36 2c 32 2e 37 30 36 32 36 31 20 32 2e 39 32 37 39 39 2c 30 2e 35 31 39 30 33 20 2d 32 2e 31 39 32 39 39 2c 32 2e 30 30 38 33 32 20 7a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 2e 39 31 39 39 38 20 30 20 30 20 2e 39 37 32 38 37 20 31 32 35 2e 38 35 20 32 35 32 Data Ascii: polygon id="br-polygon582" d="m 228.54263,107.67979 -2.58769,-1.46504 -2.67388,1.30112 0.5937,-2.91377 -2.06371,-2.14093 2.95462,-0.33577 1.39843,-2.624291 1.23236,2.706261 2.92799,0.51903 -2.19299,2.00832 z" transform="matrix(.91998 0 0 .97287 125.85 252
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 2e 33 39 38 34 33 2c 2d 32 2e 36 32 34 32 39 31 20 31 2e 32 33 32 33 36 2c 32 2e 37 30 36 32 36 31 20 32 2e 39 32 37 39 39 2c 30 2e 35 31 39 30 33 20 2d 32 2e 31 39 32 39 39 2c 32 2e 30 30 38 33 32 20 7a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 2e 37 37 32 33 30 20 30 20 30 20 2e 37 38 37 36 38 20 39 30 2e 31 37 39 20 32 31 38 2e 34 38 29 22 20 70 6f 69 6e 74 73 3d 22 32 32 38 2e 35 34 20 31 30 37 2e 36 38 20 32 32 35 2e 39 36 20 31 30 36 2e 32 32 20 32 32 33 2e 32 38 20 31 30 37 2e 35 32 20 32 32 33 2e 38 38 20 31 30 34 2e 36 20 32 32 31 2e 38 31 20 31 30 32 2e 34 36 20 32 32 34 2e 37 37 20 31 30 32 2e 31 32 20 32 32 36 2e 31 36 20 39 39 2e 35 30 31 20 32 32 37 2e 34 20 31 30 32 2e 32 31 20 32 33 30 2e 33 32 20 31 30 32 2e 37 33 20 32 Data Ascii: .39843,-2.624291 1.23236,2.706261 2.92799,0.51903 -2.19299,2.00832 z" transform="matrix(.77230 0 0 .78768 90.179 218.48)" points="228.54 107.68 225.96 106.22 223.28 107.52 223.88 104.6 221.81 102.46 224.77 102.12 226.16 99.501 227.4 102.21 230.32 102.73 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.7	49818	35.241.3.184	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:03 UTC	529	OUT	OPTIONS /settings/5QJe3R54G/latest/languages.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://sedo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:03 UTC	628	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Access-Control-Allow-Methods: GET,HEAD,PUT,POST,DELETE Access-Control-Allow-Headers: content-type X-GUploader-UploadID: AD-8ljuMKacSk5JkUfztoGht_K36t5IbiGi8NeoCozhRrq4f-X5V_Am1s8ID-9x3WROdIGpPq1Nd564xNg Date: Mon, 30 Sep 2024 22:41:03 GMT Expires: Mon, 30 Sep 2024 22:41:03 GMT Cache-Control: private, max-age=0 Content-Length: 0 Server: UploadServer Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: US, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.7	49820	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:03 UTC	551	OUT	GET /components/zkLxDsbw1hz2/48d68b70659b28905e87.jpg HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:03 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:03 GMT Content-Type: image/jpeg Content-Length: 30229 Connection: close Cf-Bgj: h2pri ETag: "66e2aca3-7615" Last-Modified: Thu, 12 Sep 2024 08:56:03 GMT Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Sedo-Request-Id: ID-848758bd5-kxgbq-cc8c47b148670afcd85157dca54fe211 CF-Cache-Status: HIT Age: 6748 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7dbd8ac41d8-EWR
2024-09-30 22:41:03 UTC	878	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 e6 00 00 00 03 a0 04 00 01 00 00 00 65 00 00 00 00 00 00 00 ff e1 0e 17 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 27 ef bb bf 27 20 69 64 3d 27 57 35 4d 30 Data Ascii: ExifII*V^(if``02100100ehttp://ns.adobe.com/xap/1.0/<?xpacket begin='' id='W5M0
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 74 73 2f 31 2e 31 2f 27 3e 0a 20 20 3c 64 63 3a 74 69 74 6c 65 3e 0a 20 20 20 3c 72 64 66 3a 41 6c 74 3e 0a 20 20 20 20 3c 72 64 66 3a 6c 69 20 78 6d 6c 3a 6c 61 6e 67 3d 27 78 2d 64 65 66 61 75 6c 74 27 3e 32 30 32 34 20 49 43 41 20 42 61 64 67 65 73 20 28 32 33 30 20 78 20 31 30 31 20 70 78 29 20 2d 20 49 43 41 2d 32 30 32 34 2d 50 6c 61 74 69 6e 75 6d 3c 2f 72 64 66 3a 6c 69 3e 0a 20 20 20 3c 2f 72 64 66 3a 41 6c 74 3e 0a 20 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 0a 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 0a 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 27 27 0a 20 20 78 6d 6c 6e 73 3a 70 64 66 3d 27 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 64 66 2f 31 2e 33 2f 27 3e 0a 20 20 Data Ascii: ts/1.1/'> <dc:title> <rdf:Alt> <rdf:li xml:lang='x-default'>2024 ICA Badges (230 x 101 px) - ICA-2024-Platinum</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> <rdf:Description rdf:about='' xmlns:pdf='http://ns.adobe.com/pdf/1.3/'>
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 27 77 27 3f 3e ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff Data Ascii: <?xpacket end='w'?>C
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 2a 4e 29 36 d3 4f 7f 2f cc 79 66 3a a6 36 35 5d 48 46 2e 0d 28 f2 df 5e ae f7 bf 74 95 bc ee 75 3f 06 be 06 68 3f 12 bc 29 ad 78 9f 5a f1 45 ff 00 87 e2 d1 f5 5b 8b 29 8c 30 e9 c6 ce 3b 4b 6d 3e d2 fe 5b cb 9b 8b d1 fb 95 8d 6e 64 f3 59 99 62 8e 28 84 84 f2 c5 6a 8d 15 52 2e 7c ce 36 76 5a 6a 92 49 ea dd bb de e6 19 8e 65 5b 07 5a 14 a9 d3 84 f9 a0 a5 77 77 26 db b2 56 4f 7d 2d dd fd c7 49 ab 7e cc 76 ba 57 8d fc 0b a3 2f 8a 2f 35 3f 0a f8 d2 4d 52 d8 6a f0 5b 59 c5 a8 d8 dd e9 fa 2d de b1 02 0d 86 6b 0b ab 7b e8 2d 8b db dc a2 2f ca b3 21 8c fe ea 47 72 c3 da 70 5c d7 8c ef ad b5 56 b7 cb ae 9a f7 32 a7 9c 4a 78 7a f2 f6 51 8d 6a 2a 2f 95 bf 76 49 c9 45 bb 59 34 d3 7b 5b 47 6d 4f 2d f1 c7 c1 ed 5f 49 f8 93 aa f8 03 c1 36 5a d7 8a e4 d3 6c 74 cb e2 e2 de Data Ascii: N)6O/yf:65]HF.(^tu?h?)xZE[)0;Km>[ndYb(jR.\|6vZjIe[Zww&VO}-I~vW//5?MRj[Y-k{-/!Grp\V2JxzQj/vIEY4{[GmO-_I6Zlt
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: a0 9a 5b 49 2e 4b ca 80 c2 67 59 14 30 66 50 87 75 43 a7 38 b4 9c 5a 72 76 57 56 bb f5 fb 8e 8a 78 dc 2d 58 54 9c 2a c2 51 a7 17 29 ad 6f 18 ad 5c 9a ec f6 eb ad fc 8d 95 f8 29 f1 5d e7 b9 b6 5f 01 eb c6 7b 3b 68 ef 27 8f ca b5 c8 82 66 99 22 f2 d8 5d 98 e6 96 46 b7 9b 65 b4 2c f7 04 21 63 10 56 8c bd 7b 1a 97 6b 91 e8 be 56 f2 e8 f6 fc cc 7f b5 30 4d 27 ed e2 93 97 2f e0 9b 6e e9 34 95 ed 77 6f bf 6c 5b ef 86 be 3f d3 bc 38 de 2c be f0 96 b3 69 e1 f5 8c 4a da 95 c5 b0 8d 22 89 9f cb 49 ee 2d da 41 7b 6d 6e f2 15 41 3c f6 d1 c7 f3 2b 16 0a ca c5 3a 73 8a 72 71 69 2d db e8 bb fa 79 ec 6b 1c 7e 16 75 7d 8c 6b 46 55 1b b5 96 b7 76 bd 93 da fa 7e 6b bd bd d7 c4 bf b3 65 d5 bf 81 7c 23 e2 2f 06 3e bf e2 6d 7b c4 69 a2 cd 77 a4 79 3a 7a db 59 5a ea 3a 2c fa 95 Data Ascii: [I.KgY0fPuC8ZrvWVx-XT*Q)o\)]_{;h'f"]Fe,!cV{kV0M'/n4wol[?8,iJ"I-A{mnA<+:srqi-yk~u}kFUv~ke\|#/>m{iwy:zYZ:,
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 69 7e 0e 97 56 d7 35 bd 42 7d 36 d3 42 82 0d 16 48 6d 09 9e 28 67 33 17 96 79 ae 22 b6 48 65 9e 46 85 dc 46 22 46 74 9b cd 55 a8 a1 14 db b7 34 9d d2 8f ba bd 17 cb 5d 12 77 7d 76 8d 3c 3b c0 61 67 88 ab 38 28 ce aa 85 38 25 37 52 f5 35 d1 ea 9a 4a cf d7 5d 59 67 e2 3e a5 ab e9 1f 06 7c 03 ae 1f 10 d8 f8 93 c4 5a 37 89 bc 0d 3c 5e 2a b6 8e 3b bb 4b fd 40 ea 12 69 d7 3a 8d bf 9d 12 a4 f1 dc 41 3d c4 3e 69 8d 44 c8 cc e1 40 61 4e a5 e3 4a 2d b5 29 46 51 6a 5b ee ec a5 f3 5a f6 f5 b1 9e 12 30 a9 8d ad 4d 42 54 e9 ce 9d 64 e9 bb c5 a8 f2 b7 ca fc ee af a3 d3 a1 d5 7c 43 d6 2f e3 f8 c9 f0 4b c3 eb 32 7f 65 dc dd f8 97 56 9a 0f 2a 32 ef 7f 63 a2 5e d9 db 4a 27 23 cd 55 8e de fa e9 1a 25 6f 2d da 40 ec bb 91 08 73 6f da d2 5d 35 7f 92 fd 7f ae b9 e1 e9 c7 ea 58 Data Ascii: i~V5B}6BHm(g3y"HeFF"FtU4]w}v<;ag8(8%7R5J]Yg>\|Z7<^;K@i:A=>iD@aNJ-)FQj[Z0MBTd\|C/K2eV2c^J'#U%o-@so]5X
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 2b ad a4 9b bf 32 b2 fc fc d7 e5 d5 46 2f eb 94 e7 4a 8d 4a 74 b9 1a 77 84 92 d2 8b e6 6d da d6 6f 5d 7e 2b df d7 23 f6 b6 f1 8f 89 3c 3d 63 e1 ad 07 45 d4 de c3 4b f1 35 97 88 6d f5 d8 22 82 d9 9b 50 b6 88 69 90 a4 0f 3c b0 c9 34 51 18 ee ee 15 96 dd e2 2e 24 3b 98 ed 50 23 12 dc 63 18 ad 23 2e 6b ae f6 e5 fb ff 00 ae b6 3a b2 4c 3d 2a d3 ab 52 a4 79 a7 4d c1 c2 f7 49 36 dd de 8f 57 d9 5b fe 07 e7 cf f9 fc ab 88 fa a2 d5 8d b7 db 6f 6c ac fc d5 83 ed 97 96 96 9e 7b 95 54 83 ed 57 31 5b f9 ee cc 42 84 87 cd f3 5c b1 0a 15 0e 48 19 34 d2 e6 69 77 69 79 6a 45 49 fb 3a 73 9d 9b e5 8c a5 64 ae dd 95 ec 97 5f 45 af 6d 4f d4 7f 12 f8 3f c2 3a af c3 cb 1f 86 9e 1e f1 f6 95 e1 1d 0a da 28 2d 2f 1e c6 eb 49 bb b9 d4 ac a0 56 69 ad a7 69 75 18 36 8d 42 ec fd b3 53 Data Ascii: +2F/JJtwmo]~+#<=cEK5m"Pi<4Q.$;P#c#.k:L=*RyMI6W[ol{TW1[B\H4iwiyjEI:sd_EmO?:(-/IViiu6BS
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 6d 2e 29 75 2b 1f b5 d9 ea fa 75 ec d6 0b 77 6c d7 de 45 af c5 18 6f a5 2b 66 24 37 0c 7e cb 1b 4c aa 23 cb 26 1c 0d a4 35 42 92 54 6e 9a bf 32 7b ae 92 4f 6d 6f 7b 3d 2d 76 76 ca 9c e5 9a bb 46 76 94 2c a4 e2 ec db c3 ae b6 b5 f5 b7 ab b6 e7 be ea 52 78 4f 52 f8 83 e0 9f 1d a7 8d 7c 3c 96 d6 be 1b f1 3e 97 63 63 f6 db 66 93 53 fe d7 fe cf bd 17 90 5c 7d a8 47 14 36 b6 f6 d2 19 d6 54 0c 5e 48 50 32 b3 14 3a f3 45 ce 32 55 17 2f 2b d2 fb dd a6 9f 97 cf b2 49 76 f3 92 ab 0a 15 a8 3a 15 2e ea c2 4e 5c b2 b4 5c 6e b9 5a b6 ad bd 9d fa 68 70 3a 7e b7 a2 ae 8f fb 49 2b 6a fa 50 6b ed 77 c4 cd 64 ad a8 d9 a9 bb 57 f0 2e 99 12 35 b0 33 03 3a bc aa d1 29 88 38 69 15 a3 5c ba 95 13 cd 1e 5a b6 69 da 4d ef d2 c9 f4 6b 4f e9 6a 74 2a 75 39 f2 ff 00 72 76 e5 8d fd d9 Data Ascii: m.)u+uwlEo+f$7~L#&5BTn2{Omo{=-vvFv,RxOR\|<>ccfS\}G6T^HP2:E2U/+Iv:.N\\nZhp:~I+jPkwdW.53:)8i\ZiMkOjt*u9rv
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: d7 90 c6 51 fa c7 34 65 1d 60 bd e4 e3 ae ba 2b da ec f8 ba b9 0f a2 3b 3f 09 fc 3d f1 9f 8e 96 fd bc 27 a0 dc eb 4b a6 35 ba 5f 98 25 b3 88 5b b5 da ca d6 ea e2 ee e6 df 77 9a b0 4a 46 c0 e0 04 3b b6 e4 66 e3 09 ce fc b1 6e db fa f9 dc e5 c4 63 28 61 9c 55 7a 9c bc fa c5 35 7b da cb f0 6f 7e 97 3a df f8 67 9f 8b bf f4 20 5e 7f df ed 17 ff 00 93 bd 87 e5 55 ec 2a ff 00 23 fc 3f cc e7 fe d3 cb ff 00 e7 ec 7f f0 11 7f e1 9f 3e 30 60 2f fc 20 77 db 47 21 7e d3 a3 ed 07 d4 2f db f0 0f 27 90 01 e4 fa d1 ec 2a ff 00 23 fc 3f cc 3f b5 30 09 59 55 8a 5d ad a7 dc 2f fc 33 ef c6 0c 11 ff 00 08 25 fe 09 24 af da 74 7d a4 9e a4 af db f0 49 ee 48 c9 e3 d2 8f 61 57 f9 1f e1 fe 61 fd a9 80 db db 2b 76 b6 9f 70 df f8 67 9f 8b bf f4 20 5e 7f df ed 17 ff 00 93 bd 87 e5 47 Data Ascii: Q4e`+;?='K5_%[wJF;fnc(aUz5{o~:g ^U#?>0`/ wG!~/'#??0YU]/3%$t}IHaWa+vpg ^G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.7	49819	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:03 UTC	586	OUT	GET /service/common.php HTTP/1.1 Host: sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US
2024-09-30 22:41:03 UTC	548	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:03 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding x-sedo-request-id: ID-848758bd5-ncl44-9a7200a619d76bcb958225af94369fbc expires: Thu, 19 Nov 1981 08:52:00 GMT x-ua-compatible: IE=edge pragma: no-cache strict-transport-security: max-age=2592000 cache-control: no-store, no-cache, must-revalidate x-content-type-options: nosniff x-frame-options: sameorigin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8cb7b7dbd96ec404-EWR
2024-09-30 22:41:03 UTC	211	IN	Data Raw: 63 64 0d 0a 61 3a 31 3a 7b 73 3a 31 3a 22 68 22 3b 61 3a 33 3a 7b 73 3a 31 3a 22 76 22 3b 73 3a 33 3a 22 30 2e 31 22 3b 73 3a 31 3a 22 73 22 3b 69 3a 32 35 35 3b 73 3a 31 3a 22 65 22 3b 61 3a 34 3a 7b 73 3a 32 3a 22 65 63 22 3b 69 3a 39 30 30 3b 73 3a 32 3a 22 65 6d 22 3b 73 3a 33 39 3a 22 50 61 72 61 6d 65 74 65 72 20 22 76 22 20 69 73 20 6d 69 73 73 69 6e 67 20 69 6e 20 74 68 65 20 72 65 71 75 65 73 74 22 3b 73 3a 32 3a 22 65 65 22 3b 73 3a 32 35 3a 22 53 65 72 76 69 63 65 50 61 72 61 6d 65 74 65 72 45 78 63 65 70 74 69 6f 6e 22 3b 73 3a 31 3a 22 70 22 3b 61 3a 31 3a 7b 69 3a 30 3b 73 3a 31 3a 22 76 22 3b 7d 7d 7d 7d 0d 0a Data Ascii: cda:1:{s:1:"h";a:3:{s:1:"v";s:3:"0.1";s:1:"s";i:255;s:1:"e";a:4:{s:2:"ec";i:900;s:2:"em";s:39:"Parameter "v" is missing in the request";s:2:"ee";s:25:"ServiceParameterException";s:1:"p";a:1:{i:0;s:1:"v";}}}}
2024-09-30 22:41:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.7	49821	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:03 UTC	376	OUT	GET /browser-ui/3.55.0/index.module.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:03 UTC	1010	IN	HTTP/1.1 200 OK x-goog-generation: 1726571800863192 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 120986 Content-Encoding: gzip x-goog-hash: crc32c=RR3iIw== x-goog-hash: md5=K5mk1ipxKJR3cOAyrVbzdw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 120986 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8lju3uI5JWLXNOEc9wzczw4460ckHHwH3zIjp4iQD2LXyWIQnDi_J5OwO2g_nuVd3A46nczXeCFa1vQ Server: UploadServer Date: Tue, 17 Sep 2024 11:17:13 GMT Expires: Wed, 17 Sep 2025 11:17:13 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:40 GMT ETag: "2b99a4d62a7128947770e032ad56f377" Content-Type: text/javascript Age: 1164230 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:03 UTC	380	IN	Data Raw: 1f 8b 08 08 18 65 e9 66 02 ff 74 6d 70 35 35 6b 6b 6e 72 75 6d 00 ec bd 0b 7f db 36 f2 28 fa 55 64 fe bb 5e b2 86 15 db 49 b3 5d 29 ac 56 91 95 44 ad 5f 6b d9 e9 43 57 ab a5 25 d8 62 23 93 2a 09 d9 71 2d dd cf 7e 67 06 0f 82 0f d9 4e 36 ed 9e 73 cf e9 2f 95 49 02 18 00 83 c1 60 30 98 19 dc 04 49 8d fb c7 17 bf f2 b1 a8 5f 26 9c ff ce dd fb 30 0a 45 18 cc c2 df 79 e3 72 11 8d 45 18 47 ee fd 75 3c 59 cc f8 49 20 a6 0d ee 3b 75 87 85 d7 f3 38 11 6f 54 86 a3 e0 9a 37 84 ef 8c 46 f2 fb 68 e4 ac fc fb 95 77 2f 92 bb fb 94 cf 2e 07 62 e8 47 fc b6 a6 0b b8 ce c2 61 4e c2 c5 22 89 6a b2 8c bb f0 1c 6f 35 0e c4 78 ea 46 de fd 38 8e 52 51 4b a8 d4 f9 e9 81 cb d9 2c 86 44 28 eb b1 d0 e7 fe 77 f7 f0 b5 9e f0 9b f8 03 97 3d a0 5c f5 34 19 7b 8c 43 c2 75 7c c3 5d 6f d5 Data Ascii: eftmp55kknrum6(Ud^I])VD_kCW%b#*q-~gN6s/I`0I_&0EyrEGu<YI ;u8oT7Fhw/.bGaN"jo5xF8RQK,D(w=\4{Cu\|]o
2024-09-30 22:41:03 UTC	1390	IN	Data Raw: 6b 1e 89 fa 38 e1 81 e0 dd 19 c7 37 d7 51 25 3c 0d 4a 56 e4 30 40 51 03 91 27 b3 67 c8 0b 3c 16 47 3c 49 e2 c4 f5 ee 53 17 3b d1 a5 b7 7f bf 09 c2 19 9f d4 44 ac c6 aa 51 fb ea 9e af fe ed c1 50 b8 63 6f 05 c5 66 71 30 81 52 6b 10 23 b3 ad bc a6 69 ea 94 07 93 7a 30 9f f3 68 d2 99 86 b3 09 a6 03 b8 52 69 a0 a2 15 16 d4 a4 58 13 30 40 c2 bb bf 01 d2 8d 34 1e 3e f0 bb d4 e5 34 6a ea cb 15 17 c7 b7 11 8c f5 9c 27 e2 ae 7f 77 7d 11 cf 52 59 2a f1 1f ca 83 60 c4 e6 a6 9b f8 49 fd 32 9c 09 9e b8 ae 99 06 50 af 22 80 4a 10 fb 5c 62 1c 30 86 6d ac f3 08 fa 9a 04 17 33 0e 5d f3 58 54 9f 2f d2 29 76 7a 76 07 c4 97 78 2b 4d 4d 2b d3 bb 08 ea bf bf 04 00 b2 7f bb cd e8 55 90 5c 11 ca d2 fa 8c 47 57 62 da 8c b6 b6 64 4f 42 3f 5a cc 66 1b be c9 31 88 86 2d fb a5 71 bf Data Ascii: k87Q%<JV0@Q'g<G<IS;DQPcofq0Rk#iz0hRiX0@4>4j'w}RY*`I2P"J\b0m3]XT/)vzvx+MM+U\GWbdOB?Zf1-q
2024-09-30 22:41:03 UTC	1390	IN	Data Raw: 09 07 40 26 b1 d7 08 18 a5 03 33 60 6f dd 04 e0 c2 03 7e e1 30 03 37 37 8f 21 8b c7 74 b7 be 13 88 79 85 03 af 49 88 f7 77 32 ec 9d ba 25 bc e1 7a 23 51 aa 17 9d 3e 1b b1 6b 76 c7 3a ec c2 df 61 c7 7e b2 b9 99 20 c9 2c 97 37 ec c8 3f d6 18 bc f5 8f d8 a9 2f 34 95 21 fa b1 bf 1f 10 31 13 a0 c2 c9 ab d3 e6 04 d7 4d 49 77 53 42 e0 87 c1 64 e8 cb ee c1 17 01 6f 30 c4 ce 45 1c cf 78 60 4d 93 29 7c 2c 4f 9e 69 0b 4b 36 32 a1 d1 ca 1d 91 d4 98 ff 76 11 5e 85 91 b0 cb f7 68 16 40 1f e9 8f 7c f6 1a 5d 77 ea 41 d2 19 bb d7 3c a8 31 5d 59 59 88 3f 37 a6 d0 fc 8b ef 76 20 e3 94 26 31 9b 4a a6 04 7f 81 1d c3 2f b0 e3 16 fd ca 61 9c 12 f5 34 00 b4 8b 8f 20 3d 12 04 42 c3 05 10 c9 f6 2e 2c 15 ee 9d ff de 9d b2 63 76 ed 4f b6 2e d8 ad e7 b5 2e fd ab 86 7b e9 1f 0f ee 86 Data Ascii: @&3`o~077!tyIw2%z#Q>kv:a~ ,7?/4!1MIwSBdo0Ex`M)\|,OiK62v^h@\|]wA<1]YY?7v &1J/a4 =B.,cvO..{
2024-09-30 22:41:03 UTC	1390	IN	Data Raw: 0d 92 db 99 31 6e 5b 48 88 eb 36 5c c7 68 b0 1c 20 a6 f3 cd cd 73 4b a7 95 d0 8e ac 25 8b 5e ca a3 2a b7 c3 8e 40 c8 b1 bf 5d d0 37 76 69 23 cc 3f 67 97 aa bc ff ab c7 8e 41 1a a9 a7 8b 0b 90 77 e0 bb dc d6 77 e0 29 15 81 c0 85 5a 3d 11 2f b8 34 3b fd 23 86 ad 8c fc 84 4d a9 bd b8 cb a4 4f 53 dc 6e c0 43 7a 01 0f 1e d3 82 d6 68 94 2a 09 2b f5 15 44 2d d7 9e a3 e6 6f 1f b6 97 37 7c d2 c7 84 37 49 7c 4d da 19 53 42 17 31 1f 68 97 47 8f c0 e9 46 f2 23 5b 0f c8 ed e8 cc 1e bb f1 55 2f 41 42 57 60 29 f1 c6 17 20 6c cb f6 3e d4 24 d9 68 c4 c4 f5 3c 8e 80 d6 7f 0c 67 b3 43 d8 26 0b 94 24 cb 5f 5d dd 4f 2b 71 3f 9c 98 12 80 32 29 e7 54 a4 7b 66 51 7a bc 5d 1d 98 18 37 6b 9a 77 ca c7 1c ca a8 9c 0f 24 4a 72 d9 d0 12 b1 06 96 4e e3 c5 6c d2 d1 a5 ce e7 13 1a 0c 62 Data Ascii: 1n[H6\h sK%^@]7vi#?gAww)Z=/4;#MOSnCzh+D-o7\|7I\|MSB1hGF#[U/ABW`) l>$h<gC&$_]O+q?2)T{fQz]7kw$JrNlb
2024-09-30 22:41:03 UTC	1390	IN	Data Raw: b5 fa 3f 43 f3 af 05 a5 af 3e 75 d6 7b 5a 39 2c 26 fb 57 65 b3 86 31 11 9f a4 3d ea 3b 0b 11 a7 55 9a 17 4f 1e 6b a1 92 58 1e b3 09 a5 53 07 32 1c e3 cf 1b a4 5d df dd 40 35 1e a4 7a c4 bc ee dc 33 39 66 03 8e e6 8d 78 54 74 c5 2c 95 45 f1 a8 91 4a b7 d0 26 2f 94 f5 89 fa 65 98 a4 52 94 d4 56 11 c2 5e 14 e5 31 56 aa 4a 46 50 2e 44 94 e5 0a c2 2c 1e e3 b9 64 ca 38 3c 64 18 f9 59 ea e8 25 62 7e b6 12 7e ac b0 00 81 5e 92 74 2b 4d 67 52 6b a9 e0 ea 3c 43 fe cd 99 52 a0 81 85 5f f1 1d f6 6d 8f da 90 8c 71 b1 30 e6 1a 82 cc 35 0c ea 82 16 1a 6e 34 c8 c4 44 6b a0 ab cc 4c c6 9f 63 66 d2 73 95 c2 7e cc 48 b7 89 4a fc 10 1f f4 a9 9c 85 aa df 6d 43 d3 7b b4 dd 20 03 e7 71 c7 d9 9a 6e 6d a1 b9 07 67 b0 07 48 d1 c6 a8 91 b7 c2 2a 19 55 20 d3 62 80 9f 9b 70 92 cb ac Data Ascii: ?C>u{Z9,&We1=;UOkXS2]@5z39fxTt,EJ&/eRV^1VJFP.D,d8<dY%b~~^t+MgRk<CR_mq05n4DkLcfs~HJmC{ qnmgH*U bp
2024-09-30 22:41:03 UTC	1390	IN	Data Raw: 94 f0 b6 83 59 78 15 65 8d 2d 64 54 b0 ed 9c a6 e9 af 8f 4f 81 88 14 ac 0b 18 62 18 36 83 30 95 a8 ca ab d4 0c 5d 3a b9 bd df 3b ef 03 6b 3c c9 83 11 f1 9c 40 6d 27 c1 24 5c a4 6b 8a e4 81 63 19 aa 60 7d a1 d7 c7 c0 15 0f f3 55 5d c4 42 c4 d7 8f d4 a6 0a e6 2b 54 25 4b 75 1e bf fe be db 39 83 15 a6 df a3 f5 48 95 92 ce 4b db f3 38 0d 91 72 2d 44 16 0b c8 f6 95 f2 eb 21 2a 66 ef c0 40 e1 64 2e 15 c0 a9 c5 13 22 df 3c e8 8c ac 0b 6d 34 03 24 e7 19 e7 6b 38 33 2c 9e c0 1a 41 3e 0a 27 d9 9a 14 81 1c 4d cc 17 90 85 9c 73 02 f8 91 fc 71 bf dd 7f 47 5f 82 74 aa be 1c 9f 13 73 9c c4 0b c9 01 65 85 62 4d 85 b0 ac c1 fc fd 19 26 5e 12 c2 d4 bd cb 16 36 fa 9a 72 20 fa 89 fa 0e b8 80 55 08 3f 0b f4 bd 53 5f ff 79 0e ab c1 e9 11 7d ff 6d 01 8c 3f 89 54 ca 51 f7 fc ec Data Ascii: Yxe-dTOb60]:;k<@m'$\kc`}U]B+T%Ku9HK8r-D!*f@d."<m4$k83,A>'MsqG_tsebM&^6r U?S_y}m?TQ
2024-09-30 22:41:03 UTC	1390	IN	Data Raw: 6b 2c d9 a2 0d e3 89 42 d9 16 f0 06 03 c5 26 fe 42 19 e3 68 8b a8 cd 4d 1d 2f c3 cc e7 89 c1 d7 04 88 6a 14 dc 06 a1 70 bc 96 30 ba 6e 34 d7 a1 af 1e 29 c4 f3 27 5b a1 ab 70 c3 a9 95 40 7c c5 64 85 33 9d 8e 16 69 06 72 15 44 d5 64 1f 0a b8 8b 12 40 7d e8 52 86 bb 0a 5c ea b5 b7 92 66 40 89 8c 16 51 9a 27 d6 44 8e 2c 4c 27 19 f5 e1 94 13 f6 90 e2 59 56 48 d3 0b 1f 2d 76 9d fa 69 2b 95 7d 48 20 a5 01 40 56 ab b5 51 04 50 36 4b 31 8c 0f 9d 4d 25 20 ee 2b 30 a6 a6 10 86 95 3c 6d f8 47 3e 5e 08 15 70 24 f1 b2 40 26 2a 88 c9 5b f4 1e 41 f6 89 6a bf 60 06 74 3b b9 ab 25 8b 28 92 11 48 10 04 1e 62 c1 76 42 da 1d 25 12 ac c4 19 bc 87 0a 64 aa 9a a0 70 a3 bc 37 27 b0 69 47 96 b8 92 ae 7d d7 5c 4c e3 89 1f 82 6c 00 f8 f5 d3 66 53 76 28 86 95 62 c2 67 fc 0a 26 0d 56 Data Ascii: k,B&BhM/jp0n4)'[p@\|d3irDd@}R\f@Q'D,L'YVH-vi+}H @VQP6K1M% +0<mG>^p$@&*[Aj`t;%(HbvB%dp7'iG}\LlfSv(bg&V
2024-09-30 22:41:03 UTC	1390	IN	Data Raw: 26 72 ff a6 d3 5e f9 86 0a f5 f6 4a 0d 2e ec 6d b5 48 84 73 df fa 9c c9 43 12 56 b0 b9 39 ce 13 f4 ab d4 88 53 59 e5 d9 37 d4 be 36 0b f9 33 a0 76 09 eb ab 09 cd 10 7c 72 5d 2b ed f7 b4 31 2e ef 75 01 0f 35 32 4f 44 7d 71 ed 36 84 41 5b 88 1a 15 af 81 c0 a9 5a e0 7c 46 83 e1 3f 26 37 75 05 ab e4 cc 7f 63 ed c8 27 72 e4 4d 98 93 e2 c8 27 24 94 85 e5 51 34 93 33 cc 0f 94 32 69 a4 c6 87 76 33 15 69 85 ca e9 6d 85 cb 90 43 cf 34 c9 d0 c1 48 ed 0d a5 5c b8 b9 69 d1 0e 40 7d e5 db bd a6 35 8c ec b7 d5 02 86 9b 8b 8c 3e 51 17 9f 9f 44 5c 4d 1f 0c 55 e1 ae e3 5e 34 af ec 6a 70 f3 a0 7c 11 e4 c6 d3 8d 81 bf e8 97 46 39 6e ec e3 5c c3 ea b3 8a 99 94 ef b8 0c ce 93 35 87 ca 36 ac bd bc ca e1 1a ee e3 1b ce cb e5 66 cc ee 9d d9 87 1a 80 72 72 36 ac fd bc b6 fa 17 da Data Ascii: &r^J.mHsCV9SY763v\|r]+1.u52OD}q6A[Z\|F?&7uc'rM'$Q432iv3imC4H\i@}5>QD\MU^4jp\|F9n\56frr6
2024-09-30 22:41:03 UTC	1390	IN	Data Raw: e2 68 5b 1f 60 19 c1 bf fe ff 44 3d 20 4a f4 2c c1 ac 17 dc 9c 71 31 2a 10 60 43 14 d1 a6 92 fd 4e 83 1b 3c bf 2e 75 09 d8 85 dc af e2 a5 36 ae 1d b4 24 93 3d 15 c2 8a 61 5e b9 8d 64 bd 58 46 25 c3 c3 c2 b2 c3 75 0c d5 6f 61 75 32 97 e2 1c eb a9 2d 0d 01 ac c9 88 51 f5 f2 2e d0 f2 98 8a 39 b0 1e 52 01 e0 02 7d 2e cb b6 72 43 d0 70 da 9a 8c 54 c6 67 ff 72 5b 8d f3 70 d9 f3 22 01 4f df 2e 77 5f 2e 9f ef 79 f0 d8 99 05 d7 73 3e f1 24 84 af 9e c9 18 ba 91 d7 52 9d 53 2b af 35 bb 55 c2 bd be af 61 b9 14 df 99 93 52 3a 7b 33 6f 4d 6b 67 c5 e4 85 6c 92 50 01 69 b0 d1 a2 1d 56 a2 ef 54 31 d6 7c 56 d0 94 9c dd f0 43 94 5b 45 b3 05 6a a5 83 dd a8 72 d6 90 d4 40 24 8b 31 08 01 1a c6 d0 2d c4 a5 37 9d ba 8f c8 03 3c 92 e3 8e be cb a1 6d 94 aa f5 85 f7 69 03 64 a2 46 Data Ascii: h[`D= J,q1*`CN<.u6$=a^dXF%uoau2-Q.9R}.rCpTgr[p"O.w_.ys>$RS+5UaR:{3oMkglPiVT1\|VC[Ejr@$1-7<midF
2024-09-30 22:41:03 UTC	1390	IN	Data Raw: 8a f6 c0 75 a7 e1 14 7a 56 46 2f 0a ff 4c a0 4b 65 a2 7c 52 d0 06 58 1d d9 d2 a3 da 19 40 ae ea 01 58 b7 ae a2 c6 c4 b6 53 03 81 47 ab 00 2c 99 5f e4 dc 8f d6 1c 4a 6f 94 63 ec 15 8f c7 93 92 4d 29 ee 25 5c 85 4c a1 7c 45 56 e8 58 85 b7 10 23 f3 40 c1 09 1a 83 84 2c 77 9b 42 b3 00 3c 9c ae ba 83 a5 af 7c cc f9 44 c5 e0 2b 7c 60 f9 e0 87 da 49 fc b4 db 3f c1 47 0a 11 80 22 d2 36 94 99 e3 a3 0a 23 40 b9 ce 7b 59 fa 22 74 56 ee 8f 78 ca f1 23 5d b4 e1 15 20 cb c0 63 be 83 b1 8d e6 14 08 e5 b4 8b 81 50 d0 7c 87 f6 8e 32 0c 00 46 8b 22 b7 7f 0c 07 45 d1 72 ce 0f 0e fa 9d d3 6e f7 08 ad 7a d0 71 1c e3 26 a5 b0 71 e0 91 84 d2 de ff 19 81 80 c4 02 2d f8 1d 5b f0 7b 55 0b 06 d2 b5 fe fd 9e bf 37 f4 1d f9 08 00 06 32 e2 97 ff 7c 28 03 7d 01 8c 1f 10 c6 0f 6b 60 bc Data Ascii: uzVF/LKe\|RX@XSG,_JocM)%\L\|EVX#@,wB<\|D+\|`I?G"6#@{Y"tVx#] cP\|2F"Ernzq&q-[{U72\|(}k`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.7	49822	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:03 UTC	551	OUT	GET /components/zkLxDsbw1hz2/d5634a838071888dbd2a.png HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:03 UTC	476	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:03 GMT Content-Type: image/png Content-Length: 68061 Connection: close Last-Modified: Thu, 12 Sep 2024 08:56:03 GMT ETag: "66e2aca3-109dd" X-Sedo-Request-Id: ID-6b9769b6b9-htrs5-479bfa0ca30ba4fa6b501ba1a41f1a38 X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 787 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cb7b7dbdeb74299-EWR
2024-09-30 22:41:03 UTC	893	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 dd 00 00 00 96 08 06 00 00 00 9b d5 52 75 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRRutEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 78 da ec 7d 07 80 5c 55 b9 ff ef 4e 6f db 5b 36 9b 4d dd f4 02 09 90 40 a8 22 25 20 0a 58 40 8a 05 44 9f 0d 45 14 1f 3e c5 fe 7c 16 9e a2 e2 43 7c 22 0a a2 a0 74 a4 18 ca a3 27 a4 92 b6 d9 d4 dd 6c ef 75 76 7a f9 7f df 77 ef 99 bd 33 3b b3 9b c0 12 f0 cf 9e 30 dc d9 3b e7 9e 7b ce b9 e7 9e df d7 3f 2d 49 05 93 65 b2 bc 0b ca c2 85 0b d0 db db f7 b6 dd 3f 1a 8d c2 6e b7 67 3d cf c5 fc 9b d3 e9 84 df ef cf 5a 7f bc b6 73 dd e7 48 ae 57 fd 31 9f e7 3e 85 c3 e1 c3 1e d7 d1 98 cf 69 d3 a6 e1 4f b7 df d6 4c db 58 3e f7 21 12 89 c0 e1 70 c8 6f 36 8b 35 55 57 d3 34 24 12 09 58 ad 56 19 83 cd 66 93 ef f1 78 5c 8e b1 58 0c 16 8b 05 bc 1d 72 5d 3e f2 79 6e 8f 8f aa 2e 5f c7 75 f9 6f f3 3c a9 73 7c 0f 75 2f 6e 8f 8f 6a 1e b9 4d fe ae ee c9 47 55 87 af e7 7e ab eb b8 Data Ascii: x}\UNo[6M@"% X@DE>\|C\|"t'luvzw3;0;{?-Ie?ng=ZsHW1>iOLX>!po65UW4$XVfx\Xr]>yn._uo<s\|u/njMGU~
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: f0 2d 90 73 7d 7d fd f8 c5 2f 7e 81 9f dd 7c 33 56 2c 5f 6e 80 8e 0e a6 9f fb dc e7 d2 ee db dc dc 24 60 ff ef ff fe ef 98 35 6b 56 ea 7c 5d 5d 9d 80 eb f5 d7 7f 85 fa 51 9d 76 cd e9 67 9c 81 2b e8 1a a6 e0 15 e0 3e f6 d8 63 a8 a9 99 9b aa c3 f7 99 37 6f 1e f6 ee dd 9b 36 2e 2e 45 45 45 47 1d 74 f9 99 9a 37 be 34 30 34 b8 54 25 3e 36 7f 57 e2 4a b3 49 8b 59 1f a7 8a ba 46 80 21 11 4f 6b c7 7c ad 59 bf a8 ae 37 9f 53 22 ea 44 96 3e e9 75 d2 af 57 fa 40 73 fb 66 3d a6 ba 47 e6 d8 54 5d f3 38 cc 3a 5d b3 38 58 f5 69 ac be 65 9b 0f f3 f5 b9 c6 96 29 6e 1e d5 0f e3 9d 33 9f 33 8f 2d 5b 9b 66 31 b3 f9 59 a5 da 34 e6 28 91 31 36 f3 3c 48 fd 44 72 dc 39 32 9f 1b 6b 8e cc fd 31 8b a3 47 ad ad 24 11 05 16 02 61 06 ec c9 ad 78 b2 bc db ca d1 e0 74 73 b5 7b e2 89 ab Data Ascii: -s}}/~\|3V,_n$`5kV\|]]Qvg+>c7o6..EEEGt7404T%>6WJIYF!Ok\|Y7S"D>uW@sf=GT]8:]8Xie)n33-[f1Y4(16<HDr92k1G$axts{
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 6c 19 ac d9 e4 c8 04 c0 90 df 8f 20 3d 97 a9 d5 d5 28 20 62 ac 71 cf 1e 34 d5 d7 d3 f5 04 a8 2c 32 27 02 cb 41 f7 66 49 45 2c 11 a7 f9 0f 8b 61 8f 66 25 20 a4 ad dc ed 71 a3 bb ab 07 2e ea 9b 8d ea 96 50 1b cc 41 0f 0f 0d ea a0 1d 67 ee 56 27 c2 18 1c 92 06 51 c2 04 9f 18 22 d1 75 6e 7a e6 61 ba 1f 13 14 5e af 4f ea 25 92 4a 64 ce d7 e8 1f 91 1e 68 ba 14 81 c1 d6 c2 12 19 fa 3b 1c 0d 0b 08 c7 63 7a ff ac 6c 68 45 ff c2 e1 08 0a 8b 0a 51 31 6d 3a ba 79 2e 87 07 04 e5 f9 1f db 04 44 08 94 4a 4b a7 a0 6a 2a bd 0f 44 90 34 b5 0c eb d6 c7 ac 02 b2 59 53 9c 26 13 47 51 65 2d ac e9 62 5b 2b 13 1f 1a 84 98 b5 1b d6 d5 3c 6e 01 44 e6 b8 69 fd 33 51 62 73 da b1 68 c5 71 88 85 87 b1 85 88 4d 9e 43 1b 83 7a 34 26 73 12 d3 74 02 8c fb c4 fd 77 38 9c fa 3d 68 e8 b1 68 Data Ascii: l =( bq4,2'AfIE,af% q.PAgV'Q"unza^O%Jdh;czlhEQ1m:y.DJKj*D4YS&GQe-b[+<nDi3QbshqMCz4&stw8=hh
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 7e 7f ab ee f5 c2 0b cf e3 fa eb af 17 f1 f2 0b 2f bc 20 86 4b bc 49 6c 21 8e 86 8d 91 1e 79 e4 51 e2 6e b6 e0 87 3f fc 01 a6 4f 9f 91 b2 b0 66 63 a6 f5 eb d6 e3 5b dd ff 81 39 73 6a b0 a7 ae 0e df 22 30 7e fa e9 67 04 bc bd b4 21 2a a3 2b 2e ec 8e c4 d7 28 90 e7 fb 6d d9 b2 45 0c a0 2a 88 c3 d0 01 da 8e 7e e2 d4 f8 7e 7c be 94 36 2d e5 8f f9 d9 cf 7e 56 7c 0b 7b 7b 7b 53 7d 67 f7 24 76 4d ba 84 38 6c e5 76 b4 65 cb 56 b1 50 ae a9 a9 49 8d cb 6c 0d fe 4e 2f 22 4e ed 1f 42 c3 de fd 44 98 74 13 a7 68 43 97 a5 1d d3 2a a6 08 c7 c3 1c 57 31 01 12 8b d1 5b 9b 9b e0 27 8e 30 d2 d1 89 9e 8a 4e 02 b6 72 78 88 bb dc bc 61 03 a6 57 4f 47 e1 31 f9 70 52 7d 3b eb 7e 07 06 09 65 08 58 a8 6d df cc 39 62 c4 d3 d5 d5 a3 bb 19 c1 30 aa 61 b1 24 71 51 4e 7a 0e ac 9b 0c b2 Data Ascii: ~/ KIl!yQn?Ofc[9sj"0~g!+.(mE~~\|6-~V\|{{{S}g$vM8lveVPIlN/"NBDthC*W1['0NrxaWOG1pR};~eXm9b0a$qQNz
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: fa 3b 5a 10 99 56 49 84 46 15 5a da bb 85 23 b5 3b 1d 68 6a 69 42 51 49 a1 70 b1 6c 8b cc 22 73 9e d8 f6 b6 0e 02 c0 36 19 3f 4b 58 a6 54 4d 45 dd be 3d 50 ce 53 75 bb 76 a2 69 f7 3e 04 66 54 a3 f4 f4 52 0c fb 07 b1 e3 b5 8d 08 06 42 b0 79 3c 98 45 5c 72 91 d3 47 73 db c3 b6 c7 a2 52 a8 db 59 8b ce c6 66 04 88 5b 2d 29 2a 81 b7 30 1f 4e 26 4a 84 3b d6 50 df d8 20 d2 02 4b 47 42 88 a8 62 02 67 5e 0f 16 c3 0d 8a ed 23 f6 ef ae 45 59 b1 6e 1f 11 e7 f5 a7 d1 7a 61 4b 6e b6 1c e7 10 93 46 a8 4b 09 12 42 8b c4 12 d3 5d 94 26 41 77 b2 bc eb 40 77 ea d4 a9 22 9e 3d 5a 85 37 30 b3 bf ed db dd ce 9b 6d 97 c5 81 ca 4d e9 68 16 ee 27 17 d6 1b 32 17 56 5f 5f 9f fa 2d 15 ac 21 8b b5 b2 f9 a3 af 01 1b 7a 38 cc 62 71 01 96 1e b3 5c 00 6e c7 d6 ad c4 dd 0e 0a 67 cb 60 61 Data Ascii: ;ZVIFZ#;hjiBQIpl"s6?KXTME=PSuvi>fTRBy<E\rGsRYf[-)*0N&J;P KGBbg^#EYnzaKnFKB]&Aw@w"=Z70mMh'2V__-!z8bq\ng`a
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: 5c 40 dd 08 cd 28 1c bb 26 04 a4 92 70 49 b0 90 24 cd 89 d3 8d d9 b3 66 8b fe b6 b8 ac 14 1e 9a e7 de ae 1e 0c f5 0f a4 2c f7 f9 aa 2e e2 be d9 85 4c ae a3 fb 26 44 e4 6e 10 9f f1 84 01 b4 da 11 af c1 49 4e 77 b2 bc ab 4b 2e ce ed 9d d2 b7 c3 e1 a0 73 fd 96 8d 5b 7e eb 89 1a 9d 63 cf 06 d2 63 71 e5 87 3b 17 ea fa 48 34 f6 86 e7 94 c5 e3 9e 7c dd a7 76 46 35 71 91 d5 7a 6c ea 00 71 a7 3d 7d dd 68 69 6d 81 27 cf 47 00 36 1d a7 9c 73 ae c1 29 05 c4 82 9c 01 82 c1 54 2c 8c 69 6c cc 0d 47 23 11 23 3a 97 ee d7 cb ee 5a e6 c8 58 0c 58 49 83 73 65 0b 66 8f cb 23 96 be cc 45 b1 2b 91 c5 88 bb cc dc a1 9f c0 a1 ab a3 53 c2 7d 4e 9f 55 23 9f 86 bd 7b 31 40 60 30 a5 ba 5a 3e a1 61 3f 22 c1 b0 00 38 8b 38 19 28 d8 d5 69 d6 82 05 58 be fa 24 84 09 3c b8 9f 4a 07 c9 9c Data Ascii: \@(&pI$f,.L&DnINwK.s[~ccq;H4\|vF5qzlq=}him'G6s)T,ilG##:ZXXIsef#E+S}NU#{1@`0Z>a?"88(iX$<J
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: d0 29 d2 03 76 31 f2 7a dd 42 2c b0 e1 58 0f 11 1d 0c fc 0c e0 a2 3f 77 3b d1 7c a8 41 c6 26 c4 a5 c3 86 61 1a e3 c0 ee 2e 89 1e c5 41 45 1c b4 ee fb 5b db 30 d0 d6 0e a7 cd 21 7a dc f6 fd f5 04 a2 01 31 86 1b 6c 6a 94 d0 99 ac 2a 60 df e9 48 32 4a cf 93 d6 09 e1 58 17 5d 33 44 5c 6f 84 c5 f6 34 ff 5c 9f 43 95 34 35 d4 8b 68 bc bc bc 82 b8 66 2d 95 6d c8 9c 62 d1 9c 38 41 c5 5f d6 74 99 f7 c4 5b 2f 5f 77 eb e3 f8 fd 03 af e8 e1 bf 72 51 ab a6 f0 58 c9 44 ba 61 48 c2 64 28 c2 22 8b e3 17 cd c0 37 2e 3b 03 67 9d 30 5b 42 e7 bd eb b9 1b fa dc f4 d4 21 dc fd 7c e3 91 73 09 cc 61 c4 d3 a9 32 b7 c7 86 33 16 95 e2 33 ab ab 70 fc 34 df d8 da ff b7 a1 ac dd d5 8d 4f fd 71 57 aa ff a9 79 a0 71 dc 42 c7 75 df 3a 19 d3 0a de 9d c2 9a 4c d0 52 2f ba 19 60 45 64 4a 54 Data Ascii: )v1zB,X?w;\|A&a.AE[0!z1lj*`H2JX]3D\o4\C45hf-mb8A_t[/_wrQXDaHd("7.;g0[B!\|sa233p4OqWyqBu:LR/`EdJT
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: db 51 44 4b 66 dd 6c 7d 33 bb c6 a9 39 52 b9 83 33 9f 7f b6 f9 18 6b 8e c6 1b 9b 79 3e b2 cd 91 21 5f 9e 38 d0 7d 69 cb 01 dd dc db 61 9b e0 97 09 02 e4 6c 1e 7f ce 97 ee c0 c6 db 3f ff ae 15 35 67 d3 6d 4e 54 61 20 df d7 38 88 ab ee a9 c5 3d 9f 58 04 eb db 3c d6 86 b6 a0 2e 0e cf 02 ba 7c 7e 7e a5 6f 42 88 83 37 02 92 99 5c 9a d2 51 ea 96 b5 5a 4e 10 3e 22 ee 2e a9 83 ae e4 37 8d 0d 61 d7 67 fe 0b 51 23 18 84 7d d6 2c 14 fe e7 b5 92 88 be f9 d0 c1 94 c8 98 83 d0 cf 5b b4 14 25 05 be 9c 20 3b 62 70 a5 65 1d 7b 3a e7 9b db 3a 5a 89 98 6d 76 5b 56 e2 81 ef bf 64 c9 52 14 95 55 0a f0 b2 08 6f c5 f2 e5 c2 5d 8f 58 31 6b 13 f2 9c d4 86 ec 34 2c 54 99 e3 71 89 28 d3 99 e2 72 55 70 08 ae a3 b8 22 d6 1d b2 78 55 0f e8 10 93 3a a2 f3 a4 bf 59 6c c9 75 14 17 ab da Data Ascii: QDKfl}39R3ky>!_8}ial?5gmNTa 8=X<.\|~~oB7\QZN>".7agQ#},[% ;bpe{::Zmv[VdRUo]X1k4,Tq(rUp"xU:Ylu
2024-09-30 22:41:03 UTC	1369	IN	Data Raw: ce 3b 16 37 5e 79 06 2e ff ee 5f b1 f7 50 47 4e e0 e5 f3 5b f6 34 a1 cb 3f 3c ae 6e 97 09 01 ee 57 34 10 c2 40 68 c4 7a d2 3f 1c 45 55 09 51 53 1e 17 5c 16 3b f2 bd ce b7 0d 5c 64 83 4c 8e b6 ec cc 8c be 23 cc cd 70 2c a7 8e 53 01 ee 75 e7 cf c1 57 df 33 2d e7 bd 9e ad eb c5 17 ff b6 47 0c a8 72 b5 c3 a0 fc 7c 6d 37 82 b1 f9 e3 8a 6f 83 31 26 06 92 18 0e eb af 7e fb a0 1e 14 de e7 24 2a d2 69 87 97 8e 2e 9b 76 c4 62 60 26 30 b6 1c ec cb 4a 60 30 28 b0 d5 75 45 be eb 6d 01 dc f1 c4 a2 0a b4 32 b9 cb b1 b8 3a 73 7b 69 06 4b c6 07 b6 74 07 fc 70 c9 12 24 2a 8b 04 70 39 89 fc df ff 7e 7f 4a 54 76 ed b5 d7 0a 00 8d 05 bc b9 44 cb 66 3f da f1 00 d1 bc 7e cc fa 2d 36 20 51 71 9c cd a1 2d 67 53 9f d8 bf b2 bd a7 7f c2 0d 22 39 0f 6c d9 94 29 a2 47 d6 81 42 cb 41 Data Ascii: ;7^y._PGN[4?<nW4@hz?EUQS\;\dL#p,SuW3-Gr\|m7o1&~$i.vb`&0J`0(uEm2:s{iKtp$p9~JTvDf?~-6 Qq-gS"9l)GBA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.7	49823	104.16.141.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:03 UTC	840	OUT	POST /cdn-cgi/challenge-platform/h/g/jsd/r/8cb7b7b79a0b42be HTTP/1.1 Host: sedo.com Connection: keep-alive Content-Length: 15815 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://sedo.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US
2024-09-30 22:41:03 UTC	15815	OUT	Data Raw: 7b 22 77 70 22 3a 22 4a 47 4b 7a 50 6a 77 6c 50 4d 4b 50 6b 24 51 77 62 77 38 53 67 7a 6a 6d 53 61 69 53 46 65 46 43 43 6a 6c 77 59 30 53 31 79 6d 63 79 37 4b 53 44 31 35 2d 51 79 4d 77 66 53 6b 62 4b 75 68 47 47 53 61 73 43 53 41 53 43 6d 43 4b 77 53 76 43 77 4f 51 2b 7a 73 4d 47 45 48 36 7a 31 79 55 47 69 61 34 66 38 24 75 52 7a 4f 55 50 4e 69 70 77 34 30 31 73 46 53 50 4b 4b 4c 46 44 6a 45 68 53 5a 75 68 37 71 45 53 71 7a 24 44 53 6a 4e 4b 53 46 7a 6a 6a 7a 55 6b 7a 46 53 77 79 53 67 4d 54 53 77 70 45 53 57 32 6c 61 75 47 35 77 61 73 68 4b 53 6a 32 45 53 6a 51 2d 67 53 2d 6a 53 77 45 76 37 33 4b 36 66 69 6d 6a 75 6a 77 71 4f 69 47 30 50 55 78 49 71 31 53 65 7a 6a 46 42 58 47 53 6c 54 47 79 24 37 31 74 76 75 53 2d 49 71 73 55 65 61 7a 53 33 73 65 37 46 Data Ascii: {"wp":"JGKzPjwlPMKPk$Qwbw8SgzjmSaiSFeFCCjlwY0S1ymcy7KSD15-QyMwfSkbKuhGGSasCSASCmCKwSvCwOQ+zsMGEH6z1yUGia4f8$uRzOUPNipw401sFSPKKLFDjEhSZuh7qESqz$DSjNKSFzjjzUkzFSwySgMTSwpESW2lauG5washKSj2ESjQ-gS-jSwEv73K6fimjujwqOiG0PUxIq1SezjFBXGSlTGy$71tvuS-IqsUeazS3se7F
2024-09-30 22:41:04 UTC	935	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:04 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.sedo.com; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=itmuogqaPJK7saFDTF_fyu0pyVny1hYgqTADDY.C0RU-1727736064-1.2.1.1-PcUEw1c2YkNc.Y5WSO57Vu3rwOL3CC.bCWUqmPrdddsu78cOnvul1bbtzOkX_iAN16PsYBqvCArsJRih2v2dB1.nXPgBHaP10f31sbho94hjGSx8a_XUgxV2InLZ3RzrTfZy9.t6Oc7hxeK8F4_cbPTQEpTB9o1.d5Io9RVVReevLSn189bVxgPiD.2.uxCk4pPA5T3ZYaES3u6A_MnEX3WvZ5zIMiReH8J45XXG6Gjwo5NgE7DIwHUu.tEySi7xvR84amyJ.PUk0yjxw55jFDvoqacOzYt4qPq.NrOkLOrEMR4IQaY1TdrUN69XO_gY3YN_6ItFeEAm9xJjWP676qp3B6PieDnOg4MrhzmxQnO9Fno.aWX8FeMDROU1bhKC; Path=/; Expires=Tue, 30-Sep-25 22:41:04 GMT; Domain=.sedo.com; HttpOnly; Secure; SameSite=None; Partitioned Strict-Transport-Security: max-age=2592000 Server: cloudflare CF-RAY: 8cb7b7dfbef8443e-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.7	49825	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:04 UTC	785	OUT	GET /c7r/assets/static/images/icons/favicon.ico?v=dLJ3bx2xjj HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:04 UTC	510	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:04 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 20 Aug 2024 09:45:32 GMT ETag: W/"66c465bc-3aee" X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-2984730b419e874439f493c66079cdaa X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2862 Server: cloudflare CF-RAY: 8cb7b7e08fe00ce5-EWR
2024-09-30 22:41:04 UTC	859	IN	Data Raw: 33 61 65 65 0d 0a 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 8b 41 07 11 8d 41 04 20 8d 41 04 20 8d 41 04 20 8e 41 03 2e 8d 41 04 20 8d 41 04 20 8b 41 07 11 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 3aee00 %6 % h6(0` $@@@@AA A A A.A A A@@@@
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 00 00 00 00 8e 41 01 55 90 40 00 ff 90 40 00 fe 90 40 00 ff 90 40 00 fe 90 40 00 fb 90 40 00 fb 90 40 00 fe 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fe 90 40 00 fe 90 40 00 fb 90 40 00 fe 90 40 00 ff 90 40 00 ff 8f 40 01 b8 8d 41 04 20 00 00 00 00 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 00 00 00 00 90 40 00 72 90 40 00 ff 90 40 00 fb 90 40 00 fb 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 Data Ascii: @AU@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@A @@@r@@@@@@@@@
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 90 40 00 72 90 40 00 ff 90 40 00 fb 90 40 00 ff 90 40 00 fb 90 40 00 fe 90 40 00 ff 90 40 00 ff 90 40 00 e6 8f 40 01 8c 8e 41 02 47 8b 41 07 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 00 00 00 00 8f 40 04 01 8f 40 01 8c 90 40 00 ff 90 40 00 fe 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fb 90 40 00 ff 8f 40 01 c7 00 00 00 00 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 00 00 00 00 90 40 00 72 90 40 00 ff 90 40 00 fb 90 40 00 fb 90 40 00 ff 90 40 00 ff 8f 40 01 c7 8e 41 01 55 8e 40 03 04 00 00 00 00 8f 40 04 01 00 00 00 00 8e 40 03 04 8e 40 03 04 8e 40 03 04 8f 40 04 Data Ascii: @r@@@@@@@@@AGA@@@@@@@@@@@@@@@@@@@@r@@@@@@AU@@@@@@
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 40 04 01 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 8b 41 07 11 8e 41 02 3b 8f 40 01 7d 8f 40 01 aa 90 40 00 d8 90 40 00 fb 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fe 90 40 00 fb 90 40 00 fb 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fe 90 40 00 ff 90 40 00 fb 8e 41 03 2e 00 00 00 00 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 8f 40 04 01 00 00 00 00 8e 40 03 04 8e 41 02 47 8f 40 01 aa 90 40 00 e6 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fe 90 40 00 fb 90 40 00 fb 90 40 00 fb 90 40 00 fe Data Ascii: @@@AA;@}@@@@@@@@@@@@@@@@@@@@@@@@@@A.@@@@AG@@@@@@@@@@@@
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fe 90 40 00 fe 90 40 00 fb 90 40 00 fb 90 40 00 ff 90 40 00 fe 90 40 00 ff 8f 40 01 c7 8e 41 03 2e 00 00 00 00 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 00 00 00 00 8e 41 02 47 90 40 00 ff 90 40 00 fb 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fe 90 40 00 fe 90 40 00 fb 90 40 00 fb 90 40 00 fb 90 40 00 ff 90 Data Ascii: @@@@@@@@@@@@@@@@@@@@@@A.@@AG@@@@@@@@@@@@@@@@@@@@@@@@@@
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 8f 40 02 63 90 40 00 f0 90 40 00 72 00 00 00 00 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 00 00 00 00 8d 41 04 20 90 40 00 fb 90 40 00 ff 90 40 00 fe 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fb 90 40 00 ff 8f 40 01 b8 00 00 00 00 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 8e 41 Data Ascii: @@@@c@@r@@A @@@@@@@@@@@@@@@@@@@@A
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fb 90 40 00 ff 8f 40 01 7d 00 00 00 00 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 00 00 00 00 8e 41 03 2e 90 40 00 e6 90 40 00 ff 90 40 00 fb 90 40 00 fe 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fb 90 40 00 ff 8f 40 01 7d 00 00 00 00 8e 40 03 Data Ascii: @@@@@@@@@@@@@@}@@A.@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@}@
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 00 00 00 8f 40 04 01 8e 40 03 04 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8f 40 04 01 8e 40 03 04 8e 40 03 04 8e 40 03 04 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8e 40 03 04 8e 40 03 04 8e 40 03 04 8f 40 04 01 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff 00 00 ff fc 00 07 Data Ascii: @@@@@@@@@@@@@@@@@@
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fd 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fb 90 40 00 ff 90 40 00 e7 8e 41 02 25 00 00 00 00 91 3f 02 01 00 00 00 00 91 3f 02 01 00 00 00 00 8e 40 02 0e 90 40 00 e7 90 40 00 ff 90 40 00 ff 90 40 00 fd 90 40 00 fd 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 f1 90 40 00 cf 90 40 01 b7 8f 40 01 aa 8f 40 01 aa 90 40 01 b7 90 40 00 cf 90 40 00 f8 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fb 90 40 00 ff 8f 40 01 aa 00 00 00 00 8f 40 02 03 00 00 00 00 91 3f 02 01 00 00 00 00 8e 40 02 0e 90 40 00 e7 90 40 00 ff 90 40 00 fb 90 40 00 ff 90 40 00 ff 90 40 00 de 8f 40 01 8f 8f 40 02 48 8e 41 03 18 91 3f 02 01 00 00 00 00 00 00 00 00 00 Data Ascii: @@@@@@@@@@@@A%??@@@@@@@@@@@@@@@@@@@@@@@@@@@@?@@@@@@@@@HA?
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: ff 90 40 00 f8 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fd 90 40 00 fb 90 40 00 fb 90 40 00 ff 90 40 00 ff 90 40 00 ff 8f 40 01 aa 8e 40 02 0e 00 00 00 00 91 3f 02 01 00 00 00 00 00 00 00 00 00 00 00 00 91 3f 02 01 00 00 00 00 8e 41 02 25 90 40 00 f8 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fd 90 40 00 fb 90 40 00 fb 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fb 90 40 01 b7 8f 40 02 48 00 00 00 00 8f 40 02 03 91 3f 02 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 02 03 00 00 00 00 8f 40 01 82 90 40 00 ff 90 40 Data Ascii: @@@@@@@@@@@@@@@@@@@@@@??A%@@@@@@@@@@@@@@@@@@@@@@H@?@@@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.7	49826	35.241.3.184	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:04 UTC	605	OUT	GET /settings/5QJe3R54G/latest/languages.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://sedo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:04 UTC	1138	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:04 GMT Cache-Control: public, max-age=1800, s-maxage=60 Expires: Mon, 30 Sep 2024 22:42:04 GMT Last-Modified: Mon, 01 Jul 2024 18:20:16 GMT ETag: W/"5d01c6607f89fa44337e89c24a15522c" Vary: Accept-Encoding x-goog-generation: 1719858016677072 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 102 Content-Type: application/json x-goog-hash: crc32c=SMqD3w== x-goog-hash: md5=XQHGYH+J+kQzfonCShVSLA== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: AD-8ljuhJj_vPmzvrbIxMaPvdbDtyDzNmmneFuinWZ8vVZrgt-cog0p1Ky86STSVN4LrHPhO4aQWz_iOVw Server: UploadServer Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: US, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-30 22:41:04 UTC	162	IN	Data Raw: 39 37 0d 0a 7b 22 6c 61 6e 67 75 61 67 65 73 41 76 61 69 6c 61 62 6c 65 22 3a 5b 22 65 6e 22 2c 22 64 65 22 2c 22 66 72 22 2c 22 70 74 22 2c 22 65 73 22 2c 22 7a 68 22 2c 22 69 74 22 2c 22 6e 6c 22 2c 22 6b 6f 22 2c 22 70 6c 22 5d 2c 22 65 64 69 74 61 62 6c 65 4c 61 6e 67 75 61 67 65 73 22 3a 5b 22 65 6e 22 2c 22 64 65 22 2c 22 66 72 22 2c 22 70 74 22 2c 22 65 73 22 2c 22 7a 68 22 2c 22 69 74 22 2c 22 6e 6c 22 2c 22 6b 6f 22 2c 22 70 6c 22 2c 22 72 75 22 5d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 97{"languagesAvailable":["en","de","fr","pt","es","zh","it","nl","ko","pl"],"editableLanguages":["en","de","fr","pt","es","zh","it","nl","ko","pl","ru"]}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.7	49824	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:04 UTC	588	OUT	GET /c7r/assets/static/images/icons/site.webmanifest?v=dLJ3bx2xjj HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sedo.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:04 UTC	950	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:04 GMT Content-Type: application/octet-stream Content-Length: 522 Connection: close Set-Cookie: campaignId=; Max-Age=86400; Path=/; Secure; HttpOnly Last-Modified: Tue, 20 Aug 2024 09:45:32 GMT ETag: "66c465bc-20a" X-Sedo-Request-Id: ID-848758bd5-ncl44-00644da40bd24a9f37cb0d3bde08bcb5 Accept-Ranges: bytes X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://sedo.com Access-Control-Allow-Max-Age: 86400 Access-Control-Allow-Max-Methods: GET Vary: Origin CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=j5schh_8BiwoXJLXt7ZBS0lDQVdo5_35ipXMyFuTbxM-1727736064-1.0.1.1-Y3oQW4ddDJYuk6Dm85_6SWENd1CwxY0lRh.gts.dOHrl5d4mgBfFrOTbzb7GzdQt_cWtSwEgLYb1xa7dUIa7Dg; path=/; expires=Mon, 30-Sep-24 23:11:04 GMT; domain=.sedo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8cb7b7e08fe87d11-EWR
2024-09-30 22:41:04 UTC	419	IN	Data Raw: 7b 0a 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 53 65 64 6f 22 2c 0a 20 20 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 53 65 64 6f 22 2c 0a 20 20 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 63 37 72 2f 61 73 73 65 74 73 2f 73 74 61 74 69 63 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 31 39 32 78 31 39 32 2e 70 6e 67 3f 76 3d 64 4c 4a 33 62 78 32 78 6a 6a 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 31 39 32 78 31 39 32 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 Data Ascii: { "name": "Sedo", "short_name": "Sedo", "icons": [ { "src": "/c7r/assets/static/images/icons/android-chrome-192x192.png?v=dLJ3bx2xjj", "sizes": "192x192", "type": "image/png" }, {
2024-09-30 22:41:04 UTC	103	IN	Data Raw: 0a 20 20 20 20 5d 2c 0a 20 20 20 20 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 20 22 23 30 30 36 30 61 39 22 2c 0a 20 20 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 20 22 23 30 30 36 30 61 39 22 2c 0a 20 20 20 20 22 64 69 73 70 6c 61 79 22 3a 20 22 73 74 61 6e 64 61 6c 6f 6e 65 22 0a 7d 0a Data Ascii: ], "theme_color": "#0060a9", "background_color": "#0060a9", "display": "standalone"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.7	49827	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:04 UTC	632	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1 Host: sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US
2024-09-30 22:41:04 UTC	367	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:04 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8024 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Strict-Transport-Security: max-age=2592000 Server: cloudflare CF-RAY: 8cb7b7e16c424381-EWR
2024-09-30 22:41:04 UTC	1002	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 66 2c 67 2c 6c 2c 6d 2c 76 2c 78 2c 7a 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 55 2c 42 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 42 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 70 61 72 73 65 49 6e 74 28 55 28 32 33 39 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 32 32 31 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 55 28 32 35 36 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 31 38 33 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 36 34 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 55 28 32 35 32 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 32 34 38 29 29 2f 37 2a 28 2d 70 Data Ascii: window._cf_chl_opt={cFPWv:'g'};~function(V,f,g,l,m,v,x,z){V=b,function(c,d,U,B,C){for(U=b,B=c();!![];)try{if(C=parseInt(U(239))/1(-parseInt(U(221))/2)+parseInt(U(256))/3(-parseInt(U(183))/4)+-parseInt(U(264))/5+parseInt(U(252))/6+-parseInt(U(248))/7*(-p
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 2c 4b 29 3a 4c 7c 7c 46 28 44 2b 4a 2c 43 5b 4a 5d 29 29 3a 46 28 44 2b 4a 2c 4b 29 2c 49 2b 2b 29 3b 72 65 74 75 72 6e 20 45 3b 66 75 6e 63 74 69 6f 6e 20 46 28 4d 2c 4e 2c 61 33 29 7b 61 33 3d 62 2c 4f 62 6a 65 63 74 5b 61 33 28 32 31 33 29 5d 5b 61 33 28 32 36 38 29 5d 5b 61 33 28 31 37 31 29 5d 28 45 2c 4e 29 7c 7c 28 45 5b 4e 5d 3d 5b 5d 29 2c 45 5b 4e 5d 5b 61 33 28 32 32 38 29 5d 28 4d 29 7d 7d 2c 76 3d 56 28 32 30 36 29 5b 56 28 32 30 37 29 5d 28 27 3b 27 29 2c 78 3d 76 5b 56 28 31 39 30 29 5d 5b 56 28 31 36 36 29 5d 28 76 29 2c 66 5b 56 28 32 30 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 42 2c 43 2c 61 36 2c 44 2c 45 2c 46 2c 47 29 7b 66 6f 72 28 61 36 3d 56 2c 44 3d 4f 62 6a 65 63 74 5b 61 36 28 31 38 35 29 5d 28 43 29 2c 45 3d 30 3b 45 3c 44 5b 61 Data Ascii: ,K):L\|\|F(D+J,C[J])):F(D+J,K),I++);return E;function F(M,N,a3){a3=b,Object[a3(213)][a3(268)][a3(171)](E,N)\|\|(E[N]=[]),E[N][a3(228)](M)}},v=V(206)[V(207)](';'),x=v[V(190)][V(166)](v),f[V(209)]=function(B,C,a6,D,E,F,G){for(a6=V,D=Object[a6(185)](C),E=0;E<D[a
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 61 28 32 32 38 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 4a 3d 28 4b 2d 2d 2c 4b 3d 3d 30 26 26 28 4b 3d 4d 61 74 68 5b 61 61 28 32 35 34 29 5d 28 32 2c 4d 29 2c 4d 2b 2b 29 2c 48 5b 53 5d 3d 4c 2b 2b 2c 53 74 72 69 6e 67 28 52 29 29 7d 69 66 28 4a 21 3d 3d 27 27 29 7b 69 66 28 4f 62 6a 65 63 74 5b 61 61 28 32 31 33 29 5d 5b 61 61 28 32 36 38 29 5d 5b 61 61 28 31 37 31 29 5d 28 49 2c 4a 29 29 7b 69 66 28 32 35 36 3e 4a 5b 61 61 28 32 31 38 29 5d 28 30 29 29 7b 66 6f 72 28 47 3d 30 3b 47 3c 4d 3b 4f 3c 3c 3d 31 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 61 28 32 32 38 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 61 28 32 Data Ascii: ==P?(P=0,N[aa(228)](F(O)),O=0):P++,T>>=1,G++);J=(K--,K==0&&(K=Math[aa(254)](2,M),M++),H[S]=L++,String(R))}if(J!==''){if(Object[aa(213)][aa(268)][aa(171)](I,J)){if(256>J[aa(218)](0)){for(G=0;G<M;O<<=1,P==E-1?(P=0,N[aa(228)](F(O)),O=0):P++,G++);for(T=J[aa(2
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 54 3d 64 28 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 4c 3d 47 5b 33 5d 3d 54 2c 4b 5b 61 64 28 32 32 38 29 5d 28 54 29 3b 3b 29 7b 69 66 28 50 3e 44 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 32 35 34 29 5d 28 32 2c 4a 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 3c 53 3f 31 3a 30 29 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 54 3d 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 32 35 34 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b Data Ascii: T=d(Q);break;case 2:return''}for(L=G[3]=T,K[ad(228)](T);;){if(P>D)return'';for(Q=0,R=Math[ad(254)](2,J),M=1;R!=M;S=N&O,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=M*(0<S?1:0),M<<=1);switch(T=Q){case 0:for(Q=0,R=Math[ad(254)](2,8),M=1;M!=R;S=N&O,O>>=1,O==0&&(O=E,N=F(P++
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 64 29 26 26 28 64 3d 21 21 5b 5d 2c 44 3d 79 28 29 2c 6a 28 63 2e 72 2c 44 2e 72 29 2c 44 2e 65 26 26 6b 28 61 66 28 32 35 30 29 2c 44 2e 65 29 29 7d 2c 67 5b 61 65 28 31 39 34 29 5d 21 3d 3d 61 65 28 32 32 35 29 29 3f 42 28 29 3a 66 5b 61 65 28 31 38 34 29 5d 3f 67 5b 61 65 28 31 38 34 29 5d 28 61 65 28 32 32 30 29 2c 42 29 3a 28 43 3d 67 5b 61 65 28 32 34 36 29 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 67 5b 61 65 28 32 34 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 67 29 7b 61 67 3d 61 65 2c 43 28 29 2c 67 5b 61 67 28 31 39 34 29 5d 21 3d 3d 61 67 28 32 32 35 29 26 26 28 67 5b 61 67 28 32 34 36 29 5d 3d 43 2c 42 28 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 37 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 61 37 3d 56 3b 74 72 79 7b 72 65 74 75 72 6e Data Ascii: d)&&(d=!![],D=y(),j(c.r,D.r),D.e&&k(af(250),D.e))},g[ae(194)]!==ae(225))?B():f[ae(184)]?g[ae(184)](ae(220),B):(C=g[ae(246)]\|\|function(){},g[ae(246)]=function(ag){ag=ae,C(),g[ag(194)]!==ag(225)&&(g[ag(246)]=C,B())})}function y(a7,B,C,D,E,F){a7=V;try{return
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 4d 71 41 2c 46 75 6e 63 74 69 6f 6e 2c 4d 65 73 73 61 67 65 3a 20 2c 64 2e 63 6f 6f 6b 69 65 2c 6c 6f 61 64 69 6e 67 2c 44 4b 61 56 55 46 2c 20 2d 20 2c 70 75 73 68 2c 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 2c 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 30 2e 30 39 38 34 37 33 36 31 38 39 39 32 31 39 31 32 32 3a 31 37 32 37 37 33 34 33 35 31 3a 59 4d 46 62 39 4a 6f 6b 34 45 4c 4b 55 31 54 61 61 6d 33 79 68 5f 53 74 71 30 34 52 63 4b 31 72 52 6a 69 39 4c 53 35 51 73 4c 63 2c 63 68 6c 41 70 69 55 72 6c 2c 25 32 62 2c 63 68 6c 41 70 69 52 75 6d 57 69 64 67 65 74 41 67 65 4d 73 2c 69 73 4e 61 4e 2c 38 36 39 30 33 39 32 44 74 5a 72 62 58 2c 2f 6a 73 64 2f 72 2f 2c 41 52 6f 79 67 56 42 76 73 4e 71 4a 4b 51 74 2d 45 30 78 50 55 68 6d 35 37 7a 6c 24 31 75 4c 59 46 54 Data Ascii: MqA,Function,Message: ,d.cookie,loading,DKaVUF, - ,push,createElement,fromCharCode,0.09847361899219122:1727734351:YMFb9Jok4ELKU1Taam3yh_Stq04RcK1rRji9LS5QsLc,chlApiUrl,%2b,chlApiRumWidgetAgeMs,isNaN,8690392DtZrbX,/jsd/r/,ARoygVBvsNqJKQt-E0xPUhm57zl$1uLYFT
2024-09-30 22:41:04 UTC	177	IN	Data Raw: 20 65 3d 61 28 29 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 3d 66 2d 31 36 36 2c 68 3d 65 5b 66 5d 2c 68 7d 2c 62 28 63 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 63 2c 64 2c 61 30 29 7b 72 65 74 75 72 6e 20 61 30 3d 56 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 5b 61 30 28 32 32 32 29 5d 26 26 30 3c 63 5b 61 30 28 32 32 32 29 5d 5b 61 30 28 32 31 33 29 5d 5b 61 30 28 32 34 32 29 5d 5b 61 30 28 31 37 31 29 5d 28 64 29 5b 61 30 28 32 35 31 29 5d 28 61 30 28 31 37 37 29 29 7d 7d 28 29 Data Ascii: e=a(),b=function(f,g,h){return f=f-166,h=e[f],h},b(c,d)}function n(c,d,a0){return a0=V,d instanceof c[a0(222)]&&0<c[a0(222)][a0(213)][a0(242)][a0(171)](d)[a0(251)](a0(177))}}()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.7	49828	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:04 UTC	621	OUT	GET /cdn-cgi/challenge-platform/h/g/jsd/r/8cb7b7b79a0b42be HTTP/1.1 Host: sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US
2024-09-30 22:41:04 UTC	217	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 30 Sep 2024 22:41:04 GMT Content-Length: 0 Connection: close allow: POST Strict-Transport-Security: max-age=2592000 Server: cloudflare CF-RAY: 8cb7b7e4ebca7c94-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.7	49829	35.241.3.184	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:04 UTC	522	OUT	OPTIONS /settings/5QJe3R54G/latest/en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://sedo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:04 UTC	628	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Access-Control-Allow-Methods: GET,HEAD,PUT,POST,DELETE Access-Control-Allow-Headers: content-type X-GUploader-UploadID: AD-8ljtturwc7EVqDpwaVuq6NFuGsl8WPEsCZ_vReXiBoSh_FXDyNpiPzZZsOyL368qDv713DU1_Npz-PA Date: Mon, 30 Sep 2024 22:41:04 GMT Expires: Mon, 30 Sep 2024 22:41:04 GMT Cache-Control: private, max-age=0 Content-Length: 0 Server: UploadServer Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: US, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.7	49830	104.16.140.114	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:04 UTC	558	OUT	GET /c7r/assets/static/images/icons/favicon.ico?v=dLJ3bx2xjj HTTP/1.1 Host: cdn.sedo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
2024-09-30 22:41:04 UTC	510	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:04 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 20 Aug 2024 09:45:32 GMT ETag: W/"66c465bc-3aee" X-Sedo-Request-Id: ID-6b9769b6b9-94tgl-2984730b419e874439f493c66079cdaa X-Frame-Options: sameorigin Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2862 Server: cloudflare CF-RAY: 8cb7b7e57c3e0c9e-EWR
2024-09-30 22:41:04 UTC	859	IN	Data Raw: 33 61 65 65 0d 0a 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 8b 41 07 11 8d 41 04 20 8d 41 04 20 8d 41 04 20 8e 41 03 2e 8d 41 04 20 8d 41 04 20 8b 41 07 11 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 3aee00 %6 % h6(0` $@@@@AA A A A.A A A@@@@
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 00 00 00 00 8e 41 01 55 90 40 00 ff 90 40 00 fe 90 40 00 ff 90 40 00 fe 90 40 00 fb 90 40 00 fb 90 40 00 fe 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fe 90 40 00 fe 90 40 00 fb 90 40 00 fe 90 40 00 ff 90 40 00 ff 8f 40 01 b8 8d 41 04 20 00 00 00 00 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 00 00 00 00 90 40 00 72 90 40 00 ff 90 40 00 fb 90 40 00 fb 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 Data Ascii: @AU@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@A @@@r@@@@@@@@@
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 90 40 00 72 90 40 00 ff 90 40 00 fb 90 40 00 ff 90 40 00 fb 90 40 00 fe 90 40 00 ff 90 40 00 ff 90 40 00 e6 8f 40 01 8c 8e 41 02 47 8b 41 07 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 00 00 00 00 8f 40 04 01 8f 40 01 8c 90 40 00 ff 90 40 00 fe 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fb 90 40 00 ff 8f 40 01 c7 00 00 00 00 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 00 00 00 00 90 40 00 72 90 40 00 ff 90 40 00 fb 90 40 00 fb 90 40 00 ff 90 40 00 ff 8f 40 01 c7 8e 41 01 55 8e 40 03 04 00 00 00 00 8f 40 04 01 00 00 00 00 8e 40 03 04 8e 40 03 04 8e 40 03 04 8f 40 04 Data Ascii: @r@@@@@@@@@AGA@@@@@@@@@@@@@@@@@@@@r@@@@@@AU@@@@@@
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 40 04 01 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 8b 41 07 11 8e 41 02 3b 8f 40 01 7d 8f 40 01 aa 90 40 00 d8 90 40 00 fb 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fe 90 40 00 fb 90 40 00 fb 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fe 90 40 00 ff 90 40 00 fb 8e 41 03 2e 00 00 00 00 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 8f 40 04 01 00 00 00 00 8e 40 03 04 8e 41 02 47 8f 40 01 aa 90 40 00 e6 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fe 90 40 00 fb 90 40 00 fb 90 40 00 fb 90 40 00 fe Data Ascii: @@@AA;@}@@@@@@@@@@@@@@@@@@@@@@@@@@A.@@@@AG@@@@@@@@@@@@
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fe 90 40 00 fe 90 40 00 fb 90 40 00 fb 90 40 00 ff 90 40 00 fe 90 40 00 ff 8f 40 01 c7 8e 41 03 2e 00 00 00 00 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 00 00 00 00 8e 41 02 47 90 40 00 ff 90 40 00 fb 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fe 90 40 00 fe 90 40 00 fb 90 40 00 fb 90 40 00 fb 90 40 00 ff 90 Data Ascii: @@@@@@@@@@@@@@@@@@@@@@A.@@AG@@@@@@@@@@@@@@@@@@@@@@@@@@
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 8f 40 02 63 90 40 00 f0 90 40 00 72 00 00 00 00 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 00 00 00 00 8d 41 04 20 90 40 00 fb 90 40 00 ff 90 40 00 fe 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fb 90 40 00 ff 8f 40 01 b8 00 00 00 00 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 8e 41 Data Ascii: @@@@c@@r@@A @@@@@@@@@@@@@@@@@@@@A
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fb 90 40 00 ff 8f 40 01 7d 00 00 00 00 8e 40 03 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8e 40 03 04 00 00 00 00 8e 41 03 2e 90 40 00 e6 90 40 00 ff 90 40 00 fb 90 40 00 fe 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fb 90 40 00 ff 8f 40 01 7d 00 00 00 00 8e 40 03 Data Ascii: @@@@@@@@@@@@@@}@@A.@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@}@
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 00 00 00 8f 40 04 01 8e 40 03 04 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8f 40 04 01 8e 40 03 04 8e 40 03 04 8e 40 03 04 8e 40 03 04 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 04 01 8e 40 03 04 8e 40 03 04 8e 40 03 04 8e 40 03 04 8f 40 04 01 8f 40 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff 00 00 ff fc 00 07 Data Ascii: @@@@@@@@@@@@@@@@@@
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fd 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fb 90 40 00 ff 90 40 00 e7 8e 41 02 25 00 00 00 00 91 3f 02 01 00 00 00 00 91 3f 02 01 00 00 00 00 8e 40 02 0e 90 40 00 e7 90 40 00 ff 90 40 00 ff 90 40 00 fd 90 40 00 fd 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 f1 90 40 00 cf 90 40 01 b7 8f 40 01 aa 8f 40 01 aa 90 40 01 b7 90 40 00 cf 90 40 00 f8 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fb 90 40 00 ff 8f 40 01 aa 00 00 00 00 8f 40 02 03 00 00 00 00 91 3f 02 01 00 00 00 00 8e 40 02 0e 90 40 00 e7 90 40 00 ff 90 40 00 fb 90 40 00 ff 90 40 00 ff 90 40 00 de 8f 40 01 8f 8f 40 02 48 8e 41 03 18 91 3f 02 01 00 00 00 00 00 00 00 00 00 Data Ascii: @@@@@@@@@@@@A%??@@@@@@@@@@@@@@@@@@@@@@@@@@@@?@@@@@@@@@HA?
2024-09-30 22:41:04 UTC	1369	IN	Data Raw: ff 90 40 00 f8 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fd 90 40 00 fb 90 40 00 fb 90 40 00 ff 90 40 00 ff 90 40 00 ff 8f 40 01 aa 8e 40 02 0e 00 00 00 00 91 3f 02 01 00 00 00 00 00 00 00 00 00 00 00 00 91 3f 02 01 00 00 00 00 8e 41 02 25 90 40 00 f8 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fd 90 40 00 fb 90 40 00 fb 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 ff 90 40 00 fb 90 40 01 b7 8f 40 02 48 00 00 00 00 8f 40 02 03 91 3f 02 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8f 40 02 03 00 00 00 00 8f 40 01 82 90 40 00 ff 90 40 Data Ascii: @@@@@@@@@@@@@@@@@@@@@@??A%@@@@@@@@@@@@@@@@@@@@@@H@?@@@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.7	49831	35.241.3.184	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:04 UTC	383	OUT	GET /settings/5QJe3R54G/latest/languages.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:05 UTC	992	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:04 GMT Cache-Control: public, max-age=1800, s-maxage=60 Expires: Mon, 30 Sep 2024 22:42:04 GMT Last-Modified: Mon, 01 Jul 2024 18:20:16 GMT ETag: W/"5d01c6607f89fa44337e89c24a15522c" Vary: Accept-Encoding x-goog-generation: 1719858016677072 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 102 Content-Type: application/json x-goog-hash: crc32c=SMqD3w== x-goog-hash: md5=XQHGYH+J+kQzfonCShVSLA== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: AD-8ljvdKNa3x5d2q-UyZR5_JVvraGpztWEmxxVqYmaRwntGZGRSGiMQvUY0zS-2oafm3UHUv5c Server: UploadServer Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: US, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-30 22:41:05 UTC	157	IN	Data Raw: 39 37 0d 0a 7b 22 6c 61 6e 67 75 61 67 65 73 41 76 61 69 6c 61 62 6c 65 22 3a 5b 22 65 6e 22 2c 22 64 65 22 2c 22 66 72 22 2c 22 70 74 22 2c 22 65 73 22 2c 22 7a 68 22 2c 22 69 74 22 2c 22 6e 6c 22 2c 22 6b 6f 22 2c 22 70 6c 22 5d 2c 22 65 64 69 74 61 62 6c 65 4c 61 6e 67 75 61 67 65 73 22 3a 5b 22 65 6e 22 2c 22 64 65 22 2c 22 66 72 22 2c 22 70 74 22 2c 22 65 73 22 2c 22 7a 68 22 2c 22 69 74 22 2c 22 6e 6c 22 2c 22 6b 6f 22 2c 22 70 6c 22 2c 22 72 75 22 5d 7d 0d 0a Data Ascii: 97{"languagesAvailable":["en","de","fr","pt","es","zh","it","nl","ko","pl"],"editableLanguages":["en","de","fr","pt","es","zh","it","nl","ko","pl","ru"]}
2024-09-30 22:41:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.7	49832	35.241.3.184	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:05 UTC	598	OUT	GET /settings/5QJe3R54G/latest/en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://sedo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:05 UTC	1139	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:05 GMT Cache-Control: public, max-age=1800, s-maxage=60 Expires: Mon, 30 Sep 2024 22:42:05 GMT Last-Modified: Mon, 01 Jul 2024 18:20:16 GMT ETag: W/"51ae3cced305b129176fe984bb934a7c" Vary: Accept-Encoding x-goog-generation: 1719858016670615 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 7977 Content-Type: application/json x-goog-hash: crc32c=DUE4Tw== x-goog-hash: md5=Ua48ztMFsSkXb+mEu5NKfA== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: AD-8ljsqdab3qcNN4OCYGQphnEDFS-9t2p9aUhImtjphz0BvU5t-e5unoYu_Tqij26Wh55ZHEbgEqcKD_Q Server: UploadServer Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: US, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-30 22:41:05 UTC	1390	IN	Data Raw: 39 62 64 0d 0a 7b 22 73 65 74 74 69 6e 67 73 49 64 22 3a 22 35 51 4a 65 33 52 35 34 47 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 33 31 2e 31 37 2e 31 35 38 22 2c 22 69 73 4c 61 74 65 73 74 22 3a 74 72 75 65 2c 22 62 75 74 74 6f 6e 44 69 73 70 6c 61 79 4c 6f 63 61 74 69 6f 6e 22 3a 22 62 6c 22 2c 22 6d 6f 72 65 49 6e 66 6f 42 75 74 74 6f 6e 55 72 6c 22 3a 22 22 2c 22 61 63 74 69 6f 6e 43 6c 69 63 6b 4f 6e 56 69 65 77 43 6f 6e 73 65 6e 74 49 6e 53 65 61 72 63 68 41 70 70 22 3a 22 22 2c 22 6c 61 79 6f 75 74 22 3a 31 2c 22 70 72 69 76 61 63 79 4d 6f 64 61 6c 22 3a 31 2c 22 75 72 6c 43 6f 6e 73 65 6e 74 49 6e 66 6f 22 3a 22 22 2c 22 73 74 79 6c 65 73 43 73 73 22 3a 22 22 2c 22 62 75 74 74 6f 6e 50 72 69 76 61 63 79 4f 70 65 6e 49 63 6f 6e 22 3a 22 22 2c 22 62 75 Data Ascii: 9bd{"settingsId":"5QJe3R54G","version":"31.17.158","isLatest":true,"buttonDisplayLocation":"bl","moreInfoButtonUrl":"","actionClickOnViewConsentInSearchApp":"","layout":1,"privacyModal":1,"urlConsentInfo":"","stylesCss":"","buttonPrivacyOpenIcon":"","bu
2024-09-30 22:41:05 UTC	1110	IN	Data Raw: 65 72 44 6f 6d 61 69 6e 73 22 3a 5b 5d 2c 22 73 68 6f 77 45 72 72 6f 72 4f 6e 55 6e 61 6c 6c 6f 77 65 64 44 6f 6d 61 69 6e 22 3a 66 61 6c 73 65 2c 22 74 72 61 63 6b 69 6e 67 50 72 6f 76 69 64 65 72 55 73 65 64 54 6f 47 65 74 54 72 61 63 6b 69 6e 67 45 76 65 6e 74 73 22 3a 5b 5d 2c 22 64 61 74 61 53 63 6f 70 65 73 22 3a 5b 22 64 61 74 61 4c 61 79 65 72 22 5d 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 63 6f 75 6e 74 64 6f 77 6e 46 6f 72 53 68 6f 77 69 6e 67 50 72 69 6d 61 72 79 56 69 65 77 41 67 61 69 6e 22 3a 30 2c 22 62 61 6e 6e 65 72 50 6c 61 63 65 6d 65 6e 74 22 3a 31 2c 22 63 6f 72 6e 65 72 4d 6f 64 61 6c 50 6c 61 63 65 6d 65 6e 74 22 3a 31 2c 22 6c 61 6e 67 75 61 67 65 53 65 6c 65 63 74 6f 72 54 79 70 65 22 3a 32 2c 22 63 6f 6e 73 65 6e 74 Data Ascii: erDomains":[],"showErrorOnUnallowedDomain":false,"trackingProviderUsedToGetTrackingEvents":[],"dataScopes":["dataLayer"],"language":"en","countdownForShowingPrimaryViewAgain":0,"bannerPlacement":1,"cornerModalPlacement":1,"languageSelectorType":2,"consent
2024-09-30 22:41:05 UTC	1390	IN	Data Raw: 31 30 30 30 0d 0a 73 2f 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 3c 2f 61 3e 26 6e 62 73 70 3b 61 6e 64 5c 6e 69 6e 20 6f 75 72 26 6e 62 73 70 3b 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 73 65 64 6f 2e 63 6f 6d 2f 75 73 2f 61 62 6f 75 74 2d 75 73 2f 70 6f 6c 69 63 69 65 73 2f 70 72 6f 74 65 63 74 69 6e 67 2d 79 6f 75 72 2d 70 72 69 76 61 63 79 2f 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 50 72 69 76 61 63 79 20 4e 6f 74 69 63 65 73 3c 2f 61 3e 2e 20 54 65 63 68 6e 69 63 61 6c 6c 79 20 6e 65 63 65 73 73 61 72 79 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 61 6c 73 6f 20 73 65 74 20 77 68 65 6e 20 79 6f 75 5c 6e 63 68 6f 6f 73 65 20 74 6f 20 5c 22 3c 61 20 68 72 65 66 Data Ascii: 1000s/\" target=\"_blank\">Cookie Policy</a> and\nin our <a href=\"https://sedo.com/us/about-us/policies/protecting-your-privacy/\" target=\"_blank\">Privacy Notices</a>. Technically necessary cookies are also set when you\nchoose to \"<a href
2024-09-30 22:41:05 UTC	1390	IN	Data Raw: 64 76 61 6e 63 65 64 53 65 74 74 69 6e 67 73 22 3a 66 61 6c 73 65 2c 22 63 75 73 74 6f 6d 43 73 73 22 3a 74 72 75 65 2c 22 61 62 54 65 73 74 69 6e 67 22 3a 74 72 75 65 2c 22 70 72 65 76 69 65 77 50 75 62 6c 69 73 68 22 3a 74 72 75 65 2c 22 64 73 61 72 22 3a 66 61 6c 73 65 2c 22 61 75 64 69 74 4c 6f 67 22 3a 66 61 6c 73 65 2c 22 63 75 73 74 6f 6d 48 74 6d 6c 22 3a 66 61 6c 73 65 2c 22 61 6c 6c 6f 77 65 64 44 6f 6d 61 69 6e 73 22 3a 66 61 6c 73 65 7d 2c 22 63 6f 6e 73 65 6e 74 54 65 6d 70 6c 61 74 65 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 70 72 65 64 65 66 69 6e 65 64 22 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 3a 22 48 31 56 6c 35 4e 69 64 6a 57 58 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 34 30 2e 31 37 2e 34 35 22 2c 22 63 61 74 65 67 6f 72 79 53 6c 75 67 22 Data Ascii: dvancedSettings":false,"customCss":true,"abTesting":true,"previewPublish":true,"dsar":false,"auditLog":false,"customHtml":false,"allowedDomains":false},"consentTemplates":[{"type":"predefined","templateId":"H1Vl5NidjWX","version":"40.17.45","categorySlug"
2024-09-30 22:41:05 UTC	1324	IN	Data Raw: 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 41 75 74 6f 55 70 64 61 74 65 41 6c 6c 6f 77 65 64 22 3a 74 72 75 65 2c 22 64 65 66 61 75 6c 74 43 6f 6e 73 65 6e 74 53 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 73 75 62 43 6f 6e 73 65 6e 74 73 22 3a 5b 5d 2c 22 6c 65 67 61 6c 42 61 73 69 73 4c 69 73 74 22 3a 5b 5d 2c 22 64 69 73 61 62 6c 65 4c 65 67 61 6c 42 61 73 69 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 73 54 68 69 72 64 43 6f 75 6e 74 72 79 22 3a 66 61 6c 73 65 2c 22 5f 6d 65 74 61 22 3a 7b 22 6e 61 6d 65 22 3a 22 48 6f 74 6a 61 72 22 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 70 72 65 64 65 66 69 6e 65 64 22 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 3a 22 71 45 73 34 74 34 39 52 67 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 31 22 2c 22 63 61 74 65 67 6f 72 79 53 Data Ascii: ed":false,"isAutoUpdateAllowed":true,"defaultConsentStatus":false,"subConsents":[],"legalBasisList":[],"disableLegalBasis":false,"usesThirdCountry":false,"_meta":{"name":"Hotjar"}},{"type":"predefined","templateId":"qEs4t49Rg","version":"1.1.1","categoryS
2024-09-30 22:41:05 UTC	1390	IN	Data Raw: 31 30 30 30 0d 0a 22 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 69 73 53 68 61 72 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 44 65 61 63 74 69 76 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 41 75 74 6f 55 70 64 61 74 65 41 6c 6c 6f 77 65 64 22 3a 74 72 75 65 2c 22 64 65 66 61 75 6c 74 43 6f 6e 73 65 6e 74 53 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 73 75 62 43 6f 6e 73 65 6e 74 73 22 3a 5b 5d 2c 22 6c 65 67 61 6c 42 61 73 69 73 4c 69 73 74 22 3a 5b 5d 2c 22 64 69 73 61 62 6c 65 4c 65 67 61 6c 42 61 73 69 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 73 54 68 69 72 64 43 6f 75 6e 74 72 79 22 3a 66 61 6c 73 65 2c 22 5f 6d 65 74 61 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 73 74 61 74 69 63 2e 63 6f 6d 22 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 70 72 65 64 65 Data Ascii: 1000"","isHidden":false,"isShared":false,"isDeactivated":false,"isAutoUpdateAllowed":true,"defaultConsentStatus":false,"subConsents":[],"legalBasisList":[],"disableLegalBasis":false,"usesThirdCountry":false,"_meta":{"name":"gstatic.com"}},{"type":"prede
2024-09-30 22:41:05 UTC	1390	IN	Data Raw: 6c 73 65 2c 22 69 73 53 68 61 72 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 44 65 61 63 74 69 76 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 41 75 74 6f 55 70 64 61 74 65 41 6c 6c 6f 77 65 64 22 3a 74 72 75 65 2c 22 64 65 66 61 75 6c 74 43 6f 6e 73 65 6e 74 53 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 73 75 62 43 6f 6e 73 65 6e 74 73 22 3a 5b 5d 2c 22 6c 65 67 61 6c 42 61 73 69 73 4c 69 73 74 22 3a 5b 5d 2c 22 64 69 73 61 62 6c 65 4c 65 67 61 6c 42 61 73 69 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 73 54 68 69 72 64 43 6f 75 6e 74 72 79 22 3a 66 61 6c 73 65 2c 22 5f 6d 65 74 61 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 22 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 Data Ascii: lse,"isShared":false,"isDeactivated":false,"isAutoUpdateAllowed":true,"defaultConsentStatus":false,"subConsents":[],"legalBasisList":[],"disableLegalBasis":false,"usesThirdCountry":false,"_meta":{"name":"Google Tag Manager"}},{"type":"custom","templateId"
2024-09-30 22:41:05 UTC	1324	IN	Data Raw: 20 61 6e 64 20 74 68 65 69 72 20 66 75 6e 63 74 69 6f 6e 73 20 74 6f 20 77 6f 72 6b 20 70 72 6f 70 65 72 6c 79 2e 20 57 69 74 68 6f 75 74 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 2c 20 73 65 72 76 69 63 65 73 20 73 75 63 68 20 61 73 20 74 68 65 20 75 73 65 20 6f 66 20 61 6e 20 61 63 63 6f 75 6e 74 20 6f 72 20 61 20 74 72 61 6e 73 61 63 74 69 6f 6e 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 76 69 64 65 64 2e 22 2c 22 69 73 45 73 73 65 6e 74 69 61 6c 22 3a 74 72 75 65 2c 22 69 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 7d 2c 7b 22 63 61 74 65 67 6f 72 79 53 6c 75 67 22 3a 22 66 75 6e 63 74 69 6f 6e 61 6c 22 2c 22 6c 61 62 65 6c 22 3a 22 50 65 72 66 6f 72 6d 61 6e 63 65 20 63 6f 6f 6b 69 65 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 49 6e 20 74 68 Data Ascii: and their functions to work properly. Without these cookies, services such as the use of an account or a transaction cannot be provided.","isEssential":true,"isHidden":false},{"categorySlug":"functional","label":"Performance cookies","description":"In th
2024-09-30 22:41:05 UTC	1390	IN	Data Raw: 31 30 30 30 0d 0a 22 69 73 41 63 74 69 76 65 22 3a 74 72 75 65 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 5f 43 41 5f 4f 4e 4c 59 22 2c 22 73 68 6f 77 4f 6e 50 61 67 65 4c 6f 61 64 22 3a 74 72 75 65 2c 22 72 65 73 68 6f 77 43 4d 50 22 3a 74 72 75 65 2c 22 72 65 73 68 6f 77 41 66 74 65 72 44 61 79 73 22 3a 33 36 35 2c 22 69 61 62 41 67 72 65 65 6d 65 6e 74 45 78 69 73 74 73 22 3a 66 61 6c 73 65 2c 22 66 69 72 73 74 4c 61 79 65 72 54 69 74 6c 65 22 3a 22 59 6f 75 72 20 43 6f 6f 6b 69 65 20 73 65 74 74 69 6e 67 73 22 2c 22 66 69 72 73 74 4c 61 79 65 72 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 57 65 20 61 6e 64 20 6f 75 72 20 70 61 72 74 6e 65 72 73 20 61 72 65 20 75 73 69 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 6c 69 6b 65 20 63 6f 6f 6b 69 65 73 20 61 Data Ascii: 1000"isActive":true,"region":"US_CA_ONLY","showOnPageLoad":true,"reshowCMP":true,"reshowAfterDays":365,"iabAgreementExists":false,"firstLayerTitle":"Your Cookie settings","firstLayerDescription":"We and our partners are using technologies like cookies a
2024-09-30 22:41:05 UTC	1390	IN	Data Raw: 3a 66 61 6c 73 65 2c 22 66 69 72 73 74 4c 61 79 65 72 55 73 65 53 68 6f 72 74 4d 65 73 73 61 67 65 22 3a 66 61 6c 73 65 2c 22 66 69 72 73 74 4c 61 79 65 72 53 68 6f 72 74 4d 65 73 73 61 67 65 22 3a 22 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 54 69 74 6c 65 22 3a 22 50 72 69 76 61 63 79 20 53 65 74 74 69 6e 67 73 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 48 65 72 65 20 79 6f 75 20 63 61 6e 20 66 69 6e 64 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 63 61 74 65 67 6f 72 69 65 73 20 6f 66 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 65 20 63 6f 6c 6c 65 63 74 20 61 6e 64 20 74 68 65 20 70 75 72 70 6f 73 65 73 20 66 6f 72 20 77 68 69 63 68 20 Data Ascii: :false,"firstLayerUseShortMessage":false,"firstLayerShortMessage":"","secondLayerTitle":"Privacy Settings","secondLayerDescription":"Here you can find detailed information about the categories of personal information we collect and the purposes for which

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.7	49833	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:06 UTC	717	OUT	GET /browser-sdk/4.38.4/cross-domain-bridge.html HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:06 UTC	1009	IN	HTTP/1.1 200 OK x-goog-generation: 1726571777870300 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1142 Content-Encoding: gzip x-goog-hash: crc32c=3Fb7rA== x-goog-hash: md5=LTM9O3je6rCkL8XCxBSU8w== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 1142 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Access-Control-Expose-Headers: Content-Length Access-Control-Expose-Headers: Transfer-Encoding X-GUploader-UploadID: AD-8ljuUuQzKmaQy_SNp6RqITDhqTTiKxqqKVjek0LLi88x8HMz8LD4acJASQvrvskUaIbe6uF020wrISw Server: UploadServer Date: Tue, 17 Sep 2024 11:17:14 GMT Expires: Thu, 17 Oct 2024 11:17:14 GMT Cache-Control: public, max-age=2592000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:17 GMT ETag: "2d333d3b78deeab0a42fc5c2c41494f3" Content-Type: text/html Age: 1164232 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:06 UTC	381	IN	Data Raw: 1f 8b 08 08 01 65 e9 66 02 ff 74 6d 70 6a 62 5f 33 69 77 62 31 00 c5 58 5b 73 e2 36 14 7e e7 57 68 79 58 9b a9 31 7d ec c4 90 19 0a b4 43 9b 84 cc c2 4b 27 93 61 14 59 06 4f 8c e5 4a 72 ba cc 4e fe 7b 25 0b d6 92 6c 53 43 d2 cd 0b be 70 ce 77 ce 77 6e 92 3c fc 34 5d 4c 56 7f dd cf c0 96 ef 92 eb ce 50 5e 40 02 d3 cd a8 8b d3 ee 75 07 80 e1 16 c3 50 de 88 db 1d e6 10 20 92 72 9c f2 51 97 e3 af 7c 20 15 02 b4 85 94 61 3e ca 79 d4 ff a5 2b b0 78 d6 c7 7f e7 f1 cb a8 3b 51 d2 fd d5 3e c3 5d 1d 26 85 3b 3c ea 52 f2 44 38 eb 96 a0 29 89 d3 10 7f 3d 8a f2 98 27 f8 1a 66 99 9f 33 4c 91 10 a1 31 62 3e ce 01 a2 84 b1 7e 48 76 30 4e c1 13 8d c3 0d 1e 0e 94 b8 52 65 88 c6 19 57 0f 00 bc 40 0a 26 5f 16 cb e5 7a ba b8 1d cf ef d6 d3 f1 6a bc 5e cd 96 2b 30 02 4e 8e d6 Data Ascii: eftmpjb_3iwb1X[s6~WhyX1}CK'aYOJrN{%lSCpwwn<4]LVP^@uP rQ\| a>y+x;Q>]&;<RD8)='f3L1b>~Hv0NReW@&_zj^+0N
2024-09-30 22:41:06 UTC	761	IN	Data Raw: 49 36 66 35 5e 08 72 86 ad cd 49 5b 3d 30 1a 8d 1a ec 05 4d ee 53 bc 23 2f f8 14 aa ae 4a 31 cf 69 5a ef 6c 29 f7 0a 10 e4 68 0b 5c dc 33 e2 76 d0 8e 60 c2 b0 26 dd 39 5e ed 24 09 ba ba 9d 3f f1 de 45 65 d6 e6 a1 07 42 c8 e1 3c d4 ad c4 11 70 3f 55 5f 7f 37 6e 00 e8 4e 74 4e 09 82 9f 80 b3 76 c4 af 42 0e 4e b9 ac 15 d6 54 48 d7 bb ec 81 8c 92 0c 53 be 37 fd 94 a5 90 98 9c 45 11 b4 0e 44 60 00 21 d3 13 01 f4 c7 72 71 e7 67 72 6e b9 b5 85 65 99 ee 95 9d a3 22 6b 21 9a 11 2e 42 5f 4f ab 3e ae 12 42 af 2e 2d 09 0a 6d 4c 29 dc fb 31 2b ae ae 06 6d 63 4b b6 a1 a2 f8 ed 35 30 fe 2a b5 fc 88 d0 19 44 5b f7 7b b6 dc 67 c1 d1 82 02 05 d0 83 f8 e7 51 a0 59 de 16 af 4d fc 57 3d 46 1a cf b0 42 ae b9 d6 4a 9f ab 15 c5 5a 57 54 68 65 a4 76 4c b5 2e 25 4f 15 0b 13 6b 4f Data Ascii: I6f5^rI[=0MS#/J1iZl)h\3v`&9^$?EeB<p?U_7nNtNvBNTHS7ED`!rqgrne"k!.B_O>B.-mL)1+mcK50*D[{gQYMW=FBJZWThevL.%OkO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.7	49834	35.241.3.184	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:06 UTC	376	OUT	GET /settings/5QJe3R54G/latest/en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:07 UTC	1000	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:41:07 GMT Cache-Control: public, max-age=1800, s-maxage=60 Expires: Mon, 30 Sep 2024 22:42:07 GMT Last-Modified: Mon, 01 Jul 2024 18:20:16 GMT ETag: W/"51ae3cced305b129176fe984bb934a7c" Vary: Accept-Encoding x-goog-generation: 1719858016670615 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 7977 Content-Type: application/json x-goog-hash: crc32c=DUE4Tw== x-goog-hash: md5=Ua48ztMFsSkXb+mEu5NKfA== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: AD-8ljvNfT5E1ZQ_KmzlOEWLKBlodj1CYGdTKvEX5YAgHFG9l7RTguSMY_oT9xqquyEJNOkuJ0TPSwit1w Server: UploadServer Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: US, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-30 22:41:07 UTC	1390	IN	Data Raw: 61 34 38 0d 0a 7b 22 73 65 74 74 69 6e 67 73 49 64 22 3a 22 35 51 4a 65 33 52 35 34 47 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 33 31 2e 31 37 2e 31 35 38 22 2c 22 69 73 4c 61 74 65 73 74 22 3a 74 72 75 65 2c 22 62 75 74 74 6f 6e 44 69 73 70 6c 61 79 4c 6f 63 61 74 69 6f 6e 22 3a 22 62 6c 22 2c 22 6d 6f 72 65 49 6e 66 6f 42 75 74 74 6f 6e 55 72 6c 22 3a 22 22 2c 22 61 63 74 69 6f 6e 43 6c 69 63 6b 4f 6e 56 69 65 77 43 6f 6e 73 65 6e 74 49 6e 53 65 61 72 63 68 41 70 70 22 3a 22 22 2c 22 6c 61 79 6f 75 74 22 3a 31 2c 22 70 72 69 76 61 63 79 4d 6f 64 61 6c 22 3a 31 2c 22 75 72 6c 43 6f 6e 73 65 6e 74 49 6e 66 6f 22 3a 22 22 2c 22 73 74 79 6c 65 73 43 73 73 22 3a 22 22 2c 22 62 75 74 74 6f 6e 50 72 69 76 61 63 79 4f 70 65 6e 49 63 6f 6e 22 3a 22 22 2c 22 62 75 Data Ascii: a48{"settingsId":"5QJe3R54G","version":"31.17.158","isLatest":true,"buttonDisplayLocation":"bl","moreInfoButtonUrl":"","actionClickOnViewConsentInSearchApp":"","layout":1,"privacyModal":1,"urlConsentInfo":"","stylesCss":"","buttonPrivacyOpenIcon":"","bu
2024-09-30 22:41:07 UTC	1249	IN	Data Raw: 65 72 44 6f 6d 61 69 6e 73 22 3a 5b 5d 2c 22 73 68 6f 77 45 72 72 6f 72 4f 6e 55 6e 61 6c 6c 6f 77 65 64 44 6f 6d 61 69 6e 22 3a 66 61 6c 73 65 2c 22 74 72 61 63 6b 69 6e 67 50 72 6f 76 69 64 65 72 55 73 65 64 54 6f 47 65 74 54 72 61 63 6b 69 6e 67 45 76 65 6e 74 73 22 3a 5b 5d 2c 22 64 61 74 61 53 63 6f 70 65 73 22 3a 5b 22 64 61 74 61 4c 61 79 65 72 22 5d 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 63 6f 75 6e 74 64 6f 77 6e 46 6f 72 53 68 6f 77 69 6e 67 50 72 69 6d 61 72 79 56 69 65 77 41 67 61 69 6e 22 3a 30 2c 22 62 61 6e 6e 65 72 50 6c 61 63 65 6d 65 6e 74 22 3a 31 2c 22 63 6f 72 6e 65 72 4d 6f 64 61 6c 50 6c 61 63 65 6d 65 6e 74 22 3a 31 2c 22 6c 61 6e 67 75 61 67 65 53 65 6c 65 63 74 6f 72 54 79 70 65 22 3a 32 2c 22 63 6f 6e 73 65 6e 74 Data Ascii: erDomains":[],"showErrorOnUnallowedDomain":false,"trackingProviderUsedToGetTrackingEvents":[],"dataScopes":["dataLayer"],"language":"en","countdownForShowingPrimaryViewAgain":0,"bannerPlacement":1,"cornerModalPlacement":1,"languageSelectorType":2,"consent
2024-09-30 22:41:07 UTC	1390	IN	Data Raw: 31 30 30 30 0d 0a 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 50 72 69 76 61 63 79 20 4e 6f 74 69 63 65 73 3c 2f 61 3e 2e 20 54 65 63 68 6e 69 63 61 6c 6c 79 20 6e 65 63 65 73 73 61 72 79 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 61 6c 73 6f 20 73 65 74 20 77 68 65 6e 20 79 6f 75 5c 6e 63 68 6f 6f 73 65 20 74 6f 20 5c 22 3c 61 20 68 72 65 66 3d 5c 22 6a 61 76 61 73 63 72 69 70 74 3a 55 43 5f 55 49 2e 64 65 6e 79 41 6c 6c 43 6f 6e 73 65 6e 74 73 28 29 2e 74 68 65 6e 28 55 43 5f 55 49 2e 63 6c 6f 73 65 43 4d 50 29 3b 5c 22 20 63 6c 61 73 73 3d 5c 22 75 63 2d 64 65 6e 79 2d 61 6c 6c 5c 22 3e 44 65 6e 79 3c 2f 61 3e 5c 22 2e 3c 2f 70 3e 3c 70 20 63 6c 61 73 73 3d 5c 22 4d 73 6f 4e 6f 72 6d 61 6c 5c 22 3e 3c 62 72 3e 3c 2f 70 3e 3c 70 20 63 6c 61 73 73 3d Data Ascii: 1000arget=\"_blank\">Privacy Notices</a>. Technically necessary cookies are also set when you\nchoose to \"<a href=\"javascript:UC_UI.denyAllConsents().then(UC_UI.closeCMP);\" class=\"uc-deny-all\">Deny</a>\".</p><p class=\"MsoNormal\"><br></p><p class=
2024-09-30 22:41:07 UTC	1390	IN	Data Raw: 61 69 6e 73 22 3a 66 61 6c 73 65 7d 2c 22 63 6f 6e 73 65 6e 74 54 65 6d 70 6c 61 74 65 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 70 72 65 64 65 66 69 6e 65 64 22 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 3a 22 48 31 56 6c 35 4e 69 64 6a 57 58 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 34 30 2e 31 37 2e 34 35 22 2c 22 63 61 74 65 67 6f 72 79 53 6c 75 67 22 3a 22 65 73 73 65 6e 74 69 61 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 69 73 53 68 61 72 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 44 65 61 63 74 69 76 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 41 75 74 6f 55 70 64 61 74 65 41 6c 6c 6f 77 65 64 22 3a 74 72 75 65 2c 22 64 65 66 61 75 6c 74 43 6f 6e 73 65 6e 74 53 74 61 74 75 73 22 3a 66 61 6c Data Ascii: ains":false},"consentTemplates":[{"type":"predefined","templateId":"H1Vl5NidjWX","version":"40.17.45","categorySlug":"essential","description":"","isHidden":false,"isShared":false,"isDeactivated":false,"isAutoUpdateAllowed":true,"defaultConsentStatus":fal
2024-09-30 22:41:07 UTC	1324	IN	Data Raw: 43 6f 75 6e 74 72 79 22 3a 66 61 6c 73 65 2c 22 5f 6d 65 74 61 22 3a 7b 22 6e 61 6d 65 22 3a 22 48 6f 74 6a 61 72 22 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 70 72 65 64 65 66 69 6e 65 64 22 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 3a 22 71 45 73 34 74 34 39 52 67 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 31 22 2c 22 63 61 74 65 67 6f 72 79 53 6c 75 67 22 3a 22 66 75 6e 63 74 69 6f 6e 61 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 69 73 53 68 61 72 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 44 65 61 63 74 69 76 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 41 75 74 6f 55 70 64 61 74 65 41 6c 6c 6f 77 65 64 22 3a 74 72 75 65 2c 22 64 65 66 61 75 6c 74 43 6f 6e 73 65 6e 74 53 74 61 74 75 73 Data Ascii: Country":false,"_meta":{"name":"Hotjar"}},{"type":"predefined","templateId":"qEs4t49Rg","version":"1.1.1","categorySlug":"functional","description":"","isHidden":false,"isShared":false,"isDeactivated":false,"isAutoUpdateAllowed":true,"defaultConsentStatus
2024-09-30 22:41:07 UTC	1390	IN	Data Raw: 31 30 30 30 0d 0a 61 73 69 73 4c 69 73 74 22 3a 5b 5d 2c 22 64 69 73 61 62 6c 65 4c 65 67 61 6c 42 61 73 69 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 73 54 68 69 72 64 43 6f 75 6e 74 72 79 22 3a 66 61 6c 73 65 2c 22 5f 6d 65 74 61 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 73 74 61 74 69 63 2e 63 6f 6d 22 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 70 72 65 64 65 66 69 6e 65 64 22 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 3a 22 48 6b 78 37 35 34 69 5f 69 57 6d 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 33 2e 36 22 2c 22 63 61 74 65 67 6f 72 79 53 6c 75 67 22 3a 22 6d 61 72 6b 65 74 69 6e 67 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 69 73 53 68 61 72 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 44 65 61 63 74 69 Data Ascii: 1000asisList":[],"disableLegalBasis":false,"usesThirdCountry":false,"_meta":{"name":"gstatic.com"}},{"type":"predefined","templateId":"Hkx754i_iWm","version":"8.3.6","categorySlug":"marketing","description":"","isHidden":false,"isShared":false,"isDeacti
2024-09-30 22:41:07 UTC	1390	IN	Data Raw: 73 61 62 6c 65 4c 65 67 61 6c 42 61 73 69 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 73 54 68 69 72 64 43 6f 75 6e 74 72 79 22 3a 66 61 6c 73 65 2c 22 5f 6d 65 74 61 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 22 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 75 73 74 6f 6d 22 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 3a 22 56 6e 6b 68 63 4d 37 6b 4f 47 6f 4b 48 70 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 2e 31 22 2c 22 63 61 74 65 67 6f 72 79 53 6c 75 67 22 3a 22 66 75 6e 63 74 69 6f 6e 61 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 69 73 53 68 61 72 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 44 65 61 63 74 69 76 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 69 Data Ascii: sableLegalBasis":false,"usesThirdCountry":false,"_meta":{"name":"Google Tag Manager"}},{"type":"custom","templateId":"VnkhcM7kOGoKHp","version":"1.0.1","categorySlug":"functional","description":"","isHidden":false,"isShared":false,"isDeactivated":false,"i
2024-09-30 22:41:07 UTC	1324	IN	Data Raw: 22 69 73 45 73 73 65 6e 74 69 61 6c 22 3a 74 72 75 65 2c 22 69 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 7d 2c 7b 22 63 61 74 65 67 6f 72 79 53 6c 75 67 22 3a 22 66 75 6e 63 74 69 6f 6e 61 6c 22 2c 22 6c 61 62 65 6c 22 3a 22 50 65 72 66 6f 72 6d 61 6e 63 65 20 63 6f 6f 6b 69 65 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 49 6e 20 74 68 65 20 63 61 73 65 20 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 63 6f 6f 6b 69 65 73 2c 20 61 20 64 69 73 74 69 6e 63 74 69 6f 6e 20 69 73 20 6d 61 64 65 20 62 65 74 77 65 65 6e 20 66 75 6e 63 74 69 6f 6e 61 6c 20 61 6e 64 20 73 74 61 74 69 73 74 69 63 61 6c 20 63 6f 6f 6b 69 65 73 2e 5c 6e 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 63 6f 6f 6b 69 65 73 3a 5c 6e 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 70 72 6f Data Ascii: "isEssential":true,"isHidden":false},{"categorySlug":"functional","label":"Performance cookies","description":"In the case of performance cookies, a distinction is made between functional and statistical cookies.\nFunctionality cookies:\nThese cookies pro
2024-09-30 22:41:07 UTC	1390	IN	Data Raw: 31 30 30 30 0d 0a 74 6c 65 22 3a 22 59 6f 75 72 20 43 6f 6f 6b 69 65 20 73 65 74 74 69 6e 67 73 22 2c 22 66 69 72 73 74 4c 61 79 65 72 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 57 65 20 61 6e 64 20 6f 75 72 20 70 61 72 74 6e 65 72 73 20 61 72 65 20 75 73 69 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 6c 69 6b 65 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 70 72 6f 63 65 73 73 20 70 65 72 73 6f 6e 61 6c 20 64 61 74 61 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 69 6d 70 72 6f 76 65 20 79 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 2e 20 46 6f 72 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 63 61 74 65 67 6f 72 69 65 73 20 6f 66 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 65 20 63 6f 6c 6c Data Ascii: 1000tle":"Your Cookie settings","firstLayerDescription":"We and our partners are using technologies like cookies and process personal data in order to improve your experience. For detailed information about the categories of personal information we coll
2024-09-30 22:41:07 UTC	1390	IN	Data Raw: 6f 75 20 63 61 6e 20 66 69 6e 64 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 63 61 74 65 67 6f 72 69 65 73 20 6f 66 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 65 20 63 6f 6c 6c 65 63 74 20 61 6e 64 20 74 68 65 20 70 75 72 70 6f 73 65 73 20 66 6f 72 20 77 68 69 63 68 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6d 61 79 20 62 65 20 75 73 65 64 20 61 6e 64 20 77 68 69 63 68 20 44 61 74 61 20 50 72 6f 63 65 73 73 69 6e 67 20 53 65 72 76 69 63 65 73 20 6d 61 79 20 68 61 76 65 20 61 63 63 65 73 73 20 74 6f 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 56 61 72 69 61 6e 74 22 3a 22 43 45 4e 54 45 52 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 Data Ascii: ou can find detailed information about the categories of personal information we collect and the purposes for which information may be used and which Data Processing Services may have access to this information.","secondLayerVariant":"CENTER","secondLayer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.7	49835	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:07 UTC	607	OUT	GET /session/1px.png?settingsId=5QJe3R54G HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:07 UTC	825	IN	HTTP/1.1 200 OK X-GUploader-UploadID: AD-8ljs8ad1qpGovkkH-nw5XUyc412YBlGpd0rOMn34DcTXKXiK1HeXsdr62WblOFsctCvUvcovx7JZBwA x-goog-generation: 1588928773413784 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 522 Content-Encoding: gzip x-goog-hash: crc32c=pFwm0Q== x-goog-hash: md5=NwKtpzuJUQF7hFHL1qllIw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 522 Server: UploadServer Date: Mon, 30 Sep 2024 22:18:56 GMT Expires: Mon, 30 Sep 2024 22:48:56 GMT Cache-Control: public,max-age=1800,no-transform Age: 1331 Last-Modified: Fri, 08 May 2020 09:06:13 GMT ETag: "3702ada73b8951017b8451cbd6a96523" Content-Type: image/png Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:07 UTC	522	IN	Data Raw: 1f 8b 08 08 00 21 b5 5e 02 ff 74 6d 70 43 66 57 47 41 45 00 01 e9 01 16 fe 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 01 82 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 28 91 75 91 cf 2b 44 51 14 c7 3f 66 c8 e4 47 14 0b 0b 8b 49 58 21 46 89 94 32 93 86 92 34 46 f9 b5 99 79 f3 66 46 cd 8f d7 7b 6f d2 64 ab 6c a7 28 b1 f1 6b c1 5f c0 56 59 2b 45 a4 64 65 61 4d 6c 98 9e f3 bc a9 91 cc bd 9d 73 3e f7 7b ef 39 dd 7b 2e b8 c2 29 25 6d 54 f7 43 3a 63 ea a1 a0 df bb b0 b8 e4 ad 7d a6 06 8f d8 28 83 11 c5 d0 c6 67 67 a7 a9 38 3e ee a8 b2 e3 4d af 5d ab f2 b9 7f 47 7d 4c 35 14 a8 f2 08 8f 29 9a 6e 0a 4f 0a 4f af 99 9a cd db c2 ad 4a 32 12 13 3e 15 ee d1 e5 82 c2 b7 b6 1e 75 f8 c5 Data Ascii: !^tmpCfWGAEPNGIHDRiCCPsRGB IEC61966-2.1(u+DQ?fGIX!F24FyfF{odl(k_VY+EdeaMls>{9{.)%mTC:c}(gg8>M]G}L5)nOOJ2>u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.7	49836	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:07 UTC	628	OUT	GET /browser-ui/3.55.0/DefaultData-fa10cf7f-3d7db9aa.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.55.0/index.module.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:07 UTC	1004	IN	HTTP/1.1 200 OK x-goog-generation: 1726571790674421 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 970 Content-Encoding: gzip x-goog-hash: crc32c=j+hIPg== x-goog-hash: md5=NDxaIzD766ddVhnL30v1Xg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 970 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljsu0Qz1VTu-8N_KY8H2ARn6yPWM6qslRtYWeSweEo3s3anqgOd0Fp8XPqq0MbNWZXlvP3Kl3C-WLQ Server: UploadServer Date: Tue, 17 Sep 2024 11:17:15 GMT Expires: Wed, 17 Sep 2025 11:17:15 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:30 GMT ETag: "343c5a2330fbeba75d5619cbdf4bf55e" Content-Type: text/javascript Age: 1164232 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:07 UTC	386	IN	Data Raw: 1f 8b 08 08 0e 65 e9 66 02 ff 74 6d 70 5f 66 64 62 37 63 30 77 00 95 56 6d 6b e3 38 10 fe 7e bf c2 ed 87 22 c1 e0 6d ba dd 2f 0e 22 74 7b b9 5b c3 b2 77 ac 73 cb 41 08 c5 b1 15 47 8b 23 05 c9 4a 77 cf f5 7f bf 51 64 bb 76 d3 14 96 16 46 1a 8d e6 e5 79 46 e3 88 dd 5e e9 aa de 05 a9 09 38 7c 73 c2 40 e6 84 84 dc 89 0a b8 13 1a ee 9c 10 f0 8f 13 16 3e 3a 91 c2 a3 13 19 6c 9c 50 f0 d9 89 12 fe 75 22 87 ef 4e 6c e0 3f 27 0e f0 c5 89 02 0a 27 b6 cd 46 ab dd 65 f8 4e c8 9c ff 08 77 2a b7 25 0f bf 9b cb e9 21 d5 41 c2 36 56 66 95 50 92 18 5a 77 eb 40 12 0e 09 c4 b4 76 36 6b 66 c2 2c 2d 4b 52 6d 85 41 e5 d3 93 5b 4c 35 af ac 96 c1 1a cf 2a 5e 28 fd 33 29 6d c1 f8 68 0b 78 aa a4 e1 b2 62 c2 b9 a4 a8 10 39 1a 55 7c b7 2f d1 30 ce 9d c6 cc 8d b3 11 69 c9 92 e1 ee 78 Data Ascii: eftmp_fdb7c0wVmk8~"m/"t{[wsAG#JwQdvFyF^8\|s@>:lPu"Nl?''FeNw%!A6VfPZw@v6kf,-KRmA[L5^(3)mhxb9U\|/0ix
2024-09-30 22:41:07 UTC	584	IN	Data Raw: 26 94 27 e8 f9 92 a2 b5 79 14 18 97 a8 b0 4c d7 bc a4 75 96 1a 1e 5c 47 62 43 0c cb c3 82 57 b1 34 55 2a 33 4e 28 08 b6 79 a1 b1 63 5c e0 82 a4 ec 40 2c a5 2d 26 d4 47 5e de c0 72 b5 9a c6 4c da b2 84 36 16 9b 4c 8f c1 26 51 97 5e 88 e8 98 70 6f cd 96 2c 27 70 0b f0 61 45 61 79 0b c6 83 73 57 14 9a 17 d8 13 79 87 11 49 e1 62 42 57 de cf 4d e7 27 63 2a 74 e9 90 e1 e5 85 4e a5 c1 86 c2 b2 0d e9 ae bc ef ae c4 83 2b ef 31 ac 3f be 8d aa ad 56 8f 41 7f 26 f9 63 30 d7 5a 69 52 86 7f cc 17 f7 9f 1e 7e bf 5b dc 3d fc fd f5 af fb 79 92 c4 5f fe 7c 48 e6 5f bf c5 b8 a1 de c3 87 3e a7 ab 2b 3b 23 6b 26 1c 80 5d fa 1f d1 24 96 1b 85 9e f7 0c 3b 40 94 15 d7 e4 99 1e de 33 cf dd a3 60 6c 87 a2 c1 8e 75 34 8e 9a d6 86 9a e7 16 29 19 5c 06 e3 7b 42 1c 51 67 2c 9b f9 a6 Data Ascii: &'yLu\GbCW4U3N(yc\@,-&G^rL6L&Q^po,'paEaysWyIbBWM'ctN+1?VA&c0ZiR~[=y_\|H_>+;#k&]$;@3`lu4)\{BQg,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.7	49837	35.241.3.184	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:08 UTC	522	OUT	OPTIONS /translations/translations-en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://sedo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:08 UTC	628	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Access-Control-Allow-Methods: GET,HEAD,PUT,POST,DELETE Access-Control-Allow-Headers: content-type X-GUploader-UploadID: AD-8ljufHlTkUKW717jpFcqOiZWJv6l9i9ggS4pwOIG-5lFRbNuw0pH5yDP0fVxfPF69OlJjKCddHENmjQ Date: Mon, 30 Sep 2024 22:41:08 GMT Expires: Mon, 30 Sep 2024 22:41:08 GMT Cache-Control: private, max-age=0 Content-Length: 0 Server: UploadServer Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: US, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.7	49839	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:08 UTC	379	OUT	GET /session/1px.png?settingsId=5QJe3R54G HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:08 UTC	825	IN	HTTP/1.1 200 OK X-GUploader-UploadID: AD-8ljs8ad1qpGovkkH-nw5XUyc412YBlGpd0rOMn34DcTXKXiK1HeXsdr62WblOFsctCvUvcovx7JZBwA x-goog-generation: 1588928773413784 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 522 Content-Encoding: gzip x-goog-hash: crc32c=pFwm0Q== x-goog-hash: md5=NwKtpzuJUQF7hFHL1qllIw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 522 Server: UploadServer Date: Mon, 30 Sep 2024 22:18:56 GMT Expires: Mon, 30 Sep 2024 22:48:56 GMT Cache-Control: public,max-age=1800,no-transform Age: 1332 Last-Modified: Fri, 08 May 2020 09:06:13 GMT ETag: "3702ada73b8951017b8451cbd6a96523" Content-Type: image/png Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:08 UTC	522	IN	Data Raw: 1f 8b 08 08 00 21 b5 5e 02 ff 74 6d 70 43 66 57 47 41 45 00 01 e9 01 16 fe 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 01 82 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 28 91 75 91 cf 2b 44 51 14 c7 3f 66 c8 e4 47 14 0b 0b 8b 49 58 21 46 89 94 32 93 86 92 34 46 f9 b5 99 79 f3 66 46 cd 8f d7 7b 6f d2 64 ab 6c a7 28 b1 f1 6b c1 5f c0 56 59 2b 45 a4 64 65 61 4d 6c 98 9e f3 bc a9 91 cc bd 9d 73 3e f7 7b ef 39 dd 7b 2e b8 c2 29 25 6d 54 f7 43 3a 63 ea a1 a0 df bb b0 b8 e4 ad 7d a6 06 8f d8 28 83 11 c5 d0 c6 67 67 a7 a9 38 3e ee a8 b2 e3 4d af 5d ab f2 b9 7f 47 7d 4c 35 14 a8 f2 08 8f 29 9a 6e 0a 4f 0a 4f af 99 9a cd db c2 ad 4a 32 12 13 3e 15 ee d1 e5 82 c2 b7 b6 1e 75 f8 c5 Data Ascii: !^tmpCfWGAEPNGIHDRiCCPsRGB IEC61966-2.1(u+DQ?fGIX!F24FyfF{odl(k_VY+EdeaMls>{9{.)%mTC:c}(gg8>M]G}L5)nOOJ2>u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.7	49838	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:08 UTC	393	OUT	GET /browser-ui/3.55.0/DefaultData-fa10cf7f-3d7db9aa.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:08 UTC	1004	IN	HTTP/1.1 200 OK x-goog-generation: 1726571790674421 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 970 Content-Encoding: gzip x-goog-hash: crc32c=j+hIPg== x-goog-hash: md5=NDxaIzD766ddVhnL30v1Xg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 970 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljt23CuD_WiM3Nmp3_Xl9seBPG5NjeQ4D2cYZBL6mgVgBk12nKqLEcE_EQrftYGW6kNxslfxACMWEw Server: UploadServer Date: Wed, 18 Sep 2024 18:22:00 GMT Expires: Thu, 18 Sep 2025 18:22:00 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:30 GMT ETag: "343c5a2330fbeba75d5619cbdf4bf55e" Content-Type: text/javascript Age: 1052348 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:08 UTC	386	IN	Data Raw: 1f 8b 08 08 0e 65 e9 66 02 ff 74 6d 70 5f 66 64 62 37 63 30 77 00 95 56 6d 6b e3 38 10 fe 7e bf c2 ed 87 22 c1 e0 6d ba dd 2f 0e 22 74 7b b9 5b c3 b2 77 ac 73 cb 41 08 c5 b1 15 47 8b 23 05 c9 4a 77 cf f5 7f bf 51 64 bb 76 d3 14 96 16 46 1a 8d e6 e5 79 46 e3 88 dd 5e e9 aa de 05 a9 09 38 7c 73 c2 40 e6 84 84 dc 89 0a b8 13 1a ee 9c 10 f0 8f 13 16 3e 3a 91 c2 a3 13 19 6c 9c 50 f0 d9 89 12 fe 75 22 87 ef 4e 6c e0 3f 27 0e f0 c5 89 02 0a 27 b6 cd 46 ab dd 65 f8 4e c8 9c ff 08 77 2a b7 25 0f bf 9b cb e9 21 d5 41 c2 36 56 66 95 50 92 18 5a 77 eb 40 12 0e 09 c4 b4 76 36 6b 66 c2 2c 2d 4b 52 6d 85 41 e5 d3 93 5b 4c 35 af ac 96 c1 1a cf 2a 5e 28 fd 33 29 6d c1 f8 68 0b 78 aa a4 e1 b2 62 c2 b9 a4 a8 10 39 1a 55 7c b7 2f d1 30 ce 9d c6 cc 8d b3 11 69 c9 92 e1 ee 78 Data Ascii: eftmp_fdb7c0wVmk8~"m/"t{[wsAG#JwQdvFyF^8\|s@>:lPu"Nl?''FeNw%!A6VfPZw@v6kf,-KRmA[L5^(3)mhxb9U\|/0ix
2024-09-30 22:41:08 UTC	584	IN	Data Raw: 26 94 27 e8 f9 92 a2 b5 79 14 18 97 a8 b0 4c d7 bc a4 75 96 1a 1e 5c 47 62 43 0c cb c3 82 57 b1 34 55 2a 33 4e 28 08 b6 79 a1 b1 63 5c e0 82 a4 ec 40 2c a5 2d 26 d4 47 5e de c0 72 b5 9a c6 4c da b2 84 36 16 9b 4c 8f c1 26 51 97 5e 88 e8 98 70 6f cd 96 2c 27 70 0b f0 61 45 61 79 0b c6 83 73 57 14 9a 17 d8 13 79 87 11 49 e1 62 42 57 de cf 4d e7 27 63 2a 74 e9 90 e1 e5 85 4e a5 c1 86 c2 b2 0d e9 ae bc ef ae c4 83 2b ef 31 ac 3f be 8d aa ad 56 8f 41 7f 26 f9 63 30 d7 5a 69 52 86 7f cc 17 f7 9f 1e 7e bf 5b dc 3d fc fd f5 af fb 79 92 c4 5f fe 7c 48 e6 5f bf c5 b8 a1 de c3 87 3e a7 ab 2b 3b 23 6b 26 1c 80 5d fa 1f d1 24 96 1b 85 9e f7 0c 3b 40 94 15 d7 e4 99 1e de 33 cf dd a3 60 6c 87 a2 c1 8e 75 34 8e 9a d6 86 9a e7 16 29 19 5c 06 e3 7b 42 1c 51 67 2c 9b f9 a6 Data Ascii: &'yLu\GbCW4U3N(yc\@,-&G^rL6L&Q^po,'paEaysWyIbBWM'ctN+1?VA&c0ZiR~[=y_\|H_>+;#k&]$;@3`lu4)\{BQg,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.7	49840	35.241.3.184	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:09 UTC	598	OUT	GET /translations/translations-en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://sedo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:09 UTC	1008	IN	HTTP/1.1 200 OK x-goog-generation: 1725363151058862 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 2491 x-goog-hash: crc32c=8/rfvQ== x-goog-hash: md5=3gvV2wFCHwyIlwHnbgqquQ== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: AD-8ljsyofGG0V-31PuQEDQrghAgDaFjsxxHMHFzzMrAyFf6Pqtz9TVBSO-pGod5Sqn-Uzqz76stnMtX8g Server: UploadServer Date: Mon, 30 Sep 2024 22:38:58 GMT Expires: Tue, 01 Oct 2024 22:38:58 GMT Cache-Control: public, max-age=86400, s-maxage=86400 Last-Modified: Tue, 03 Sep 2024 11:32:31 GMT ETag: W/"de0bd5db01421f0c889701e76e0aaab9" Content-Type: application/json Vary: Accept-Encoding Content-Length: 7457 Age: 131 Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: US, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:09 UTC	382	IN	Data Raw: 7b 22 6c 61 62 65 6c 73 22 3a 7b 22 41 4c 4c 22 3a 22 41 6c 6c 22 2c 22 42 41 43 4b 22 3a 22 42 61 63 6b 22 2c 22 43 49 44 5f 54 49 54 4c 45 22 3a 22 49 44 20 74 6f 20 72 65 71 75 65 73 74 20 63 6f 6e 73 65 6e 74 20 64 61 74 61 22 2c 22 43 4e 49 4c 5f 44 45 4e 59 5f 4c 49 4e 4b 5f 54 45 58 54 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 61 63 63 65 70 74 69 6e 67 22 2c 22 43 4f 4f 4b 49 45 5f 52 45 46 52 45 53 48 22 3a 22 43 6f 6f 6b 69 65 20 72 65 66 72 65 73 68 22 2c 22 43 4f 4f 4b 49 45 5f 53 54 4f 52 41 47 45 22 3a 22 43 6f 6f 6b 69 65 20 73 74 6f 72 61 67 65 22 2c 22 44 45 54 41 49 4c 53 22 3a 22 44 65 74 61 69 6c 73 22 2c 22 4c 41 4e 47 55 41 47 45 5f 54 4f 4f 4c 54 49 50 22 3a 22 43 68 61 6e 67 65 73 20 6f 63 63 75 72 20 69 6d 6d 65 Data Ascii: {"labels":{"ALL":"All","BACK":"Back","CID_TITLE":"ID to request consent data","CNIL_DENY_LINK_TEXT":"Continue without accepting","COOKIE_REFRESH":"Cookie refresh","COOKIE_STORAGE":"Cookie storage","DETAILS":"Details","LANGUAGE_TOOLTIP":"Changes occur imme
2024-09-30 22:41:09 UTC	1390	IN	Data Raw: 65 64 20 61 72 65 20 73 61 76 65 64 20 69 6e 20 74 68 65 20 6c 6f 63 61 6c 20 73 74 6f 72 61 67 65 22 2c 22 4d 4f 42 49 4c 45 5f 54 43 46 5f 4d 41 58 5f 53 54 4f 52 41 47 45 5f 44 55 52 41 54 49 4f 4e 5f 54 49 54 4c 45 22 3a 22 43 4d 50 20 4d 61 78 69 6d 75 6d 20 53 74 6f 72 61 67 65 20 44 75 72 61 74 69 6f 6e 22 2c 22 53 55 42 5f 53 45 52 56 49 43 45 22 3a 22 53 75 62 73 65 72 76 69 63 65 22 2c 22 53 55 42 5f 53 45 52 56 49 43 45 53 22 3a 22 53 75 62 73 65 72 76 69 63 65 73 22 2c 22 53 55 42 5f 53 45 52 56 49 43 45 53 5f 44 45 53 43 52 49 50 54 49 4f 4e 22 3a 22 42 65 6c 6f 77 20 79 6f 75 20 63 61 6e 20 66 69 6e 64 20 61 6c 6c 20 74 68 65 20 73 65 72 76 69 63 65 73 20 74 68 61 74 20 61 72 65 20 73 75 62 6f 72 64 69 6e 61 74 65 20 74 6f 20 74 68 69 73 20 Data Ascii: ed are saved in the local storage","MOBILE_TCF_MAX_STORAGE_DURATION_TITLE":"CMP Maximum Storage Duration","SUB_SERVICE":"Subservice","SUB_SERVICES":"Subservices","SUB_SERVICES_DESCRIPTION":"Below you can find all the services that are subordinate to this
2024-09-30 22:41:09 UTC	1390	IN	Data Raw: 48 65 61 64 65 72 22 3a 22 48 65 61 64 65 72 20 69 6e 63 6c 75 64 69 6e 67 20 6c 61 6e 67 75 61 67 65 20 73 65 6c 65 63 74 69 6f 6e 20 61 6e 64 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 73 22 2c 22 75 73 65 72 63 65 6e 74 72 69 63 73 43 4d 50 55 49 22 3a 22 43 6f 6e 73 65 6e 74 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 6c 61 74 66 6f 72 6d 20 49 6e 74 65 72 66 61 63 65 22 2c 22 75 73 65 72 63 65 6e 74 72 69 63 73 43 61 72 64 22 3a 22 43 61 72 64 22 2c 22 75 73 65 72 63 65 6e 74 72 69 63 73 4c 69 73 74 22 3a 22 4c 69 73 74 22 2c 22 76 65 6e 64 6f 72 43 6f 6e 73 65 6e 74 54 6f 67 67 6c 65 22 3a 22 43 6f 6e 73 65 6e 74 22 2c 22 76 65 6e 64 6f 72 44 65 74 61 69 6c 65 64 53 74 6f 72 61 67 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 3a 22 44 65 74 61 69 6c 65 64 20 53 Data Ascii: Header":"Header including language selection and external links","usercentricsCMPUI":"Consent Management Platform Interface","usercentricsCard":"Card","usercentricsList":"List","vendorConsentToggle":"Consent","vendorDetailedStorageInformation":"Detailed S
2024-09-30 22:41:09 UTC	1390	IN	Data Raw: 72 74 2e 20 36 20 4e 72 2e 20 34 20 44 53 47 2d 45 4b 44 22 2c 22 44 53 47 5f 45 4b 44 5f 35 22 3a 22 41 72 74 2e 20 36 20 4e 72 2e 20 35 20 44 53 47 2d 45 4b 44 22 2c 22 44 53 47 5f 45 4b 44 5f 36 22 3a 22 41 72 74 2e 20 36 20 4e 72 2e 20 36 20 44 53 47 2d 45 4b 44 22 2c 22 44 53 47 5f 45 4b 44 5f 38 22 3a 22 41 72 74 2e 20 36 20 4e 72 2e 20 38 20 44 53 47 2d 45 4b 44 22 2c 22 45 49 54 5f 41 32 36 22 3a 22 41 72 74 2e 20 32 36 28 31 29 20 6f 66 20 74 68 65 20 45 49 54 20 4c 61 77 22 2c 22 46 41 44 50 5f 31 22 3a 22 41 72 74 2e 20 31 37 20 70 61 72 61 2e 20 31 20 6c 69 74 2e 20 61 20 46 41 44 50 22 2c 22 46 41 44 50 5f 32 5f 41 22 3a 22 41 72 74 2e 20 36 20 70 61 72 61 2e 20 32 20 6c 69 74 2e 20 61 20 46 41 44 50 22 2c 22 46 41 44 50 5f 34 22 3a 22 41 72 Data Ascii: rt. 6 Nr. 4 DSG-EKD","DSG_EKD_5":"Art. 6 Nr. 5 DSG-EKD","DSG_EKD_6":"Art. 6 Nr. 6 DSG-EKD","DSG_EKD_8":"Art. 6 Nr. 8 DSG-EKD","EIT_A26":"Art. 26(1) of the EIT Law","FADP_1":"Art. 17 para. 1 lit. a FADP","FADP_2_A":"Art. 6 para. 2 lit. a FADP","FADP_4":"Ar
2024-09-30 22:41:09 UTC	1390	IN	Data Raw: 74 65 63 74 69 6f 6e 20 6f 66 20 63 72 65 64 69 74 2c 20 41 72 74 2e 20 37 28 31 30 29 20 4c 47 50 44 22 2c 22 4c 47 50 44 5f 37 5f 33 22 3a 22 45 78 65 63 75 74 69 6f 6e 20 6f 66 20 70 75 62 6c 69 63 20 70 6f 6c 69 63 69 65 73 2c 20 41 72 74 2e 20 37 28 33 29 20 4c 47 50 44 22 2c 22 4c 47 50 44 5f 37 5f 34 22 3a 22 43 61 72 72 79 69 6e 67 20 6f 75 74 20 73 74 75 64 69 65 73 2c 20 41 72 74 2e 20 37 28 34 29 20 4c 47 50 44 22 2c 22 4c 47 50 44 5f 37 5f 35 22 3a 22 50 65 72 66 6f 72 6d 61 6e 63 65 20 6f 66 20 61 20 63 6f 6e 74 72 61 63 74 2c 20 41 72 74 2e 20 37 28 35 29 20 4c 47 50 44 22 2c 22 4c 47 50 44 5f 37 5f 36 22 3a 22 45 78 65 72 63 69 73 69 6e 67 20 6f 66 20 72 69 67 68 74 73 2c 20 41 72 74 2e 20 37 28 36 29 20 4c 47 50 44 22 2c 22 4c 47 50 44 5f Data Ascii: tection of credit, Art. 7(10) LGPD","LGPD_7_3":"Execution of public policies, Art. 7(3) LGPD","LGPD_7_4":"Carrying out studies, Art. 7(4) LGPD","LGPD_7_5":"Performance of a contract, Art. 7(5) LGPD","LGPD_7_6":"Exercising of rights, Art. 7(6) LGPD","LGPD_
2024-09-30 22:41:09 UTC	1390	IN	Data Raw: 20 50 4f 50 49 41 22 2c 22 52 5a 53 53 49 41 5f 43 4f 4e 53 45 4e 54 22 3a 22 43 6f 6e 73 65 6e 74 2c 20 41 72 74 2e 20 39 20 6f 66 20 74 68 65 20 52 75 73 73 69 61 6e 20 46 65 64 65 72 61 74 69 6f 6e 20 46 65 64 65 72 61 6c 20 4c 61 77 20 4e 6f 2e 20 31 35 32 2d 46 5a 20 6f 66 20 4a 75 6c 79 20 32 37 2c 20 32 30 30 36 20 6f 6e 20 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 22 2c 22 53 47 5f 44 50 41 5f 32 30 31 32 22 3a 22 43 6f 6e 73 65 6e 74 2c 20 53 65 63 74 69 6f 6e 20 31 33 20 6f 66 20 53 69 6e 67 61 70 6f 72 65 e2 80 99 73 20 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 20 50 72 6f 74 65 63 74 69 6f 6e 20 41 63 74 20 32 30 31 32 22 2c 22 53 52 5f 43 4f 4e 53 45 4e 54 22 3a 22 43 6f 6e 73 65 6e 74 20 28 41 72 74 2e 20 31 32 20 28 31 29 20 6f 66 20 74 68 65 20 Data Ascii: POPIA","RZSSIA_CONSENT":"Consent, Art. 9 of the Russian Federation Federal Law No. 152-FZ of July 27, 2006 on Personal Data","SG_DPA_2012":"Consent, Section 13 of Singapores Personal Data Protection Act 2012","SR_CONSENT":"Consent (Art. 12 (1) of the
2024-09-30 22:41:09 UTC	125	IN	Data Raw: 75 72 69 74 79 20 4c 61 77 20 6f 66 20 74 68 65 20 50 65 6f 70 6c 65 e2 80 98 73 20 52 65 70 75 62 6c 69 63 20 6f 66 20 43 68 69 6e 61 22 2c 22 5a 59 5f 43 4f 4e 53 45 4e 54 22 3a 22 43 6f 6e 73 65 6e 74 2c 20 52 75 6c 65 20 36 20 6f 66 20 74 68 65 20 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 20 50 72 6f 74 65 63 74 69 6f 6e 20 4c 61 77 20 28 38 39 2f 32 30 30 37 29 22 7d 7d Data Ascii: urity Law of the Peoples Republic of China","ZY_CONSENT":"Consent, Rule 6 of the Personal Data Protection Law (89/2007)"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.7	49841	35.241.3.184	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:09 UTC	376	OUT	GET /translations/translations-en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:09 UTC	1003	IN	HTTP/1.1 200 OK x-goog-generation: 1725363151058862 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 2491 x-goog-hash: crc32c=8/rfvQ== x-goog-hash: md5=3gvV2wFCHwyIlwHnbgqquQ== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: AD-8ljtao5NF-HqDAakj8TMB3WmL28RAWNorw0guklXZNZQ_WB1XuVR7JkZQ4L0xNOMM9PjsAw8 Server: UploadServer Date: Mon, 30 Sep 2024 04:31:10 GMT Expires: Tue, 01 Oct 2024 04:31:10 GMT Cache-Control: public, max-age=86400, s-maxage=86400 Last-Modified: Tue, 03 Sep 2024 11:32:31 GMT ETag: W/"de0bd5db01421f0c889701e76e0aaab9" Content-Type: application/json Vary: Accept-Encoding Content-Length: 7457 Age: 65399 Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: US, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:09 UTC	387	IN	Data Raw: 7b 22 6c 61 62 65 6c 73 22 3a 7b 22 41 4c 4c 22 3a 22 41 6c 6c 22 2c 22 42 41 43 4b 22 3a 22 42 61 63 6b 22 2c 22 43 49 44 5f 54 49 54 4c 45 22 3a 22 49 44 20 74 6f 20 72 65 71 75 65 73 74 20 63 6f 6e 73 65 6e 74 20 64 61 74 61 22 2c 22 43 4e 49 4c 5f 44 45 4e 59 5f 4c 49 4e 4b 5f 54 45 58 54 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 61 63 63 65 70 74 69 6e 67 22 2c 22 43 4f 4f 4b 49 45 5f 52 45 46 52 45 53 48 22 3a 22 43 6f 6f 6b 69 65 20 72 65 66 72 65 73 68 22 2c 22 43 4f 4f 4b 49 45 5f 53 54 4f 52 41 47 45 22 3a 22 43 6f 6f 6b 69 65 20 73 74 6f 72 61 67 65 22 2c 22 44 45 54 41 49 4c 53 22 3a 22 44 65 74 61 69 6c 73 22 2c 22 4c 41 4e 47 55 41 47 45 5f 54 4f 4f 4c 54 49 50 22 3a 22 43 68 61 6e 67 65 73 20 6f 63 63 75 72 20 69 6d 6d 65 Data Ascii: {"labels":{"ALL":"All","BACK":"Back","CID_TITLE":"ID to request consent data","CNIL_DENY_LINK_TEXT":"Continue without accepting","COOKIE_REFRESH":"Cookie refresh","COOKIE_STORAGE":"Cookie storage","DETAILS":"Details","LANGUAGE_TOOLTIP":"Changes occur imme
2024-09-30 22:41:09 UTC	1390	IN	Data Raw: 65 20 73 61 76 65 64 20 69 6e 20 74 68 65 20 6c 6f 63 61 6c 20 73 74 6f 72 61 67 65 22 2c 22 4d 4f 42 49 4c 45 5f 54 43 46 5f 4d 41 58 5f 53 54 4f 52 41 47 45 5f 44 55 52 41 54 49 4f 4e 5f 54 49 54 4c 45 22 3a 22 43 4d 50 20 4d 61 78 69 6d 75 6d 20 53 74 6f 72 61 67 65 20 44 75 72 61 74 69 6f 6e 22 2c 22 53 55 42 5f 53 45 52 56 49 43 45 22 3a 22 53 75 62 73 65 72 76 69 63 65 22 2c 22 53 55 42 5f 53 45 52 56 49 43 45 53 22 3a 22 53 75 62 73 65 72 76 69 63 65 73 22 2c 22 53 55 42 5f 53 45 52 56 49 43 45 53 5f 44 45 53 43 52 49 50 54 49 4f 4e 22 3a 22 42 65 6c 6f 77 20 79 6f 75 20 63 61 6e 20 66 69 6e 64 20 61 6c 6c 20 74 68 65 20 73 65 72 76 69 63 65 73 20 74 68 61 74 20 61 72 65 20 73 75 62 6f 72 64 69 6e 61 74 65 20 74 6f 20 74 68 69 73 20 73 65 72 76 69 Data Ascii: e saved in the local storage","MOBILE_TCF_MAX_STORAGE_DURATION_TITLE":"CMP Maximum Storage Duration","SUB_SERVICE":"Subservice","SUB_SERVICES":"Subservices","SUB_SERVICES_DESCRIPTION":"Below you can find all the services that are subordinate to this servi
2024-09-30 22:41:09 UTC	1390	IN	Data Raw: 72 22 3a 22 48 65 61 64 65 72 20 69 6e 63 6c 75 64 69 6e 67 20 6c 61 6e 67 75 61 67 65 20 73 65 6c 65 63 74 69 6f 6e 20 61 6e 64 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 73 22 2c 22 75 73 65 72 63 65 6e 74 72 69 63 73 43 4d 50 55 49 22 3a 22 43 6f 6e 73 65 6e 74 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 6c 61 74 66 6f 72 6d 20 49 6e 74 65 72 66 61 63 65 22 2c 22 75 73 65 72 63 65 6e 74 72 69 63 73 43 61 72 64 22 3a 22 43 61 72 64 22 2c 22 75 73 65 72 63 65 6e 74 72 69 63 73 4c 69 73 74 22 3a 22 4c 69 73 74 22 2c 22 76 65 6e 64 6f 72 43 6f 6e 73 65 6e 74 54 6f 67 67 6c 65 22 3a 22 43 6f 6e 73 65 6e 74 22 2c 22 76 65 6e 64 6f 72 44 65 74 61 69 6c 65 64 53 74 6f 72 61 67 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 3a 22 44 65 74 61 69 6c 65 64 20 53 74 6f 72 61 67 Data Ascii: r":"Header including language selection and external links","usercentricsCMPUI":"Consent Management Platform Interface","usercentricsCard":"Card","usercentricsList":"List","vendorConsentToggle":"Consent","vendorDetailedStorageInformation":"Detailed Storag
2024-09-30 22:41:09 UTC	1390	IN	Data Raw: 20 4e 72 2e 20 34 20 44 53 47 2d 45 4b 44 22 2c 22 44 53 47 5f 45 4b 44 5f 35 22 3a 22 41 72 74 2e 20 36 20 4e 72 2e 20 35 20 44 53 47 2d 45 4b 44 22 2c 22 44 53 47 5f 45 4b 44 5f 36 22 3a 22 41 72 74 2e 20 36 20 4e 72 2e 20 36 20 44 53 47 2d 45 4b 44 22 2c 22 44 53 47 5f 45 4b 44 5f 38 22 3a 22 41 72 74 2e 20 36 20 4e 72 2e 20 38 20 44 53 47 2d 45 4b 44 22 2c 22 45 49 54 5f 41 32 36 22 3a 22 41 72 74 2e 20 32 36 28 31 29 20 6f 66 20 74 68 65 20 45 49 54 20 4c 61 77 22 2c 22 46 41 44 50 5f 31 22 3a 22 41 72 74 2e 20 31 37 20 70 61 72 61 2e 20 31 20 6c 69 74 2e 20 61 20 46 41 44 50 22 2c 22 46 41 44 50 5f 32 5f 41 22 3a 22 41 72 74 2e 20 36 20 70 61 72 61 2e 20 32 20 6c 69 74 2e 20 61 20 46 41 44 50 22 2c 22 46 41 44 50 5f 34 22 3a 22 41 72 74 2e 20 33 34 Data Ascii: Nr. 4 DSG-EKD","DSG_EKD_5":"Art. 6 Nr. 5 DSG-EKD","DSG_EKD_6":"Art. 6 Nr. 6 DSG-EKD","DSG_EKD_8":"Art. 6 Nr. 8 DSG-EKD","EIT_A26":"Art. 26(1) of the EIT Law","FADP_1":"Art. 17 para. 1 lit. a FADP","FADP_2_A":"Art. 6 para. 2 lit. a FADP","FADP_4":"Art. 34
2024-09-30 22:41:09 UTC	1390	IN	Data Raw: 6f 6e 20 6f 66 20 63 72 65 64 69 74 2c 20 41 72 74 2e 20 37 28 31 30 29 20 4c 47 50 44 22 2c 22 4c 47 50 44 5f 37 5f 33 22 3a 22 45 78 65 63 75 74 69 6f 6e 20 6f 66 20 70 75 62 6c 69 63 20 70 6f 6c 69 63 69 65 73 2c 20 41 72 74 2e 20 37 28 33 29 20 4c 47 50 44 22 2c 22 4c 47 50 44 5f 37 5f 34 22 3a 22 43 61 72 72 79 69 6e 67 20 6f 75 74 20 73 74 75 64 69 65 73 2c 20 41 72 74 2e 20 37 28 34 29 20 4c 47 50 44 22 2c 22 4c 47 50 44 5f 37 5f 35 22 3a 22 50 65 72 66 6f 72 6d 61 6e 63 65 20 6f 66 20 61 20 63 6f 6e 74 72 61 63 74 2c 20 41 72 74 2e 20 37 28 35 29 20 4c 47 50 44 22 2c 22 4c 47 50 44 5f 37 5f 36 22 3a 22 45 78 65 72 63 69 73 69 6e 67 20 6f 66 20 72 69 67 68 74 73 2c 20 41 72 74 2e 20 37 28 36 29 20 4c 47 50 44 22 2c 22 4c 47 50 44 5f 37 5f 37 22 3a Data Ascii: on of credit, Art. 7(10) LGPD","LGPD_7_3":"Execution of public policies, Art. 7(3) LGPD","LGPD_7_4":"Carrying out studies, Art. 7(4) LGPD","LGPD_7_5":"Performance of a contract, Art. 7(5) LGPD","LGPD_7_6":"Exercising of rights, Art. 7(6) LGPD","LGPD_7_7":
2024-09-30 22:41:09 UTC	1390	IN	Data Raw: 41 22 2c 22 52 5a 53 53 49 41 5f 43 4f 4e 53 45 4e 54 22 3a 22 43 6f 6e 73 65 6e 74 2c 20 41 72 74 2e 20 39 20 6f 66 20 74 68 65 20 52 75 73 73 69 61 6e 20 46 65 64 65 72 61 74 69 6f 6e 20 46 65 64 65 72 61 6c 20 4c 61 77 20 4e 6f 2e 20 31 35 32 2d 46 5a 20 6f 66 20 4a 75 6c 79 20 32 37 2c 20 32 30 30 36 20 6f 6e 20 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 22 2c 22 53 47 5f 44 50 41 5f 32 30 31 32 22 3a 22 43 6f 6e 73 65 6e 74 2c 20 53 65 63 74 69 6f 6e 20 31 33 20 6f 66 20 53 69 6e 67 61 70 6f 72 65 e2 80 99 73 20 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 20 50 72 6f 74 65 63 74 69 6f 6e 20 41 63 74 20 32 30 31 32 22 2c 22 53 52 5f 43 4f 4e 53 45 4e 54 22 3a 22 43 6f 6e 73 65 6e 74 20 28 41 72 74 2e 20 31 32 20 28 31 29 20 6f 66 20 74 68 65 20 53 65 72 62 69 Data Ascii: A","RZSSIA_CONSENT":"Consent, Art. 9 of the Russian Federation Federal Law No. 152-FZ of July 27, 2006 on Personal Data","SG_DPA_2012":"Consent, Section 13 of Singapores Personal Data Protection Act 2012","SR_CONSENT":"Consent (Art. 12 (1) of the Serbi
2024-09-30 22:41:09 UTC	120	IN	Data Raw: 20 4c 61 77 20 6f 66 20 74 68 65 20 50 65 6f 70 6c 65 e2 80 98 73 20 52 65 70 75 62 6c 69 63 20 6f 66 20 43 68 69 6e 61 22 2c 22 5a 59 5f 43 4f 4e 53 45 4e 54 22 3a 22 43 6f 6e 73 65 6e 74 2c 20 52 75 6c 65 20 36 20 6f 66 20 74 68 65 20 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 20 50 72 6f 74 65 63 74 69 6f 6e 20 4c 61 77 20 28 38 39 2f 32 30 30 37 29 22 7d 7d Data Ascii: Law of the Peoples Republic of China","ZY_CONSENT":"Consent, Rule 6 of the Personal Data Protection Law (89/2007)"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.7	49842	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:09 UTC	626	OUT	GET /browser-ui/3.55.0/DefaultUI-efcc91c9-fa5e06dd.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.55.0/index.module.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:09 UTC	1004	IN	HTTP/1.1 200 OK x-goog-generation: 1726571791147992 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 755 Content-Encoding: gzip x-goog-hash: crc32c=WngRyw== x-goog-hash: md5=sLfPEjPIk0acr3y/MUVWDg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 755 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljvlhLah2QqLIk_sfsGjT8kVs4vH4-r7CTsCe-39lqkHsNJrEN4S4j3dGQ3wpVnZ-eYSPYRJqIhuHA Server: UploadServer Date: Tue, 17 Sep 2024 11:17:17 GMT Expires: Wed, 17 Sep 2025 11:17:17 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:31 GMT ETag: "b0b7cf1233c893469caf7cbf3145560e" Content-Type: text/javascript Age: 1164232 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:09 UTC	386	IN	Data Raw: 1f 8b 08 08 0f 65 e9 66 02 ff 74 6d 70 30 79 72 64 6a 64 32 6e 00 9d 55 5d 6f 9b 30 14 7d df af 48 d8 0b 48 0e 4b d7 24 4a 89 d0 94 4f a9 12 6d a5 25 db bb c1 06 bc 81 1d d9 86 94 25 f9 ef b3 21 24 d0 a6 5a 34 81 62 73 ef b9 e7 de eb 63 3b 24 dd 32 2e f7 69 07 8a 0e 06 91 1e 18 80 4c 8f 14 a8 1f f5 12 00 a5 1e 39 80 99 1e e5 31 e4 2c 35 ec 2f 84 22 fc 6a a7 0c 65 09 b6 7f 09 63 42 2a b2 32 0a 02 a8 07 01 ca 18 54 c7 ac 08 17 d2 83 05 e6 f3 4c 48 96 92 3f 50 12 46 7b 08 8f 71 30 0a ef 7b 7d 8c 46 23 f5 36 09 93 3a 7a 96 49 c9 a8 68 87 0e 47 0f 63 18 8c 87 bd 21 1a dc fb 77 c3 b0 19 ca 75 f6 0c 94 0d 04 35 cd 1a 07 8c a2 b2 8a 1f 8f bd af e8 e1 7e 34 18 8d 7b 83 10 8d 07 fe b0 5f c6 e7 90 77 22 37 cc 68 a0 93 98 d0 da d7 f3 4e 64 aa 95 b2 f6 1a 91 83 02 78 Data Ascii: eftmp0yrdjd2nU]o0}HHK$JOm%%!$Z4bsc;$2.iL91,5/"jecB*2TLH?PF{q0{}F#6:zIhGc!wu5~4{_w"7hNdx
2024-09-30 22:41:09 UTC	369	IN	Data Raw: 3a c5 46 71 69 f2 d5 54 3f 86 75 04 02 e6 57 9a b9 e4 f1 6e c8 e3 d5 3e cf d6 74 6f 5a b9 d4 7f 61 8d 6f 60 8d 6b 5f 5c b3 96 d5 1f 8f 16 08 ed f0 bc 7f db 62 65 67 b1 50 25 56 90 30 81 5f b6 5a 67 27 6a 84 d9 0d c7 e1 a0 ab 01 31 41 b8 da d9 0b 4c 0b 87 9b 2d 7c db 0b ba 91 ed cb 72 fa 28 7e 12 41 fc 04 5b 25 c3 86 45 51 82 85 d3 bd 03 44 cc a1 c4 11 e3 c5 c9 b8 a4 50 e1 50 bb 90 8f 50 2a dc 83 34 ca 60 84 d7 38 c1 81 64 bc 8e ef 5e a9 ed 8c dd 11 19 c4 ba 3e 11 b3 5d 6d 5d 70 b6 45 6c 47 2d a0 ad eb 58 9d c9 05 16 01 27 e5 02 bc a8 46 c4 6f c9 b6 4e 57 af 7c 8b 3b 13 b8 84 3f 61 21 14 d1 07 f1 4f cc 27 09 56 8d f9 90 52 cc ab cf 06 e2 51 4c d5 a1 cd 31 50 27 90 40 2a d5 5e 6e 65 39 99 81 31 9b 3e 3f 2f bf ab 9d a9 55 16 97 0b c2 6d 88 1c 54 d2 a2 ad 58 Data Ascii: :FqiT?uWn>toZao`k_\begP%V0_Zg'j1AL-\|r(~A[%EQDPPP4`8d^>]m]pElG-X'FoNW\|;?a!O'VRQL1P'@^ne91>?/UmTX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.7	49844	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:10 UTC	655	OUT	GET /browser-ui/3.55.0/FirstLayerCustomization-de8ec6f3-0ed66d66.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.55.0/DefaultUI-efcc91c9-fa5e06dd.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:10 UTC	1006	IN	HTTP/1.1 200 OK x-goog-generation: 1726571791639026 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1077 Content-Encoding: gzip x-goog-hash: crc32c=mhk/4w== x-goog-hash: md5=wuky1NGwJAFGMPIr2BeqOw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 1077 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljtLM8rtR-2ZxRdfYkEkSyGId0yHwhxH-MCOw44H7Mj8Ew1Ap9GPrSPfNRtiefWxO3gbJTHSrz8Jlw Server: UploadServer Date: Tue, 17 Sep 2024 11:17:17 GMT Expires: Wed, 17 Sep 2025 11:17:17 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:31 GMT ETag: "c2e932d4d1b024014630f22bd817aa3b" Content-Type: text/javascript Age: 1164233 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:10 UTC	384	IN	Data Raw: 1f 8b 08 08 0f 65 e9 66 02 ff 74 6d 70 7a 33 39 6d 34 65 71 6f 00 8d 56 db 6e e3 36 10 7d ef 57 68 5d 20 88 80 89 ea 45 92 6e eb 40 0d 7c c1 62 8d a6 c9 22 89 fb d0 37 5a 1a c9 ac 25 52 20 29 c7 8a ed 7f 2f 49 89 b6 9c 38 5b 59 41 68 f1 0c cf 5c c8 39 26 cd 0b 2e d4 86 70 8f 48 8f 83 fe a7 ff 32 20 2b 33 52 20 2f 66 64 40 d6 66 14 40 2a 33 2a 20 af 66 8c 77 89 e0 79 2f f8 85 b2 18 d7 41 ce e3 32 c3 e0 5f d9 bb 59 11 e1 61 98 94 2c 52 94 b3 f3 cc df 98 19 16 66 41 54 4a c5 73 fa 4a 0c 70 a3 16 54 06 24 a3 29 cb 91 a9 f0 9c 95 59 16 86 ec 76 c5 69 ec f5 07 2c 98 97 4a 71 36 74 16 fe 76 ab 82 6f 0f 8f d3 7f 1e ee 9f 87 77 60 d7 cf b9 88 51 3c 92 98 96 32 a4 e7 fc 04 4b cb 62 64 19 a1 77 55 ac 7b be 5f 33 48 8c 38 8b ef 48 85 42 87 98 73 81 53 96 f0 da 72 26 Data Ascii: eftmpz39m4eqoVn6}Wh] En@\|b"7Z%R )/I8[YAh\9&.pH2 +3R /fd@f@3 fwy/A2_Ya,RfATJsJpT$)Yvi,Jq6tvow`Q<2KbdwU{_3H8HBsSr&
2024-09-30 22:41:10 UTC	693	IN	Data Raw: fc 9b 4a aa ad ea 15 09 d7 5b b9 49 48 4e b3 6a c0 f7 51 97 61 fd 6d e2 a2 9c 58 cb 76 02 a5 83 ca a0 5e 0e bd 51 46 d9 f2 2f 12 3d 55 52 61 fe 55 2f 00 ef 82 14 45 86 17 d2 4e 81 f7 84 29 47 6f 36 05 ef 91 cf b9 e2 e0 3d ac ab 14 d9 c5 13 61 12 bc d9 bc 64 aa 04 6f 4c 98 22 02 75 5e de 57 2a 88 57 a3 13 61 3c d6 df bf 61 b6 42 45 23 e2 dd 63 89 ad 77 f0 86 82 12 bd 50 6a bb 0b 89 82 26 3d 1f 24 7d c5 56 7e f2 ff f3 93 0e d2 47 4e 2f 86 cf 57 fe ae ae 59 66 cf de 66 4e a2 65 2a 78 c9 e2 31 cf b8 d0 ec d9 9e 7f f5 9e 3f 32 46 6d 07 2b 87 ad 6a c6 d1 9e cf 87 fd f9 f4 a1 dd 0f 83 43 c7 b4 98 db 16 b6 2f a0 f7 9b 6d 18 17 af de 15 a9 37 59 27 f8 3e d2 a8 43 a4 91 c3 22 cb 65 36 d6 84 78 d9 37 8f 0e 91 ea 8e 7c cf 9c 76 60 4e 1d 96 5a e6 a9 26 32 cc d7 bf 9b Data Ascii: J[IHNjQamXv^QF/=URaU/EN)Go6=adoL"u^WWa<aBE#cwPj&=$}V~GN/WYffNex1?2Fm+jC/m7Y'>C"e6x7\|v`NZ&2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.7	49843	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:10 UTC	652	OUT	GET /browser-ui/3.55.0/ButtonsCustomization-5698ac85-5d43b15f.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.55.0/DefaultUI-efcc91c9-fa5e06dd.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:10 UTC	1004	IN	HTTP/1.1 200 OK x-goog-generation: 1726571789485759 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 236 Content-Encoding: gzip x-goog-hash: crc32c=j4Bobw== x-goog-hash: md5=gQ7iplowK1+IDjoA6EDWzg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 236 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljvsHhcHaAP-H5udPGMJtrtIDyh0d6n-aiO7NChCjnC01V-xIcPDZmIIIOWbXaG72lqGE62Y82L8eQ Server: UploadServer Date: Tue, 17 Sep 2024 11:17:17 GMT Expires: Wed, 17 Sep 2025 11:17:17 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:29 GMT ETag: "810ee2a65a302b5f880e3a00e840d6ce" Content-Type: text/javascript Age: 1164233 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:10 UTC	236	IN	Data Raw: 1f 8b 08 08 0d 65 e9 66 02 ff 74 6d 70 79 69 79 6c 72 66 6a 64 00 8d 91 4d 6a c3 30 10 85 f7 3d 85 c9 ca 06 a1 66 1d 23 0a e9 15 72 01 55 a3 a4 93 ca 33 41 1e 05 a7 8e ef 5e ff 44 2d 74 11 0c b3 18 de 7b 7c f3 60 b0 b9 70 94 de b6 c5 38 3c 1c 23 37 1b fd 8a 04 be d3 0d 43 0a 5e 9f db 4d 7d b5 b1 08 e6 98 c8 09 32 95 a1 ea 27 85 14 28 51 a8 a2 09 da a5 56 b8 c1 6f 3b 05 6a f9 c4 56 5b e7 fc 45 4c ff 61 dd d7 29 72 22 78 e7 c0 71 c7 25 a5 10 8c 31 25 99 65 8b 6f 57 46 28 b6 bb a8 dd 14 a9 ee f7 45 18 43 94 3d 7a 00 f7 42 fb 5f 62 a5 c4 77 f2 9f 0b 2b b8 90 3d f8 e3 1e 46 56 35 a8 b9 3d 78 ba 3d eb 2e 2b 6e 48 f6 64 c6 ad 68 8e 2b a8 98 3d cc d4 a5 f7 50 fb 6e fe 66 18 ea 97 1f 68 69 ea 5d d9 01 00 00 Data Ascii: eftmpyiylrfjdMj0=f#rU3A^D-t{\|`p8<#7C^M}2'(QVo;jV[ELa)r"xq%1%eoWF(EC=zB_bw+=FV5=x=.+nHdh+=Pnfhi]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.7	49845	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:10 UTC	645	OUT	GET /browser-ui/3.55.0/SecondLayerUI-2d936468-4fd84b50.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.55.0/DefaultUI-efcc91c9-fa5e06dd.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:10 UTC	1004	IN	HTTP/1.1 200 OK x-goog-generation: 1726571793026898 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 318 Content-Encoding: gzip x-goog-hash: crc32c=hi33HQ== x-goog-hash: md5=5G75GCCB1bWp29wfCyADbQ== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 318 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljuIFMvqZTGoRIjQmTMAfMcLDiCVCYp_K1Z0hgVrgOPrAbz5S-lqyBJR75EYHR2Hj8jx3M59SIoguw Server: UploadServer Date: Tue, 17 Sep 2024 11:17:18 GMT Expires: Wed, 17 Sep 2025 11:17:18 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:33 GMT ETag: "e46ef9182081d5b5a9dbdc1f0b20036d" Content-Type: text/javascript Age: 1164232 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:10 UTC	318	IN	Data Raw: 1f 8b 08 08 10 65 e9 66 02 ff 74 6d 70 6c 35 75 5f 65 64 35 35 00 75 92 41 6f c2 30 0c 85 ef fb 15 85 53 2b 45 19 bb ae 8a 26 c6 76 98 34 69 93 86 76 37 8d 81 4c 69 3c c5 69 81 41 ff fb d2 42 45 25 e0 64 2b 9f df f3 53 12 53 fe 92 0f 7b 98 26 c0 09 0a a0 b6 82 00 df 56 16 f0 dc 56 23 da 43 4e a8 59 7a 2a c7 f2 de 38 8d 5b 59 92 ae 2c ca 1f 1e e7 75 14 78 b5 ac 5c 11 0c b9 14 b2 7d 58 1b 96 86 3f 6a f4 16 76 af 0e 16 16 b5 c2 88 1a 11 ce 93 98 ed 3b ad 08 79 a7 d0 b8 84 ca 86 6f 83 1b 05 29 4a c6 82 9c 7e 87 1d fa 21 13 2c 67 d3 79 26 3a cd da 68 7c 81 00 9f 9e 0a 64 36 6e f5 85 be 36 b1 bf b0 b8 3d 2a 46 0f 27 bb 8b d0 26 a6 3c 22 5e d3 66 06 01 57 e4 0d f2 1c 16 17 0b 02 2c f8 3c f1 c6 27 0f 31 9a 0c 2c fa 9d b7 0c 7a 7e 45 1e f1 8c 2c f9 a8 a3 d4 55 d6 Data Ascii: eftmpl5u_ed55uAo0S+E&v4iv7Li<iABE%d+SS{&VV#CNYz8[Y,ux\}X?jv;yo)J~!,gy&:h\|d6n6=F'&<"^fW,<'1,z~E,U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.7	49846	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:10 UTC	391	OUT	GET /browser-ui/3.55.0/DefaultUI-efcc91c9-fa5e06dd.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:10 UTC	1004	IN	HTTP/1.1 200 OK x-goog-generation: 1726571791147992 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 755 Content-Encoding: gzip x-goog-hash: crc32c=WngRyw== x-goog-hash: md5=sLfPEjPIk0acr3y/MUVWDg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 755 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljvlhLah2QqLIk_sfsGjT8kVs4vH4-r7CTsCe-39lqkHsNJrEN4S4j3dGQ3wpVnZ-eYSPYRJqIhuHA Server: UploadServer Date: Tue, 17 Sep 2024 11:17:17 GMT Expires: Wed, 17 Sep 2025 11:17:17 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:31 GMT ETag: "b0b7cf1233c893469caf7cbf3145560e" Content-Type: text/javascript Age: 1164233 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:10 UTC	386	IN	Data Raw: 1f 8b 08 08 0f 65 e9 66 02 ff 74 6d 70 30 79 72 64 6a 64 32 6e 00 9d 55 5d 6f 9b 30 14 7d df af 48 d8 0b 48 0e 4b d7 24 4a 89 d0 94 4f a9 12 6d a5 25 db bb c1 06 bc 81 1d d9 86 94 25 f9 ef b3 21 24 d0 a6 5a 34 81 62 73 ef b9 e7 de eb 63 3b 24 dd 32 2e f7 69 07 8a 0e 06 91 1e 18 80 4c 8f 14 a8 1f f5 12 00 a5 1e 39 80 99 1e e5 31 e4 2c 35 ec 2f 84 22 fc 6a a7 0c 65 09 b6 7f 09 63 42 2a b2 32 0a 02 a8 07 01 ca 18 54 c7 ac 08 17 d2 83 05 e6 f3 4c 48 96 92 3f 50 12 46 7b 08 8f 71 30 0a ef 7b 7d 8c 46 23 f5 36 09 93 3a 7a 96 49 c9 a8 68 87 0e 47 0f 63 18 8c 87 bd 21 1a dc fb 77 c3 b0 19 ca 75 f6 0c 94 0d 04 35 cd 1a 07 8c a2 b2 8a 1f 8f bd af e8 e1 7e 34 18 8d 7b 83 10 8d 07 fe b0 5f c6 e7 90 77 22 37 cc 68 a0 93 98 d0 da d7 f3 4e 64 aa 95 b2 f6 1a 91 83 02 78 Data Ascii: eftmp0yrdjd2nU]o0}HHK$JOm%%!$Z4bsc;$2.iL91,5/"jecB*2TLH?PF{q0{}F#6:zIhGc!wu5~4{_w"7hNdx
2024-09-30 22:41:10 UTC	369	IN	Data Raw: 3a c5 46 71 69 f2 d5 54 3f 86 75 04 02 e6 57 9a b9 e4 f1 6e c8 e3 d5 3e cf d6 74 6f 5a b9 d4 7f 61 8d 6f 60 8d 6b 5f 5c b3 96 d5 1f 8f 16 08 ed f0 bc 7f db 62 65 67 b1 50 25 56 90 30 81 5f b6 5a 67 27 6a 84 d9 0d c7 e1 a0 ab 01 31 41 b8 da d9 0b 4c 0b 87 9b 2d 7c db 0b ba 91 ed cb 72 fa 28 7e 12 41 fc 04 5b 25 c3 86 45 51 82 85 d3 bd 03 44 cc a1 c4 11 e3 c5 c9 b8 a4 50 e1 50 bb 90 8f 50 2a dc 83 34 ca 60 84 d7 38 c1 81 64 bc 8e ef 5e a9 ed 8c dd 11 19 c4 ba 3e 11 b3 5d 6d 5d 70 b6 45 6c 47 2d a0 ad eb 58 9d c9 05 16 01 27 e5 02 bc a8 46 c4 6f c9 b6 4e 57 af 7c 8b 3b 13 b8 84 3f 61 21 14 d1 07 f1 4f cc 27 09 56 8d f9 90 52 cc ab cf 06 e2 51 4c d5 a1 cd 31 50 27 90 40 2a d5 5e 6e 65 39 99 81 31 9b 3e 3f 2f bf ab 9d a9 55 16 97 0b c2 6d 88 1c 54 d2 a2 ad 58 Data Ascii: :FqiT?uWn>toZao`k_\begP%V0_Zg'j1AL-\|r(~A[%EQDPPP4`8d^>]m]pElG-X'FoNW\|;?a!O'VRQL1P'@^ne91>?/UmTX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.7	49847	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:10 UTC	626	OUT	GET /browser-ui/3.55.0/Taglogger-ece90602-40fbde48.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.55.0/index.module.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:11 UTC	1004	IN	HTTP/1.1 200 OK x-goog-generation: 1726571793504496 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 687 Content-Encoding: gzip x-goog-hash: crc32c=M0IwDQ== x-goog-hash: md5=5MIOZoADhQMeyj528R2aMw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 687 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljvL4bTtpaCjGNrLnV2mJ_FSc_I_0bwwjgOYa5nHT-wQKzec23an_k_FfLDtj1UQROuNNyGtgUiCGA Server: UploadServer Date: Tue, 17 Sep 2024 11:17:15 GMT Expires: Wed, 17 Sep 2025 11:17:15 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:33 GMT ETag: "e4c20e66800385031eca3e76f11d9a33" Content-Type: text/javascript Age: 1164236 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:11 UTC	386	IN	Data Raw: 1f 8b 08 08 11 65 e9 66 02 ff 74 6d 70 5f 63 67 63 63 73 69 74 00 6d 54 5d 6f da 30 14 7d df af 70 fd 80 6c 35 98 b2 3e 0d 94 f5 61 eb c3 a4 4a 9d d4 4e 9d 44 33 c9 24 17 70 97 d8 91 7d 5d ca 10 ff 7d d7 40 80 7e 48 51 12 db e7 5c df 7b ee 87 69 5a e7 71 5d 31 1d 18 66 90 fd 4e 3f 76 33 f3 ae e1 6a 60 6c 05 2f aa 71 55 ac 41 3d 05 3e 7e d6 9e e9 7c 16 6d 89 c6 59 21 d7 dd 2f d3 b4 c0 85 09 4a b7 e6 87 0d a8 6d 09 b9 55 73 c0 6e 25 e4 c6 03 46 4f 58 d5 7a 87 0e 57 2d 24 c0 bd f6 f4 0e 47 b3 56 ae 77 17 25 83 e3 3d c9 2a 0f 55 24 33 e2 88 cb bc 5c 9b 99 e0 8d f6 7f f9 59 9e 7b 05 16 fd ea 9e 0c f7 7a bc 01 1d a2 87 f7 07 ad 36 16 df 6d 9f 79 65 75 03 8a bc f5 18 1e 0c 2e 04 af 34 ea 11 97 74 38 e1 cf 26 98 69 0d bc 50 c6 96 75 ac 20 88 1d 23 1d 0f fe 2c 10 Data Ascii: eftmp_cgccsitmT]o0}pl5>aJND3$p}]}@~HQ\{iZq]1fN?v3j`l/qUA=>~\|mY!/JmUsn%FOXzW-$GVw%=*U$3\Y{z6myeu.4t8&iPu #,
2024-09-30 22:41:11 UTC	301	IN	Data Raw: 44 5b 3b 5d f1 4c 9c b0 2b 57 c6 86 b0 1f 90 b6 e2 99 da e0 aa 5c 68 3b 87 d7 44 be 30 55 05 96 53 88 07 1b 47 c6 1d 6a a4 fc a0 8a 2d e5 03 c8 6b 2a 25 b9 7d 5e 45 f5 56 b9 63 60 b8 8b 0c 32 9b a3 0a 2d 19 15 7c c0 65 57 5a 78 90 95 8f 06 b4 ff b5 3f bc 12 90 73 ae 4a 67 4b 8d c2 4e 3e 17 32 b3 93 cb a2 d7 13 70 9e 13 f9 78 74 59 48 29 47 6f f0 17 5b fc f0 23 fc 30 e1 b3 23 18 3a 8f ae b8 4c bc d7 41 1d 62 3e 4d 13 d5 c3 ed f4 09 4a 3c 01 2e 74 b8 5d da 9f de b5 e0 71 a5 4a 5d d7 62 97 c3 8c d3 16 e5 ac 49 5d 98 8a 99 77 a6 48 f0 c4 75 33 76 82 48 2d 79 9d 0a 16 42 57 10 fb 5a f8 18 24 e4 f8 6d e3 ef bd 3e 94 d8 77 6a 23 b1 05 1d db 9d 92 22 37 50 07 60 a4 43 70 34 60 6a 4a 2c ff f5 8d 3d 68 6f 8d 9d 8f 18 ea 39 ab b7 06 58 e7 b1 4e 05 c1 0c cd 28 87 2c Data Ascii: D[;]L+W\h;D0USGj-k*%}^EVc`2-\|eWZx?sJgKN>2pxtYH)Go[#0#:LAb>MJ<.t]qJ]bI]wHu3vH-yBWZ$m>wj#"7P`Cp4`jJ,=ho9XN(,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.7	49848	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:10 UTC	402	OUT	GET /browser-ui/3.55.0/ButtonsCustomization-5698ac85-5d43b15f.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:11 UTC	1004	IN	HTTP/1.1 200 OK x-goog-generation: 1726571789485759 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 236 Content-Encoding: gzip x-goog-hash: crc32c=j4Bobw== x-goog-hash: md5=gQ7iplowK1+IDjoA6EDWzg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 236 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljvsHhcHaAP-H5udPGMJtrtIDyh0d6n-aiO7NChCjnC01V-xIcPDZmIIIOWbXaG72lqGE62Y82L8eQ Server: UploadServer Date: Tue, 17 Sep 2024 11:17:17 GMT Expires: Wed, 17 Sep 2025 11:17:17 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:29 GMT ETag: "810ee2a65a302b5f880e3a00e840d6ce" Content-Type: text/javascript Age: 1164234 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:11 UTC	236	IN	Data Raw: 1f 8b 08 08 0d 65 e9 66 02 ff 74 6d 70 79 69 79 6c 72 66 6a 64 00 8d 91 4d 6a c3 30 10 85 f7 3d 85 c9 ca 06 a1 66 1d 23 0a e9 15 72 01 55 a3 a4 93 ca 33 41 1e 05 a7 8e ef 5e ff 44 2d 74 11 0c b3 18 de 7b 7c f3 60 b0 b9 70 94 de b6 c5 38 3c 1c 23 37 1b fd 8a 04 be d3 0d 43 0a 5e 9f db 4d 7d b5 b1 08 e6 98 c8 09 32 95 a1 ea 27 85 14 28 51 a8 a2 09 da a5 56 b8 c1 6f 3b 05 6a f9 c4 56 5b e7 fc 45 4c ff 61 dd d7 29 72 22 78 e7 c0 71 c7 25 a5 10 8c 31 25 99 65 8b 6f 57 46 28 b6 bb a8 dd 14 a9 ee f7 45 18 43 94 3d 7a 00 f7 42 fb 5f 62 a5 c4 77 f2 9f 0b 2b b8 90 3d f8 e3 1e 46 56 35 a8 b9 3d 78 ba 3d eb 2e 2b 6e 48 f6 64 c6 ad 68 8e 2b a8 98 3d cc d4 a5 f7 50 fb 6e fe 66 18 ea 97 1f 68 69 ea 5d d9 01 00 00 Data Ascii: eftmpyiylrfjdMj0=f#rU3A^D-t{\|`p8<#7C^M}2'(QVo;jV[ELa)r"xq%1%eoWF(EC=zB_bw+=FV5=x=.+nHdh+=Pnfhi]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.7	49850	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:10 UTC	405	OUT	GET /browser-ui/3.55.0/FirstLayerCustomization-de8ec6f3-0ed66d66.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:11 UTC	1006	IN	HTTP/1.1 200 OK x-goog-generation: 1726571791639026 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1077 Content-Encoding: gzip x-goog-hash: crc32c=mhk/4w== x-goog-hash: md5=wuky1NGwJAFGMPIr2BeqOw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 1077 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljusHogjmpcXQzpzquFEYQkHy8tyvN22AoWBZYaKqSKh0-8lOrzyIgZHZ_i3xF37RuFZ2in4bF_7XQ Server: UploadServer Date: Tue, 17 Sep 2024 11:17:17 GMT Expires: Wed, 17 Sep 2025 11:17:17 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:31 GMT ETag: "c2e932d4d1b024014630f22bd817aa3b" Content-Type: text/javascript Age: 1164234 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:11 UTC	384	IN	Data Raw: 1f 8b 08 08 0f 65 e9 66 02 ff 74 6d 70 7a 33 39 6d 34 65 71 6f 00 8d 56 db 6e e3 36 10 7d ef 57 68 5d 20 88 80 89 ea 45 92 6e eb 40 0d 7c c1 62 8d a6 c9 22 89 fb d0 37 5a 1a c9 ac 25 52 20 29 c7 8a ed 7f 2f 49 89 b6 9c 38 5b 59 41 68 f1 0c cf 5c c8 39 26 cd 0b 2e d4 86 70 8f 48 8f 83 fe a7 ff 32 20 2b 33 52 20 2f 66 64 40 d6 66 14 40 2a 33 2a 20 af 66 8c 77 89 e0 79 2f f8 85 b2 18 d7 41 ce e3 32 c3 e0 5f d9 bb 59 11 e1 61 98 94 2c 52 94 b3 f3 cc df 98 19 16 66 41 54 4a c5 73 fa 4a 0c 70 a3 16 54 06 24 a3 29 cb 91 a9 f0 9c 95 59 16 86 ec 76 c5 69 ec f5 07 2c 98 97 4a 71 36 74 16 fe 76 ab 82 6f 0f 8f d3 7f 1e ee 9f 87 77 60 d7 cf b9 88 51 3c 92 98 96 32 a4 e7 fc 04 4b cb 62 64 19 a1 77 55 ac 7b be 5f 33 48 8c 38 8b ef 48 85 42 87 98 73 81 53 96 f0 da 72 26 Data Ascii: eftmpz39m4eqoVn6}Wh] En@\|b"7Z%R )/I8[YAh\9&.pH2 +3R /fd@f@3 fwy/A2_Ya,RfATJsJpT$)Yvi,Jq6tvow`Q<2KbdwU{_3H8HBsSr&
2024-09-30 22:41:11 UTC	693	IN	Data Raw: fc 9b 4a aa ad ea 15 09 d7 5b b9 49 48 4e b3 6a c0 f7 51 97 61 fd 6d e2 a2 9c 58 cb 76 02 a5 83 ca a0 5e 0e bd 51 46 d9 f2 2f 12 3d 55 52 61 fe 55 2f 00 ef 82 14 45 86 17 d2 4e 81 f7 84 29 47 6f 36 05 ef 91 cf b9 e2 e0 3d ac ab 14 d9 c5 13 61 12 bc d9 bc 64 aa 04 6f 4c 98 22 02 75 5e de 57 2a 88 57 a3 13 61 3c d6 df bf 61 b6 42 45 23 e2 dd 63 89 ad 77 f0 86 82 12 bd 50 6a bb 0b 89 82 26 3d 1f 24 7d c5 56 7e f2 ff f3 93 0e d2 47 4e 2f 86 cf 57 fe ae ae 59 66 cf de 66 4e a2 65 2a 78 c9 e2 31 cf b8 d0 ec d9 9e 7f f5 9e 3f 32 46 6d 07 2b 87 ad 6a c6 d1 9e cf 87 fd f9 f4 a1 dd 0f 83 43 c7 b4 98 db 16 b6 2f a0 f7 9b 6d 18 17 af de 15 a9 37 59 27 f8 3e d2 a8 43 a4 91 c3 22 cb 65 36 d6 84 78 d9 37 8f 0e 91 ea 8e 7c cf 9c 76 60 4e 1d 96 5a e6 a9 26 32 cc d7 bf 9b Data Ascii: J[IHNjQamXv^QF/=URaU/EN)Go6=adoL"u^WWa<aBE#cwPj&=$}V~GN/WYffNex1?2Fm+jC/m7Y'>C"e6x7\|v`NZ&2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.7	49849	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:10 UTC	395	OUT	GET /browser-ui/3.55.0/SecondLayerUI-2d936468-4fd84b50.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:11 UTC	1004	IN	HTTP/1.1 200 OK x-goog-generation: 1726571793026898 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 318 Content-Encoding: gzip x-goog-hash: crc32c=hi33HQ== x-goog-hash: md5=5G75GCCB1bWp29wfCyADbQ== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 318 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljuIFMvqZTGoRIjQmTMAfMcLDiCVCYp_K1Z0hgVrgOPrAbz5S-lqyBJR75EYHR2Hj8jx3M59SIoguw Server: UploadServer Date: Tue, 17 Sep 2024 11:17:18 GMT Expires: Wed, 17 Sep 2025 11:17:18 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:33 GMT ETag: "e46ef9182081d5b5a9dbdc1f0b20036d" Content-Type: text/javascript Age: 1164233 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:11 UTC	318	IN	Data Raw: 1f 8b 08 08 10 65 e9 66 02 ff 74 6d 70 6c 35 75 5f 65 64 35 35 00 75 92 41 6f c2 30 0c 85 ef fb 15 85 53 2b 45 19 bb ae 8a 26 c6 76 98 34 69 93 86 76 37 8d 81 4c 69 3c c5 69 81 41 ff fb d2 42 45 25 e0 64 2b 9f df f3 53 12 53 fe 92 0f 7b 98 26 c0 09 0a a0 b6 82 00 df 56 16 f0 dc 56 23 da 43 4e a8 59 7a 2a c7 f2 de 38 8d 5b 59 92 ae 2c ca 1f 1e e7 75 14 78 b5 ac 5c 11 0c b9 14 b2 7d 58 1b 96 86 3f 6a f4 16 76 af 0e 16 16 b5 c2 88 1a 11 ce 93 98 ed 3b ad 08 79 a7 d0 b8 84 ca 86 6f 83 1b 05 29 4a c6 82 9c 7e 87 1d fa 21 13 2c 67 d3 79 26 3a cd da 68 7c 81 00 9f 9e 0a 64 36 6e f5 85 be 36 b1 bf b0 b8 3d 2a 46 0f 27 bb 8b d0 26 a6 3c 22 5e d3 66 06 01 57 e4 0d f2 1c 16 17 0b 02 2c f8 3c f1 c6 27 0f 31 9a 0c 2c fa 9d b7 0c 7a 7e 45 1e f1 8c 2c f9 a8 a3 d4 55 d6 Data Ascii: eftmpl5u_ed55uAo0S+E&v4iv7Li<iABE%d+SS{&VV#CNYz8[Y,ux\}X?jv;yo)J~!,gy&:h\|d6n6=F'&<"^fW,<'1,z~E,U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.7	49854	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:11 UTC	391	OUT	GET /browser-ui/3.55.0/Taglogger-ece90602-40fbde48.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:11 UTC	1004	IN	HTTP/1.1 200 OK x-goog-generation: 1726571793504496 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 687 Content-Encoding: gzip x-goog-hash: crc32c=M0IwDQ== x-goog-hash: md5=5MIOZoADhQMeyj528R2aMw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 687 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljs7cEO3xC3XmYV8tRuApqFSs6dY1481AhDDmhbmI2J86_TzbWJEv0-fTLGazi5JhZ6mwbscgcOuyw Server: UploadServer Date: Tue, 17 Sep 2024 11:17:17 GMT Expires: Wed, 17 Sep 2025 11:17:17 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:33 GMT ETag: "e4c20e66800385031eca3e76f11d9a33" Content-Type: text/javascript Age: 1164234 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:11 UTC	386	IN	Data Raw: 1f 8b 08 08 11 65 e9 66 02 ff 74 6d 70 5f 63 67 63 63 73 69 74 00 6d 54 5d 6f da 30 14 7d df af 70 fd 80 6c 35 98 b2 3e 0d 94 f5 61 eb c3 a4 4a 9d d4 4e 9d 44 33 c9 24 17 70 97 d8 91 7d 5d ca 10 ff 7d d7 40 80 7e 48 51 12 db e7 5c df 7b ee 87 69 5a e7 71 5d 31 1d 18 66 90 fd 4e 3f 76 33 f3 ae e1 6a 60 6c 05 2f aa 71 55 ac 41 3d 05 3e 7e d6 9e e9 7c 16 6d 89 c6 59 21 d7 dd 2f d3 b4 c0 85 09 4a b7 e6 87 0d a8 6d 09 b9 55 73 c0 6e 25 e4 c6 03 46 4f 58 d5 7a 87 0e 57 2d 24 c0 bd f6 f4 0e 47 b3 56 ae 77 17 25 83 e3 3d c9 2a 0f 55 24 33 e2 88 cb bc 5c 9b 99 e0 8d f6 7f f9 59 9e 7b 05 16 fd ea 9e 0c f7 7a bc 01 1d a2 87 f7 07 ad 36 16 df 6d 9f 79 65 75 03 8a bc f5 18 1e 0c 2e 04 af 34 ea 11 97 74 38 e1 cf 26 98 69 0d bc 50 c6 96 75 ac 20 88 1d 23 1d 0f fe 2c 10 Data Ascii: eftmp_cgccsitmT]o0}pl5>aJND3$p}]}@~HQ\{iZq]1fN?v3j`l/qUA=>~\|mY!/JmUsn%FOXzW-$GVw%=*U$3\Y{z6myeu.4t8&iPu #,
2024-09-30 22:41:11 UTC	301	IN	Data Raw: 44 5b 3b 5d f1 4c 9c b0 2b 57 c6 86 b0 1f 90 b6 e2 99 da e0 aa 5c 68 3b 87 d7 44 be 30 55 05 96 53 88 07 1b 47 c6 1d 6a a4 fc a0 8a 2d e5 03 c8 6b 2a 25 b9 7d 5e 45 f5 56 b9 63 60 b8 8b 0c 32 9b a3 0a 2d 19 15 7c c0 65 57 5a 78 90 95 8f 06 b4 ff b5 3f bc 12 90 73 ae 4a 67 4b 8d c2 4e 3e 17 32 b3 93 cb a2 d7 13 70 9e 13 f9 78 74 59 48 29 47 6f f0 17 5b fc f0 23 fc 30 e1 b3 23 18 3a 8f ae b8 4c bc d7 41 1d 62 3e 4d 13 d5 c3 ed f4 09 4a 3c 01 2e 74 b8 5d da 9f de b5 e0 71 a5 4a 5d d7 62 97 c3 8c d3 16 e5 ac 49 5d 98 8a 99 77 a6 48 f0 c4 75 33 76 82 48 2d 79 9d 0a 16 42 57 10 fb 5a f8 18 24 e4 f8 6d e3 ef bd 3e 94 d8 77 6a 23 b1 05 1d db 9d 92 22 37 50 07 60 a4 43 70 34 60 6a 4a 2c ff f5 8d 3d 68 6f 8d 9d 8f 18 ea 39 ab b7 06 58 e7 b1 4e 05 c1 0c cd 28 87 2c Data Ascii: D[;]L+W\h;D0USGj-k*%}^EVc`2-\|eWZx?sJgKN>2pxtYH)Go[#0#:LAb>MJ<.t]qJ]bI]wHu3vH-yBWZ$m>wj#"7P`Cp4`jJ,=ho9XN(,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.7	49852	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:11 UTC	621	OUT	GET /browser-ui/3.55.0/PrivacyButton-62ab6c78.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.55.0/index.module.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:11 UTC	1006	IN	HTTP/1.1 200 OK x-goog-generation: 1726571792330446 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 2448 Content-Encoding: gzip x-goog-hash: crc32c=Bpv1jg== x-goog-hash: md5=XacvmTTsTaikeYlm8La/2A== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 2448 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljtRUGlxiWPDSdVubxLPgzWOJ4A8PEmz1SAPsVYmXA9R-FMVOfn4IWfUMBxsp1tJxsqJQcQLRo4_8A Server: UploadServer Date: Tue, 17 Sep 2024 11:17:15 GMT Expires: Wed, 17 Sep 2025 11:17:15 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:32 GMT ETag: "5da72f9934ec4da8a4798966f0b6bfd8" Content-Type: text/javascript Age: 1164236 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:11 UTC	384	IN	Data Raw: 1f 8b 08 08 0f 65 e9 66 02 ff 74 6d 70 75 68 6e 71 65 77 35 65 00 d5 58 69 8f db c8 11 fd 9e 5f 41 13 bb 0b 09 68 b6 d9 bc 49 41 31 e2 c1 02 09 60 c7 ce fa 00 82 45 10 53 12 47 e2 9a 12 05 92 9a 4b d0 7f cf 7b d5 3a 66 c7 8e e1 7c 08 90 60 86 ec 62 77 75 1d af 0e 8a 5d af b7 6d 37 ec cb 37 4e d9 3b b5 2a df 72 1c 54 f9 37 8e ad ba e7 d0 a8 f2 8a e3 46 95 3f 73 ac 54 f9 0b c7 b9 2a df 71 ec 54 f9 9e 63 a9 ca 0f 1c fb c3 75 d7 ae 5d fd bc de 2c aa 3b bd 6e 17 bb a6 d2 bf f5 ee 64 de 6e fa c1 59 4c 6b 3d db 0d 43 bb 19 fd ea 96 4d bd dc 78 f5 50 ad fb 62 5e 6d 86 aa 9b cc ca f9 e7 65 d7 ee 36 8b c2 55 ee 64 d6 76 8b aa 2b 36 ed a6 3a d2 5e 57 2e ea 5d 5f c4 fe 8f 98 81 a0 75 11 f9 db 3b d0 77 5e bf 2a 17 ed 6d 81 47 27 c4 15 e3 f2 0c 6e dd 72 56 8e 7c 25 7f Data Ascii: eftmpuhnqew5eXi_AhIA1`ESGK{:f\|`bwu]m77N;rT7F?sTqTcu],;ndnYLk=CMxPb^me6Udv+6:^W.]_u;w^*mG'nrV\|%
2024-09-30 22:41:11 UTC	1390	IN	Data Raw: 9c f7 6e ea be 9e 35 d5 be dd 0d 4d bd a9 bc 7e b8 6f aa a2 dc 0d ed e4 34 65 75 02 b5 c9 01 5b f7 47 74 83 08 13 67 d3 2f 16 1e dc 7f a8 d1 68 3f ac aa 75 55 d4 87 f1 f4 8f b5 de 9d 82 db eb 6d 57 df 94 f3 7b 3d 5b ea 45 75 5d ee 9a 61 4c f6 ba 7f dd ce 6a 68 ae 95 dd 39 c8 ce 17 c3 d7 f6 ae 85 f5 5d fd 00 b6 af ad 2f aa fe f3 d0 6e c9 20 c2 cf 68 8a 39 ee ac 71 a7 d3 69 fd c2 65 82 b8 85 5b 6f b0 5a 36 ee 57 79 bb 6f f0 fe 57 8d ee 57 48 59 8b df 0b 53 f8 e3 ef 05 b5 ec 3e 8f d5 70 54 f7 16 85 dc 95 f5 f0 2d 14 18 c8 ef 45 e1 29 ef 58 6d a7 23 70 34 23 b7 bf 59 ba 6a 7f b7 6e 36 7d e1 ae 86 61 5b 3c 7f 7e 7b 7b ab 6f 43 dd 76 cb e7 81 ef fb cf 85 e7 94 f9 c6 f7 7f 74 d5 4d 5d dd be 6c ef 0a d7 77 7c 27 88 f0 ef aa 63 92 5b 86 eb ba 69 0a 77 be eb 3a 14 Data Ascii: n5M~o4eu[Gtg/h?uUmW{=[Eu]aLjh9]/n h9qie[oZ6WyoWWHYS>pT-E)Xm#p4#Yjn6}a[<~{{oCvtM]lw\|'c[iw:
2024-09-30 22:41:11 UTC	674	IN	Data Raw: 44 9b a2 b6 57 7c e7 28 64 5e 22 7c 34 06 ab c4 c1 5a 2f ec af 02 4a c8 e0 91 75 53 1d dd 84 32 38 94 0b 1e 8a 78 10 34 25 c9 72 c5 be a3 f8 63 29 86 f4 98 54 9a 5a 2a e8 89 37 65 50 90 1f 2a eb f5 79 af 18 82 49 06 22 26 5f 26 56 9d 35 a4 4a 00 3f 1b a2 88 37 85 00 9d 93 c5 4e 43 b8 3d 81 9b 68 5b 13 89 36 97 73 75 f6 bf 21 d8 4a c0 16 14 59 91 ca c2 0a 71 70 91 c4 8a 60 43 4e 2c 1f c9 39 0d 0b 33 71 9d 88 5a 19 12 30 87 c9 42 f4 0c 0d ca 24 f4 ea 12 d9 4b 0a 10 6a da a4 e8 9f 6f 0d 17 ee e6 92 51 e7 84 92 cf 76 ef a8 ee 51 e6 d9 fc 74 ae 90 cd 74 29 20 a0 c7 cc c6 fe 13 f9 e0 bc e6 0f c5 48 19 fe 56 61 a7 01 e2 d0 10 b3 4d a5 42 e0 ea 4f 0f ea 34 41 9a 93 ea 38 f9 0e a9 97 a7 22 45 5d 04 da 9e 30 9b d6 7a 51 df 8c 7e 75 ed e9 01 3f 9f 8f a5 58 6f 56 55 Data Ascii: DW\|(d^"\|4Z/JuS28x4%rc)TZ7ePyI"&_&V5J?7NC=h[6su!JYqp`CN,93qZ0B$KjoQvQtt) HVaMBO4A8"E]0zQ~u?XoVU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.7	49853	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:11 UTC	613	OUT	GET /browser-ui/3.55.0/index-3ff76a26.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.55.0/index.module.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:11 UTC	1004	IN	HTTP/1.1 200 OK x-goog-generation: 1726571799056169 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 809 Content-Encoding: gzip x-goog-hash: crc32c=nJex7Q== x-goog-hash: md5=IqSjq8Xpe4ZLIe33uBQtlg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 809 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljsPFmIUIrbM3cpsCSOcDQoGqa5-MTzoaIJaRCNXZfoCzpE6oWCx2DqTDl7-X4XzycJCiESt5sz7cw Server: UploadServer Date: Tue, 17 Sep 2024 11:17:18 GMT Expires: Wed, 17 Sep 2025 11:17:18 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:39 GMT ETag: "22a4a3abc5e97b864b21edf7b8142d96" Content-Type: text/javascript Age: 1164233 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:11 UTC	386	IN	Data Raw: 1f 8b 08 08 16 65 e9 66 02 ff 74 6d 70 6b 67 39 37 6a 6c 77 77 00 95 55 6d 6f 9b 48 10 fe de 5f e1 f6 43 b5 48 73 5c 52 f5 72 27 2c 4e 42 18 37 34 7e 93 21 96 4e 55 65 8d 61 b1 37 59 2f 16 0b 7e 09 f0 df 6f 97 e0 26 71 e3 a8 fd f4 8c 67 9f 9d 79 76 3c 33 b0 f5 26 cd f2 12 dd 0e ca 0e 02 f6 34 52 58 69 e0 80 9e 46 01 d8 d7 98 02 7e d1 98 03 5e 6b 94 70 d0 10 01 fa 1a 19 e0 57 8d 19 e0 8d c6 18 70 a0 d1 01 1c 6a 2c 00 47 1a dd 3a c9 d2 f5 07 f3 4f 26 62 ba 37 d7 69 5c 70 6a de c9 0f dd 28 15 32 ef 2c 6d 4a 08 31 ec 7f e3 83 c0 35 8b fc 46 e2 24 e5 87 84 71 4e 8e 17 ff 48 e8 3f 97 8b ab bf 12 7d 15 58 43 32 d7 34 47 b3 c8 b8 61 18 b0 f9 c5 38 9f 92 e8 f2 ea 82 fe 7d 2e ce fa 17 e3 7c 8e 2f e2 ab f8 f2 e2 4c 9c ee 16 b3 ce c1 46 15 ab c4 28 a2 9b dc e1 bc 47 Data Ascii: eftmpkg97jlwwUmoH_CHs\Rr',NB74~!NUea7Y/~o&qgyv<3&4RXiF~^kpWpj,G:O&b7i\pj(2,mJ15F$qNH?}XC24Ga8}.\|/LF(G
2024-09-30 22:41:11 UTC	423	IN	Data Raw: a3 2c 60 ab 5d f7 b5 9d aa 14 df f6 50 f2 14 63 26 96 d6 ac fe 6e e7 24 34 a9 c8 69 a6 83 ca 26 a8 4a 09 a1 62 3e 11 e7 2d f1 47 81 02 9a 6d 59 44 e5 09 6f 72 ca eb a7 99 aa d6 09 6b 78 ca fa 39 e1 6d 4b 69 2b 7e 26 dd dd 4b d6 ab c9 b6 2f 39 6d aa 07 5b 37 53 39 ab aa 3d 31 cc 7c 45 05 21 28 0f 22 6a dc b8 43 96 77 a6 24 33 03 cf 1d 8f 7a f3 81 f3 9f 37 35 60 44 de 5f 18 b5 61 d4 70 63 3f b1 55 10 12 93 7b 70 cc e1 78 ea cd fd 51 7f 3c 1d 3a a1 3f 1e cd 07 fe e8 06 56 10 9a fa 4f ca 30 ba 57 8a 26 6c 4f b9 01 bb 8f 1f c9 63 1e a5 e0 31 b2 01 63 52 90 1e 2c 94 95 10 9d e6 fa 24 cd ab 97 7e 3f f7 98 b8 ea 65 d3 99 ef 7a c1 7c e6 8d 7a e3 69 60 c0 99 57 1b 75 57 ee 58 1e ad c8 c2 28 23 94 b4 23 4d d7 9d 38 56 46 f3 22 13 9d 88 30 28 13 e4 7c a1 72 58 42 75 Data Ascii: ,`]Pc&n$4i&Jb>-GmYDorkx9mKi+~&K/9m[7S9=1\|E!("jCw$3z75`D_apc?U{pxQ<:?VO0W&lOc1cR,$~?ez\|zi`WuWX(##M8VF"0(\|rXBu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.7	49851	35.201.111.240	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:11 UTC	567	OUT	OPTIONS /consent/uw/3 HTTP/1.1 Host: consent-api.service.consent.usercentrics.eu Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: access-control-allow-origin,content-type,x-request-id Origin: https://sedo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:11 UTC	583	IN	HTTP/1.1 204 No Content vary: Origin, Access-Control-Request-Headers access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE access-control-allow-headers: access-control-allow-origin,content-type,x-request-id access-control-max-age: 86400 X-Cloud-Trace-Context: 5443a18974cafd37867c14aa6a0d9df5 Date: Mon, 30 Sep 2024 22:41:11 GMT Content-Type: text/html Server: Google Frontend Content-Length: 0 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.7	49855	34.95.108.180	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:11 UTC	674	OUT	GET /uct?v=1&sid=5QJe3R54G&t=1&abv=&r=https%3A%2F%2Fsedo.com%2Fus%2Fpark-domains%2F&cb=1727736069897 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:11 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: qc1r0h68pp1t X-Cloud-Trace-Context: e30af18cf7bd7dc3a719c1881a242f82 Date: Mon, 30 Sep 2024 22:41:11 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:11 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.7	49856	35.201.111.240	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:12 UTC	721	OUT	POST /consent/uw/3 HTTP/1.1 Host: consent-api.service.consent.usercentrics.eu Connection: keep-alive Content-Length: 1617 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Access-Control-Allow-Origin: * Accept: application/json X-Request-ID: eefe5042-a68a-4131-8da8-9fd793157f35 sec-ch-ua-platform: "Windows" Origin: https://sedo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sedo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:12 UTC	1617	OUT	Data Raw: 7b 22 61 63 74 69 6f 6e 22 3a 22 6f 6e 49 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 22 2c 22 61 6e 61 6c 79 74 69 63 73 22 3a 74 72 75 65 2c 22 61 70 70 56 65 72 73 69 6f 6e 22 3a 22 34 2e 33 38 2e 34 22 2c 22 63 6f 6e 73 65 6e 74 73 22 3a 5b 7b 22 63 6f 6e 73 65 6e 74 53 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 6e 73 65 6e 74 54 65 6d 70 6c 61 74 65 49 64 22 3a 22 48 31 56 6c 35 4e 69 64 6a 57 58 22 2c 22 63 6f 6e 73 65 6e 74 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 22 3a 22 34 30 2e 31 37 2e 34 35 22 7d 2c 7b 22 63 6f 6e 73 65 6e 74 53 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 73 65 6e 74 54 65 6d 70 6c 61 74 65 49 64 22 3a 22 53 31 6b 67 63 4e 6f 5f 6a 2d 6d 22 2c 22 63 6f 6e 73 65 6e 74 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 22 Data Ascii: {"action":"onInitialPageLoad","analytics":true,"appVersion":"4.38.4","consents":[{"consentStatus":true,"consentTemplateId":"H1Vl5NidjWX","consentTemplateVersion":"40.17.45"},{"consentStatus":false,"consentTemplateId":"S1kgcNo_j-m","consentTemplateVersion"
2024-09-30 22:41:12 UTC	370	IN	HTTP/1.1 201 Created vary: Origin access-control-allow-origin: * X-Cloud-Trace-Context: 67f352b754116a6113045052ea5b1d93 Date: Mon, 30 Sep 2024 22:41:12 GMT Content-Type: text/html Server: Google Frontend Content-Length: 0 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.7	49857	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:12 UTC	613	OUT	GET /browser-ui/3.55.0/index-4d0d6d10.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.55.0/index.module.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:12 UTC	1006	IN	HTTP/1.1 200 OK x-goog-generation: 1726571799282749 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 2111 Content-Encoding: gzip x-goog-hash: crc32c=x2+mFA== x-goog-hash: md5=XdvVLpFaoCAty0BY1hMGjw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 2111 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljusVzrEPRwYY_UC9JZeul7KLTQjPFKSJBAMxiDW4BzCzl2bRKktNoeSJmKcxtUOLk7SPhhnEzWBlQ Server: UploadServer Date: Tue, 17 Sep 2024 11:17:15 GMT Expires: Wed, 17 Sep 2025 11:17:15 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:39 GMT ETag: "5ddbd52e915aa0202dcb4058d613068f" Content-Type: text/javascript Age: 1164237 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:12 UTC	384	IN	Data Raw: 1f 8b 08 08 17 65 e9 66 02 ff 74 6d 70 6b 69 6a 66 35 76 76 78 00 ad 58 7b 6f db 38 12 ff ff 3e 85 6d 14 85 84 1b eb 92 dd 2d ee 2a 43 17 38 8e 93 b8 75 e2 d4 af 6e 5b 14 01 25 8d 6d 36 b2 a4 15 29 3f e2 e8 bb df 90 92 63 d9 49 da 60 71 2d 92 91 c8 e1 70 1e bf 79 28 7c 1e 47 89 dc b0 5e 85 89 0a 82 ab a9 04 f7 46 51 06 6b 45 22 60 6d 45 05 b0 be a2 21 b0 81 a2 09 b0 4f 8a 06 e0 ad 14 e5 e0 7e 50 d4 03 d6 52 34 05 f7 4c 51 1f 5c 2d 67 0a ec 5c d1 35 78 fa dd 05 a6 f9 bb c0 2e 14 8d c1 95 8a ce 20 56 64 02 ee 47 45 e7 c0 46 8a 0e 80 dd 2b da 02 57 8b 59 82 2b 14 3d 05 57 ab d7 03 57 8b 19 02 d3 e7 da c0 ba 8a 36 b3 49 12 cd 6b d6 bf 78 e8 e3 ca 9a 47 7e 1a a0 f5 43 d4 1a 3c 37 be a9 b8 ce 40 eb 7a 07 da b4 fe f6 cc 80 2d f0 34 95 32 0a eb de bf ff f0 5c fc Data Ascii: eftmpkijf5vvxX{o8>m-*C8un[%m6)?cI`q-py(\|G^FQkE"`mE!O~PR4LQ\-g\5x. VdGEF+WY+=WW6IkxG~C<7@z-42\
2024-09-30 22:41:12 UTC	1390	IN	Data Raw: ab 1b 91 b5 73 bd a2 7f be 83 61 6c e4 0c e7 68 63 66 3a ff 45 4b c4 cc e3 e1 d4 72 99 40 6b b5 12 e6 cf 39 e6 fe 21 83 34 10 98 75 d5 ec 5f 74 ae 6f fb 9d 8b cb 21 3c 3d 63 9a 30 7a b4 c8 8b 82 28 d1 3a 4d a2 50 d6 05 bf 47 fd b6 35 4b db a3 7e d9 c7 95 a3 0a 4b 65 f4 9c e2 29 b7 24 ae a4 a5 a5 3d d5 5a ae e3 68 9a b0 78 b6 b6 d4 05 96 98 b3 20 20 35 2e 1d 63 e3 31 89 d3 28 59 db 08 de 0c bd 3b f4 6d 09 51 d8 2a 96 87 d1 74 1a a0 cd 94 a0 c8 18 c3 a6 e6 33 c9 ea 12 85 e4 7e cd ae a5 5e 7d 2b 81 fc ad 78 6b 19 44 c6 08 c2 34 08 e8 61 01 9b 9d 58 ee db 74 79 90 4e 81 8b 33 2e 98 1b a0 5a e1 a2 2d 04 45 93 b3 00 02 e6 62 40 6b 9a 92 1e bb fb 49 df 2f a4 af ff 78 4e 69 19 70 ef 8e 04 bb 1a c8 7d 9c d8 0c f2 68 0f e4 9a 8e a5 4a ed 8d 46 d1 46 4b 14 b6 9f 39 Data Ascii: salhcf:EKr@k9!4u_to!<=c0z(:MPG5K~Ke)$=Zhx 5.c1(Y;mQ*t3~^}+xkD4aXtyN3.Z-Eb@kI/xNip}hJFFK9
2024-09-30 22:41:12 UTC	337	IN	Data Raw: d2 b5 6a 54 5f 8e e4 4b 3b 55 c7 c9 41 6e 6a 79 bb 70 14 42 a9 d8 57 df e8 ad 6d 5c 06 18 a0 27 69 8a 3c a8 a0 87 fb 45 09 05 c9 65 80 fb 88 d1 4b 04 2b 5d 31 06 c5 1c 67 17 e5 9d 8b 1e 8d 98 b4 b5 9d 54 0e ee d9 df cd c0 b8 7f 78 b8 30 09 e3 73 1e 8e 31 91 dc 63 ca 84 28 08 30 b9 44 3e 9d 49 fb f8 e8 28 53 b3 4b 0e e4 58 95 a8 2e 0f ef d4 fc 93 27 dc 24 cf b3 d3 28 a1 74 3a cd 3f 28 ab c7 40 89 3c 3b d7 03 ca fe 5a 27 e4 ea ab a6 90 5e 55 c2 53 0a c3 c1 e8 4f 50 3f 6c 86 f6 d3 fe 98 bd b6 13 45 c6 d5 f6 eb eb 3a 7f b8 35 f6 87 c7 c3 29 d1 b4 e6 2c 36 0c 54 9f 78 97 40 bd 57 fd 6b 14 35 a9 3c 1a ec 8a 52 67 7b 05 55 a7 c3 62 34 db 73 12 d2 37 0f 16 ee 23 0f 6c 4b d1 f3 95 a6 28 34 39 d2 d4 ec 54 2e 25 e5 5e 56 da f9 ff d6 90 c3 64 21 5c bf a1 39 e7 eb df Data Ascii: jT_K;UAnjypBWm\'i<EeK+]1gTx0s1c(0D>I(SKX.'$(t:?(@<;Z'^USOP?lE:5),6Tx@Wk5<Rg{Ub4s7#lK(49T.%^Vd!\9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.7	49859	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:12 UTC	386	OUT	GET /browser-ui/3.55.0/PrivacyButton-62ab6c78.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:12 UTC	1006	IN	HTTP/1.1 200 OK x-goog-generation: 1726571792330446 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 2448 Content-Encoding: gzip x-goog-hash: crc32c=Bpv1jg== x-goog-hash: md5=XacvmTTsTaikeYlm8La/2A== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 2448 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljtRUGlxiWPDSdVubxLPgzWOJ4A8PEmz1SAPsVYmXA9R-FMVOfn4IWfUMBxsp1tJxsqJQcQLRo4_8A Server: UploadServer Date: Tue, 17 Sep 2024 11:17:15 GMT Expires: Wed, 17 Sep 2025 11:17:15 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:32 GMT ETag: "5da72f9934ec4da8a4798966f0b6bfd8" Content-Type: text/javascript Age: 1164237 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:12 UTC	384	IN	Data Raw: 1f 8b 08 08 0f 65 e9 66 02 ff 74 6d 70 75 68 6e 71 65 77 35 65 00 d5 58 69 8f db c8 11 fd 9e 5f 41 13 bb 0b 09 68 b6 d9 bc 49 41 31 e2 c1 02 09 60 c7 ce fa 00 82 45 10 53 12 47 e2 9a 12 05 92 9a 4b d0 7f cf 7b d5 3a 66 c7 8e e1 7c 08 90 60 86 ec 62 77 75 1d af 0e 8a 5d af b7 6d 37 ec cb 37 4e d9 3b b5 2a df 72 1c 54 f9 37 8e ad ba e7 d0 a8 f2 8a e3 46 95 3f 73 ac 54 f9 0b c7 b9 2a df 71 ec 54 f9 9e 63 a9 ca 0f 1c fb c3 75 d7 ae 5d fd bc de 2c aa 3b bd 6e 17 bb a6 d2 bf f5 ee 64 de 6e fa c1 59 4c 6b 3d db 0d 43 bb 19 fd ea 96 4d bd dc 78 f5 50 ad fb 62 5e 6d 86 aa 9b cc ca f9 e7 65 d7 ee 36 8b c2 55 ee 64 d6 76 8b aa 2b 36 ed a6 3a d2 5e 57 2e ea 5d 5f c4 fe 8f 98 81 a0 75 11 f9 db 3b d0 77 5e bf 2a 17 ed 6d 81 47 27 c4 15 e3 f2 0c 6e dd 72 56 8e 7c 25 7f Data Ascii: eftmpuhnqew5eXi_AhIA1`ESGK{:f\|`bwu]m77N;rT7F?sTqTcu],;ndnYLk=CMxPb^me6Udv+6:^W.]_u;w^*mG'nrV\|%
2024-09-30 22:41:12 UTC	1390	IN	Data Raw: 9c f7 6e ea be 9e 35 d5 be dd 0d 4d bd a9 bc 7e b8 6f aa a2 dc 0d ed e4 34 65 75 02 b5 c9 01 5b f7 47 74 83 08 13 67 d3 2f 16 1e dc 7f a8 d1 68 3f ac aa 75 55 d4 87 f1 f4 8f b5 de 9d 82 db eb 6d 57 df 94 f3 7b 3d 5b ea 45 75 5d ee 9a 61 4c f6 ba 7f dd ce 6a 68 ae 95 dd 39 c8 ce 17 c3 d7 f6 ae 85 f5 5d fd 00 b6 af ad 2f aa fe f3 d0 6e c9 20 c2 cf 68 8a 39 ee ac 71 a7 d3 69 fd c2 65 82 b8 85 5b 6f b0 5a 36 ee 57 79 bb 6f f0 fe 57 8d ee 57 48 59 8b df 0b 53 f8 e3 ef 05 b5 ec 3e 8f d5 70 54 f7 16 85 dc 95 f5 f0 2d 14 18 c8 ef 45 e1 29 ef 58 6d a7 23 70 34 23 b7 bf 59 ba 6a 7f b7 6e 36 7d e1 ae 86 61 5b 3c 7f 7e 7b 7b ab 6f 43 dd 76 cb e7 81 ef fb cf 85 e7 94 f9 c6 f7 7f 74 d5 4d 5d dd be 6c ef 0a d7 77 7c 27 88 f0 ef aa 63 92 5b 86 eb ba 69 0a 77 be eb 3a 14 Data Ascii: n5M~o4eu[Gtg/h?uUmW{=[Eu]aLjh9]/n h9qie[oZ6WyoWWHYS>pT-E)Xm#p4#Yjn6}a[<~{{oCvtM]lw\|'c[iw:
2024-09-30 22:41:12 UTC	674	IN	Data Raw: 44 9b a2 b6 57 7c e7 28 64 5e 22 7c 34 06 ab c4 c1 5a 2f ec af 02 4a c8 e0 91 75 53 1d dd 84 32 38 94 0b 1e 8a 78 10 34 25 c9 72 c5 be a3 f8 63 29 86 f4 98 54 9a 5a 2a e8 89 37 65 50 90 1f 2a eb f5 79 af 18 82 49 06 22 26 5f 26 56 9d 35 a4 4a 00 3f 1b a2 88 37 85 00 9d 93 c5 4e 43 b8 3d 81 9b 68 5b 13 89 36 97 73 75 f6 bf 21 d8 4a c0 16 14 59 91 ca c2 0a 71 70 91 c4 8a 60 43 4e 2c 1f c9 39 0d 0b 33 71 9d 88 5a 19 12 30 87 c9 42 f4 0c 0d ca 24 f4 ea 12 d9 4b 0a 10 6a da a4 e8 9f 6f 0d 17 ee e6 92 51 e7 84 92 cf 76 ef a8 ee 51 e6 d9 fc 74 ae 90 cd 74 29 20 a0 c7 cc c6 fe 13 f9 e0 bc e6 0f c5 48 19 fe 56 61 a7 01 e2 d0 10 b3 4d a5 42 e0 ea 4f 0f ea 34 41 9a 93 ea 38 f9 0e a9 97 a7 22 45 5d 04 da 9e 30 9b d6 7a 51 df 8c 7e 75 ed e9 01 3f 9f 8f a5 58 6f 56 55 Data Ascii: DW\|(d^"\|4Z/JuS28x4%rc)TZ7ePyI"&_&V5J?7NC=h[6su!JYqp`CN,93qZ0B$KjoQvQtt) HVaMBO4A8"E]0zQ~u?XoVU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.7	49858	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:12 UTC	378	OUT	GET /browser-ui/3.55.0/index-3ff76a26.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:12 UTC	1004	IN	HTTP/1.1 200 OK x-goog-generation: 1726571799056169 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 809 Content-Encoding: gzip x-goog-hash: crc32c=nJex7Q== x-goog-hash: md5=IqSjq8Xpe4ZLIe33uBQtlg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 809 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljuFXZho99lc5Akd2Ybjgve1Vy6GN7NKvkc8h64UlbxdzCbyfUGyEdZz-ATqJE3FFAKsEJLlultDqA Server: UploadServer Date: Tue, 17 Sep 2024 11:17:15 GMT Expires: Wed, 17 Sep 2025 11:17:15 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:39 GMT ETag: "22a4a3abc5e97b864b21edf7b8142d96" Content-Type: text/javascript Age: 1164237 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:12 UTC	386	IN	Data Raw: 1f 8b 08 08 16 65 e9 66 02 ff 74 6d 70 6b 67 39 37 6a 6c 77 77 00 95 55 6d 6f 9b 48 10 fe de 5f e1 f6 43 b5 48 73 5c 52 f5 72 27 2c 4e 42 18 37 34 7e 93 21 96 4e 55 65 8d 61 b1 37 59 2f 16 0b 7e 09 f0 df 6f 97 e0 26 71 e3 a8 fd f4 8c 67 9f 9d 79 76 3c 33 b0 f5 26 cd f2 12 dd 0e ca 0e 02 f6 34 52 58 69 e0 80 9e 46 01 d8 d7 98 02 7e d1 98 03 5e 6b 94 70 d0 10 01 fa 1a 19 e0 57 8d 19 e0 8d c6 18 70 a0 d1 01 1c 6a 2c 00 47 1a dd 3a c9 d2 f5 07 f3 4f 26 62 ba 37 d7 69 5c 70 6a de c9 0f dd 28 15 32 ef 2c 6d 4a 08 31 ec 7f e3 83 c0 35 8b fc 46 e2 24 e5 87 84 71 4e 8e 17 ff 48 e8 3f 97 8b ab bf 12 7d 15 58 43 32 d7 34 47 b3 c8 b8 61 18 b0 f9 c5 38 9f 92 e8 f2 ea 82 fe 7d 2e ce fa 17 e3 7c 8e 2f e2 ab f8 f2 e2 4c 9c ee 16 b3 ce c1 46 15 ab c4 28 a2 9b dc e1 bc 47 Data Ascii: eftmpkg97jlwwUmoH_CHs\Rr',NB74~!NUea7Y/~o&qgyv<3&4RXiF~^kpWpj,G:O&b7i\pj(2,mJ15F$qNH?}XC24Ga8}.\|/LF(G
2024-09-30 22:41:12 UTC	423	IN	Data Raw: a3 2c 60 ab 5d f7 b5 9d aa 14 df f6 50 f2 14 63 26 96 d6 ac fe 6e e7 24 34 a9 c8 69 a6 83 ca 26 a8 4a 09 a1 62 3e 11 e7 2d f1 47 81 02 9a 6d 59 44 e5 09 6f 72 ca eb a7 99 aa d6 09 6b 78 ca fa 39 e1 6d 4b 69 2b 7e 26 dd dd 4b d6 ab c9 b6 2f 39 6d aa 07 5b 37 53 39 ab aa 3d 31 cc 7c 45 05 21 28 0f 22 6a dc b8 43 96 77 a6 24 33 03 cf 1d 8f 7a f3 81 f3 9f 37 35 60 44 de 5f 18 b5 61 d4 70 63 3f b1 55 10 12 93 7b 70 cc e1 78 ea cd fd 51 7f 3c 1d 3a a1 3f 1e cd 07 fe e8 06 56 10 9a fa 4f ca 30 ba 57 8a 26 6c 4f b9 01 bb 8f 1f c9 63 1e a5 e0 31 b2 01 63 52 90 1e 2c 94 95 10 9d e6 fa 24 cd ab 97 7e 3f f7 98 b8 ea 65 d3 99 ef 7a c1 7c e6 8d 7a e3 69 60 c0 99 57 1b 75 57 ee 58 1e ad c8 c2 28 23 94 b4 23 4d d7 9d 38 56 46 f3 22 13 9d 88 30 28 13 e4 7c a1 72 58 42 75 Data Ascii: ,`]Pc&n$4i&Jb>-GmYDorkx9mKi+~&K/9m[7S9=1\|E!("jCw$3z75`D_apc?U{pxQ<:?VO0W&lOc1cR,$~?ez\|zi`WuWX(##M8VF"0(\|rXBu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.7	49860	34.95.108.180	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:12 UTC	446	OUT	GET /uct?v=1&sid=5QJe3R54G&t=1&abv=&r=https%3A%2F%2Fsedo.com%2Fus%2Fpark-domains%2F&cb=1727736069897 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:12 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: m7njuu65jy1d X-Cloud-Trace-Context: f56250c60911ae5350ed27097c245a2d Date: Mon, 30 Sep 2024 22:41:12 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:12 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.7	49863	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:13 UTC	620	OUT	GET /browser-ui/3.55.0/SaveButton-c74cbe89.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.55.0/index-4d0d6d10.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:13 UTC	1004	IN	HTTP/1.1 200 OK x-goog-generation: 1726571792788874 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 616 Content-Encoding: gzip x-goog-hash: crc32c=J8vSsw== x-goog-hash: md5=lUyk7QZlqR7sODj2IXAwrg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 616 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljt7vbOfxATcUm273Z9RSwaVUzdh89SnlfeHF5FXQhY389pKkuYoBcT6joRceGqLkgXr5tZiHtP0fg Server: UploadServer Date: Tue, 17 Sep 2024 11:17:18 GMT Expires: Wed, 17 Sep 2025 11:17:18 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:32 GMT ETag: "954ca4ed0665a91eec3838f6217030ae" Content-Type: text/javascript Age: 1164235 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:13 UTC	386	IN	Data Raw: 1f 8b 08 08 10 65 e9 66 02 ff 74 6d 70 68 65 6a 61 72 63 37 65 00 85 94 cb 8e 9b 30 18 85 f7 7d 8a 0c 8b 08 24 87 ce 2c 66 51 47 34 4a 98 48 bd 8c 66 da 81 46 ea aa 32 b6 1b b9 63 6c e4 4b 1a 94 f0 ee 8d 21 a1 10 92 76 75 c0 e7 60 7e 9f 4f 32 cb 0b a9 cc 0e 2d 47 48 8f 28 40 2f 4e 0d 40 89 53 0e d0 57 a7 12 64 85 53 04 32 eb 54 80 ec 93 53 0d b2 cf 4e 2d 28 9d 64 00 a5 4e 55 f5 53 c9 dc 0b df 32 41 e8 36 cc 25 b1 9c 86 bf b4 37 65 cd df 16 2e c5 4e a9 15 53 c6 22 9e 50 b5 61 98 7e 34 34 9f 90 77 f7 77 f7 77 38 ab 3f c2 52 68 33 c2 91 bf 23 4c a3 8c 53 02 15 90 22 e6 0c bf 42 0c 98 4e e8 21 42 1e 51 49 d5 8a d1 df 90 80 1c a9 35 13 89 29 39 85 65 15 44 ef 77 f5 26 3b 8e 32 ca 35 4c 81 65 30 ae 22 ea 07 60 a7 0e c3 69 58 54 91 f1 79 b8 f8 96 a6 cf 4f 3f e6 Data Ascii: eftmphejarc7e0}$,fQG4JHfF2clK!vu`~O2-GH(@/N@SWdS2TSN-(dNUS2A6%7e.NS"Pa~44www8?Rh3#LS"BN!BQI5)9eDw&;25Le0"`iXTyO?
2024-09-30 22:41:13 UTC	230	IN	Data Raw: 49 b3 89 77 70 b7 e6 fa de ce 05 cd 5a 5a 16 f4 a5 e9 fa b8 f2 41 6e a8 6a 96 92 73 64 41 7d c4 0a 90 2e 76 d1 4e 65 2f 60 57 bd 3d f0 10 3b e9 11 2f 7b 50 1f 96 4f df 5b 2b 1d 58 35 ed b8 a5 5d f4 68 93 9a 33 39 10 2e 22 a7 e3 b1 3a 40 ee 11 24 54 94 5d be ff 74 8f 74 c9 89 2e 69 5b 75 c1 ab 6c e3 6e ff 2e d9 23 2b 8e 64 8b 4e 87 1d b2 2e 7f 85 eb 70 df 8b 54 cb 21 d5 f4 9c c8 89 6a d9 a5 8a da 89 44 2f af 87 04 6d 8f 20 ee 61 4a e6 ab 65 6b 91 81 55 13 2c 6b 82 0d b8 1b bb df 2b df 06 33 37 12 bc d8 68 d9 3d b9 46 1b da 6b 14 1d 1b b5 bd 48 e7 30 9d 7a 9d 73 a1 da e1 0f 2e 56 8b 87 d5 92 f3 aa aa 29 dd d6 97 2b 76 97 eb 1c 10 27 0f cd c5 9c 54 d3 37 7f 00 89 14 7e 91 e9 05 00 00 Data Ascii: IwpZZAnjsdA}.vNe/`W=;/{PO[+X5]h39.":@$T]tt.i[uln.#+dN.pT!jD/m aJekU,k+37h=FkH0zs.V)+v'T7~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.7	49866	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:13 UTC	378	OUT	GET /browser-ui/3.55.0/index-4d0d6d10.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:13 UTC	1006	IN	HTTP/1.1 200 OK x-goog-generation: 1726571799282749 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 2111 Content-Encoding: gzip x-goog-hash: crc32c=x2+mFA== x-goog-hash: md5=XdvVLpFaoCAty0BY1hMGjw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 2111 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljusVzrEPRwYY_UC9JZeul7KLTQjPFKSJBAMxiDW4BzCzl2bRKktNoeSJmKcxtUOLk7SPhhnEzWBlQ Server: UploadServer Date: Tue, 17 Sep 2024 11:17:15 GMT Expires: Wed, 17 Sep 2025 11:17:15 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:39 GMT ETag: "5ddbd52e915aa0202dcb4058d613068f" Content-Type: text/javascript Age: 1164238 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:13 UTC	384	IN	Data Raw: 1f 8b 08 08 17 65 e9 66 02 ff 74 6d 70 6b 69 6a 66 35 76 76 78 00 ad 58 7b 6f db 38 12 ff ff 3e 85 6d 14 85 84 1b eb 92 dd 2d ee 2a 43 17 38 8e 93 b8 75 e2 d4 af 6e 5b 14 01 25 8d 6d 36 b2 a4 15 29 3f e2 e8 bb df 90 92 63 d9 49 da 60 71 2d 92 91 c8 e1 70 1e bf 79 28 7c 1e 47 89 dc b0 5e 85 89 0a 82 ab a9 04 f7 46 51 06 6b 45 22 60 6d 45 05 b0 be a2 21 b0 81 a2 09 b0 4f 8a 06 e0 ad 14 e5 e0 7e 50 d4 03 d6 52 34 05 f7 4c 51 1f 5c 2d 67 0a ec 5c d1 35 78 fa dd 05 a6 f9 bb c0 2e 14 8d c1 95 8a ce 20 56 64 02 ee 47 45 e7 c0 46 8a 0e 80 dd 2b da 02 57 8b 59 82 2b 14 3d 05 57 ab d7 03 57 8b 19 02 d3 e7 da c0 ba 8a 36 b3 49 12 cd 6b d6 bf 78 e8 e3 ca 9a 47 7e 1a a0 f5 43 d4 1a 3c 37 be a9 b8 ce 40 eb 7a 07 da b4 fe f6 cc 80 2d f0 34 95 32 0a eb de bf ff f0 5c fc Data Ascii: eftmpkijf5vvxX{o8>m-*C8un[%m6)?cI`q-py(\|G^FQkE"`mE!O~PR4LQ\-g\5x. VdGEF+WY+=WW6IkxG~C<7@z-42\
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: ab 1b 91 b5 73 bd a2 7f be 83 61 6c e4 0c e7 68 63 66 3a ff 45 4b c4 cc e3 e1 d4 72 99 40 6b b5 12 e6 cf 39 e6 fe 21 83 34 10 98 75 d5 ec 5f 74 ae 6f fb 9d 8b cb 21 3c 3d 63 9a 30 7a b4 c8 8b 82 28 d1 3a 4d a2 50 d6 05 bf 47 fd b6 35 4b db a3 7e d9 c7 95 a3 0a 4b 65 f4 9c e2 29 b7 24 ae a4 a5 a5 3d d5 5a ae e3 68 9a b0 78 b6 b6 d4 05 96 98 b3 20 20 35 2e 1d 63 e3 31 89 d3 28 59 db 08 de 0c bd 3b f4 6d 09 51 d8 2a 96 87 d1 74 1a a0 cd 94 a0 c8 18 c3 a6 e6 33 c9 ea 12 85 e4 7e cd ae a5 5e 7d 2b 81 fc ad 78 6b 19 44 c6 08 c2 34 08 e8 61 01 9b 9d 58 ee db 74 79 90 4e 81 8b 33 2e 98 1b a0 5a e1 a2 2d 04 45 93 b3 00 02 e6 62 40 6b 9a 92 1e bb fb 49 df 2f a4 af ff 78 4e 69 19 70 ef 8e 04 bb 1a c8 7d 9c d8 0c f2 68 0f e4 9a 8e a5 4a ed 8d 46 d1 46 4b 14 b6 9f 39 Data Ascii: salhcf:EKr@k9!4u_to!<=c0z(:MPG5K~Ke)$=Zhx 5.c1(Y;mQ*t3~^}+xkD4aXtyN3.Z-Eb@kI/xNip}hJFFK9
2024-09-30 22:41:13 UTC	337	IN	Data Raw: d2 b5 6a 54 5f 8e e4 4b 3b 55 c7 c9 41 6e 6a 79 bb 70 14 42 a9 d8 57 df e8 ad 6d 5c 06 18 a0 27 69 8a 3c a8 a0 87 fb 45 09 05 c9 65 80 fb 88 d1 4b 04 2b 5d 31 06 c5 1c 67 17 e5 9d 8b 1e 8d 98 b4 b5 9d 54 0e ee d9 df cd c0 b8 7f 78 b8 30 09 e3 73 1e 8e 31 91 dc 63 ca 84 28 08 30 b9 44 3e 9d 49 fb f8 e8 28 53 b3 4b 0e e4 58 95 a8 2e 0f ef d4 fc 93 27 dc 24 cf b3 d3 28 a1 74 3a cd 3f 28 ab c7 40 89 3c 3b d7 03 ca fe 5a 27 e4 ea ab a6 90 5e 55 c2 53 0a c3 c1 e8 4f 50 3f 6c 86 f6 d3 fe 98 bd b6 13 45 c6 d5 f6 eb eb 3a 7f b8 35 f6 87 c7 c3 29 d1 b4 e6 2c 36 0c 54 9f 78 97 40 bd 57 fd 6b 14 35 a9 3c 1a ec 8a 52 67 7b 05 55 a7 c3 62 34 db 73 12 d2 37 0f 16 ee 23 0f 6c 4b d1 f3 95 a6 28 34 39 d2 d4 ec 54 2e 25 e5 5e 56 da f9 ff d6 90 c3 64 21 5c bf a1 39 e7 eb df Data Ascii: jT_K;UAnjypBWm\'i<EeK+]1gTx0s1c(0D>I(SKX.'$(t:?(@<;Z'^USOP?lE:5),6Tx@Wk5<Rg{Ub4s7#lK(49T.%^Vd!\9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.7	49865	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:13 UTC	628	OUT	GET /browser-ui/3.55.0/VirtualServiceItem-d95151cb.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.55.0/index-4d0d6d10.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:13 UTC	1008	IN	HTTP/1.1 200 OK x-goog-generation: 1726571794737332 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 48659 Content-Encoding: gzip x-goog-hash: crc32c=yqx2oQ== x-goog-hash: md5=xQ+x9NAxMAgyuginIPtFxA== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 48659 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8lju8IpdJrLR-h8JHAl2uOY_c9nuYQX83qhmVTTF9rmZW2yKWHHAI0R2CmsSiZQ0DW8j0KrR4Mww_HQ Server: UploadServer Date: Tue, 17 Sep 2024 11:17:18 GMT Expires: Wed, 17 Sep 2025 11:17:18 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:34 GMT ETag: "c50fb1f4d031300832ba08a720fb45c4" Content-Type: text/javascript Age: 1164235 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:13 UTC	382	IN	Data Raw: 1f 8b 08 08 12 65 e9 66 02 ff 74 6d 70 6c 69 61 36 5f 39 6b 38 00 ec bd 59 62 db c8 b2 28 b8 15 0a c7 97 05 5c 27 61 82 33 c1 42 f1 ca b2 6c ab 2c 5b 2a 49 1e 55 3a 32 48 82 22 2c 08 60 01 a0 06 4b ec cf b7 97 f7 dd 3b e8 a5 f4 4a 3a 22 32 01 24 40 50 92 ab ea 74 df f7 fa d4 20 02 89 1c 23 23 23 23 63 4a f7 62 1e 84 f1 ed ac 62 47 15 87 8d 76 f1 37 66 f6 4b fc 75 d9 1c 7f 02 36 7a 8b bf 3e 1b fd 81 bf 21 b3 f7 f0 d7 66 f6 3e fe 7a cc de c2 df 88 d9 bf e1 ef 84 d9 07 f8 3b 66 f6 21 fe 2e d8 0d fe cc d9 e8 3b fe ce d8 e8 1d fe 9e 31 fb 3d fe 5e b0 11 55 37 65 23 aa 6e c4 46 cf f1 f7 86 8d 22 fc bd 64 23 aa f6 9a 8d a8 57 57 6c 44 d5 6f 31 fb 0d fe 1e 31 fb 35 fe 9e b3 11 35 b7 cb 6c 6a ef 90 8d 5e e0 ef 36 1b 1d e1 ef 0e 1b 51 7b 9b 6c 14 e3 ef 01 b3 7f c5 Data Ascii: eftmplia6_9k8Yb(\'a3Bl,[*IU:2H",`K;J:"2$@Pt ####cJbbGv7fKu6z>!f>z;f!.;1=^U7e#nF"d#WWlDo1155lj^6Q{l
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: 43 00 29 34 73 be c3 c6 36 4d 19 a4 d0 83 0d 29 23 9a 34 78 18 d3 ac c1 c3 84 a6 0d f2 6c d2 bc c1 03 41 70 01 15 12 42 cc 21 85 06 3b 83 07 02 da 19 94 72 68 f6 e0 61 4a d3 07 0f 67 34 7f f0 40 e8 74 03 99 69 c8 97 90 e2 d2 14 c2 c3 37 9a 43 78 38 a7 49 84 07 8f 66 11 1e 2e 68 1a a1 d4 15 cd 23 a4 f8 34 91 f0 10 d0 4c c2 03 8d 6b 07 1e 08 15 37 e1 21 a4 c9 84 07 c2 96 ef f0 40 d3 bb 07 0f 04 8d 7d 78 b8 a4 09 85 07 aa f9 09 34 41 a5 9e 3b cb 69 18 5c 28 fa 33 d7 9f 38 d7 fa 45 30 59 78 8e fe 2d 52 06 e3 c0 8f e2 ca a9 63 a9 31 73 35 eb 97 5b 4a 38 0e 98 7f 62 39 aa ef 5c 55 36 c3 d0 be 51 63 4d 9f ba 9e a7 ba 9a c6 6c 2b 54 55 d5 61 31 e6 0f 8e 9d 93 0d cb 8a ab 55 5f 55 dd a4 82 4a 60 b9 7a e4 b9 63 47 d5 06 a1 13 2f 42 bf 82 39 ad 98 05 4b 4d 5b 6a ec Data Ascii: C)4s6M)#4xlApB!;rhaJg4@ti7Cx8If.h#4Lk7!@}x4A;i\(38E0Yx-Rc1s5[J8b9\U6QcMl+TUa1U_UJ`zcG/B9KM[j
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: 9a 0d ca d7 fa b1 7c 65 74 e8 81 8e b4 1e d9 40 0f f3 69 ec 15 4e 3f 2d 16 98 fd 6c 83 05 4e 2e 82 c7 79 e0 d2 1c 26 f3 ee fa 04 44 9a fe c2 fe 0a 6f b5 2b c0 5d 13 ff ac 6c b0 34 61 33 c0 ab 1a 92 33 9c 64 ca 86 53 5a 82 72 98 fb 69 65 e2 5e de d2 f4 8a 99 2a ee 6c b8 c2 92 75 f2 f0 96 14 3a 67 0b cf e6 59 67 ee c4 39 0a ce ce 00 39 e0 24 45 e5 e2 25 ad 61 a0 94 fa db cd 83 57 3b ef 4e 0f 76 5e bd 3e 62 ce b0 6e c6 f9 1d ea fa 3a d2 1e dc 22 80 1c ac 54 55 24 e5 d7 9e a6 dd 57 6c 77 fb e5 9a 52 1a 7b 8f f3 06 10 2a 5f b3 b9 75 ca 51 1e 37 4f e0 68 fc 20 56 4d cf 8e e2 da 78 e6 c2 26 7d 9b b2 1b eb be ad 42 ff de b1 71 10 fd 39 08 d5 71 64 1f b2 91 e5 86 41 18 36 71 43 87 d8 71 13 26 7e 71 e1 0b 2c 1c 28 c0 7f 7e 14 67 86 e4 00 31 51 a5 9d 42 89 2e cf 14 Data Ascii: \|et@iN?-lN.y&Do+]l4a33dSZrie^lu:gYg99$E%aW;Nv^>bn:"TU$WlwR{_uQ7Oh VMx&}Bq9qdA6qCq&~q,(~g1QB.
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: a6 2f 97 ab f7 93 bf fc 5f 5e b2 32 86 a7 06 f6 a1 91 3c b4 61 d4 69 af d2 1e d4 78 55 df 1f 05 4d 89 02 02 45 fc ee 84 81 92 10 f1 4f ff 26 e2 ff 26 e2 ff 26 e2 ff ed 88 f8 23 49 f8 7f db b3 d0 83 04 fd df 27 a1 7f 9f 84 fe d7 3a 09 ad a2 34 df 42 3f a3 89 cb 78 e6 8c cf 9d 89 19 a3 f6 4b 9c 99 5e a2 b6 c1 74 31 45 12 25 fb f8 ee a2 9e ec 5a d5 98 1b bd 48 f4 4a 36 7e 48 34 65 f4 bb 7d 0d 3b d3 8e 3f 0d cc 88 2b d9 28 75 93 24 9b a9 09 82 39 91 be 41 3d cf 6f cc 31 6a f7 26 4e 34 0e dd 11 25 2c 30 21 f0 45 0f ce 18 09 fd 2f 2c 45 48 bb 95 4c d7 76 3c 65 23 32 2b 82 2a 33 2b 9a 69 b5 3a d5 49 79 a2 92 0d 0e 5a 3e 8c c3 00 00 b4 51 5f a6 d6 08 9c 87 b8 b2 6e d4 af 4f 6e 43 54 68 6e 59 73 f5 92 0c 4b 58 34 9c ab 1f 1c fe ec 55 ab 73 f5 95 c3 6e 01 0c 5f 39 Data Ascii: /_^2<aixUMEO&&&#I':4B?xK^t1E%ZHJ6~H4e};?+(u$9A=o1j&N4%,0!E/,EHLv<e#2+*3+i:IyZ>Q_nOnCThnYsKX4Usn_9
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: fe c0 98 61 1e fe e5 83 c6 1d e0 31 e0 6f 63 4f 34 16 c4 8f b2 d3 0b 83 ab a2 71 28 52 85 a4 c8 c8 0b c6 e7 6b 4e 65 7e fc e3 96 80 89 3d ea 63 db 08 7f a8 0d 99 2b 8b e2 d0 81 03 fe ba 5d 90 b8 24 a2 33 b9 c5 2d 1c 11 72 d3 56 ad 7e 4d 4f 6b 71 de b2 15 6d fd 99 fd 43 7d 2c dd 17 65 5f 92 35 be 25 7f 8a c8 7d ad af 7a 70 5c 7b cb 87 17 51 a1 60 62 db 7a 4d 85 a1 f4 9f 47 ae 13 b4 9a 4f 4b ff c9 73 d9 e3 0f 84 39 ce 39 d9 ed 13 3e c7 a8 1b 83 7b a1 fb 27 e8 87 c6 26 7f 61 5d 88 89 c7 51 9b 06 ec 92 ab 8c 47 71 2c 12 ba d4 38 6b 97 bc e5 4e a3 c5 f9 be bb 5b a1 73 59 52 92 e9 d3 a1 c6 c6 8f 60 eb ca 98 b8 94 ed 49 b9 b9 15 a6 9a fe 05 8e 3a 37 57 12 77 77 fd 80 fb 41 32 42 a3 4e 90 5a 65 db c2 82 37 42 7b cd 31 e8 5e be aa 08 4e 92 52 fd 40 25 fd f6 9a 3a Data Ascii: a1ocO4q(RkNe~=c+]$3-rV~MOkqmC},e_5%}zp\{Q`bzMGOKs99>{'&a]QGq,8kN[sYR`I:7WwwA2BNZe7B{1^NR@%:
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: 23 0d dc 58 9b b1 6a 33 8f 8d d8 99 64 90 85 7a 9d 64 eb e5 26 10 c4 ca c0 3e 05 ab e1 52 61 b7 12 95 f2 81 4a 39 68 40 b4 b5 42 0f 63 89 38 dc 14 23 22 00 29 2b 2c c3 9b 6a 35 da 40 f4 d9 da da df cc 22 22 7c ad 57 6a 4f 6e 83 22 83 06 54 e3 2b 8c 60 23 84 52 d6 4a a9 23 00 42 b0 12 9f 84 ba aa 91 a9 5a bc 64 6a b1 7d 58 77 38 45 a4 c7 55 35 8d d3 7a d8 e9 a6 d5 aa 5d ad c2 1e 38 02 ac 3d cb e1 ea dd 9d ad 0d 77 60 87 b9 95 03 69 7c 95 fb 9b 30 79 48 e4 96 9a 99 75 76 18 12 a3 20 66 b7 a4 16 ee 87 b0 5a 97 87 23 37 63 b3 ac c4 5a 48 a1 05 0e 8c fd 3b 2d 21 27 e5 8f 32 7c 88 79 98 2e b4 de 0a 60 5d 0d b8 19 14 6c a1 b7 63 68 b5 c2 fb 6c c2 1e be 1b 63 c4 0c 51 1e 89 91 b0 83 89 59 46 99 4c 77 69 39 83 c0 3a 8f d5 63 58 f3 27 da 92 0e 34 03 51 d5 d1 d6 4b Data Ascii: #Xj3dzd&>RaJ9h@Bc8#")+,j5@""\|WjOn"T+`#RJ#BZdj}Xw8EU5z]8=w`i\|0yHuv fZ#7cZH;-!'2\|y.`]lchlcQYFLwi9:cX'4QK
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: 7a 27 81 99 54 9f 34 b5 e5 18 20 b8 63 8e 51 6b 42 52 b0 f7 ff cb 2f e5 69 10 5e d9 e1 e4 ff fd d5 5c d2 f0 df b3 a0 d3 99 6f e6 51 0c 83 33 e4 52 b2 b5 23 f0 12 d0 bf 91 60 02 47 dd 7c 42 a7 ce 4b ca 05 71 0d 08 6c cd 96 1e 5f 2b 3c 39 5b 80 f9 d4 56 67 b5 8a 5d 7a 66 d9 82 21 44 36 70 ad 24 cb b0 c2 13 b2 85 5a e1 65 b2 b5 9c 23 55 7f 2f cd 41 00 75 57 69 5c 2e b5 67 ac 56 01 04 33 a9 58 cc 83 4c 59 a5 09 93 92 81 9c f5 4b 96 65 23 9d 40 79 61 4b a9 3d 2c 99 bd 65 04 42 aa 4f c2 82 72 6c 79 d4 e2 ff 20 54 2e b0 d6 6f 76 61 8d 1d c1 c9 02 58 f1 c0 17 12 b4 d7 b6 3f f1 80 bd 88 57 4e 01 6e f9 29 e0 75 9c 48 2a de a2 bc 2a 71 3d ad 97 b8 92 d2 f1 c0 77 bd 1a 36 5e c3 48 b8 2c 1f 12 5a 3a 0a b8 92 6e 1a 9e de 38 37 fb a1 13 45 14 f4 59 d9 46 ee 98 34 7d 70 Data Ascii: z'T4 cQkBR/i^\oQ3R#`G\|BKql_+<9[Vg]zf!D6p$Ze#U/AuWi\.gV3XLYKe#@yaK=,eBOrly T.ovaX?WNn)uH**q=w6^H,Z:n87EYF4}p
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: a9 46 3f d8 52 fe 97 1a e9 ad 6d 45 bc cc 70 0a c6 bc f3 a2 ad d2 a6 b0 fb 35 a9 f7 ab f8 94 be 50 39 81 51 2d 09 a3 3a 35 39 c3 ae 84 ae f9 a0 bf 99 ca 1d 35 92 e1 23 56 db 23 16 57 1a d4 b7 55 6a 08 92 2c ac c4 26 a4 5c d1 ff a1 fe 3d 27 c5 cc c9 15 b3 11 70 4d 5b 16 ac 18 6b 01 a8 b7 c6 35 34 07 01 9c ad e8 ad 36 fc 35 2e 9b 80 38 90 06 af 68 a9 51 31 66 cd 31 65 41 93 10 4c ab 19 51 8d f2 e2 bf af bb 97 b5 06 1a 88 b4 db 59 e2 f7 8b 7a ad 55 2c f4 a1 3b 6b dc 57 51 e7 e1 9e 7c bf 30 8c 4a 77 06 0d 16 b3 46 f7 f4 f6 b2 d6 2c 76 30 92 1a 69 7c 7f 8b 44 a9 38 e8 c6 65 a3 90 14 65 43 e9 14 2b 9c 41 1b c5 3e 91 05 c6 92 d9 6e 41 3e 04 7c 4f c6 f8 3f d2 66 e2 2f 5d ba 44 7a 6b 0f 7d 14 1e 7d 5d 20 6c 2c ae 25 5b 0c af 88 02 85 ed e2 d1 ce d1 ee b6 84 fc b6 Data Ascii: F?RmEp5P9Q-:595#V#WUj,&\='pM[k5465.8hQ1f1eALQYzU,;kWQ\|0JwF,v0i\|D8eeC+A>nA>\|O?f/]Dzk}}] l,%[
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: cc f2 fd 6d 0b b6 98 8a d1 02 e2 69 90 39 5c a7 d2 22 e3 b6 3e fd 46 3a 7a 7e 34 3b 90 a9 d6 98 c1 e7 1e 1c b5 eb 68 f4 52 43 71 22 7c 6a d0 43 03 1d 4a 50 22 88 75 37 49 d4 d8 78 8d 55 7f bf 40 51 5e 63 86 a3 1c 43 6e ec 6b 5b c7 5b 56 e8 3c 0f 15 56 68 94 5d d8 82 d0 48 0a ff e2 38 db 68 2e 69 40 71 2c 58 eb bd c6 77 bb 98 09 36 d7 26 07 52 11 7e 1c 68 04 25 03 66 06 e5 1b 3d 84 42 03 21 81 40 68 e3 9b 00 c2 8c c0 54 e3 20 22 60 d5 49 d2 d8 a9 a5 a0 44 39 05 ba d6 18 ad d7 7d 18 3c 02 a1 5f e3 50 c0 5c 04 05 80 50 a5 5e 23 28 74 31 ad 4d 49 33 60 07 7a 63 c8 0e 5d d3 0d 02 4f 03 7f 05 c4 a0 a2 2e 81 ac 46 89 00 ae 46 1b 5d 77 3a 63 1d 2b 36 d0 5f 87 9c 84 f0 8a 97 04 27 08 9a 76 1e 31 6a 08 0c 82 25 f4 b5 83 f3 68 00 72 c0 84 43 2f 61 3a 6a bc dd 56 d2 Data Ascii: mi9\">F:z~4;hRCq"\|jCJP"u7IxU@Q^cCnk[[V<Vh]H8h.i@q,Xw6&R~h%f=B!@hT "`ID9}<_P\P^#(t1MI3`zc]O.FF]w:c+6_'v1j%hrC/a:jV
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: 0b 0e d2 45 66 47 91 7b e6 0f 73 6f 7c 6f d1 cc 8c 02 fd 08 f2 ca 98 3a 48 8a 05 38 48 57 13 cd 00 73 13 07 48 8b f5 99 1d 49 13 ad 23 93 44 8b 08 83 31 1d 07 30 02 f8 23 4d 36 3b 70 c5 4a 8b 67 6e c4 d2 a6 24 52 f2 9d d6 9a 28 f1 3d 1d 27 b0 0b fb 49 ab 7b d3 61 86 67 52 6a d9 b8 d3 a0 82 a7 a7 d4 eb d3 d3 bb bb d2 c2 2a 6a fd a8 f1 ac 2f 7b 02 25 13 f2 f2 40 6f a2 07 7a 23 55 25 f5 c7 02 3e 69 c9 44 53 59 db fb a2 6d 8c ca 08 d0 54 38 cb 95 ed 81 b0 95 94 30 22 b0 ba 12 b4 44 ba cb af 33 03 3e 3a 96 b8 06 64 ac 04 e7 f0 c2 09 dd 4b e0 8d 49 56 11 2e c6 c4 42 5f d8 37 15 bc 5e ac 92 18 3f 53 cb 95 20 ac 64 6c 51 ca 09 c8 b0 4e 1b c4 1d 59 6a f0 c0 99 3a a1 03 2c a4 68 15 e7 be 02 98 e3 ff 14 57 46 8e 03 88 c5 ed 53 dd 08 ba 52 43 8e 05 e8 bb 96 cb 81 88 Data Ascii: EfG{so\|o:H8HWsHI#D10#M6;pJgn$R(='I{agRj*j/{%@oz#U%>iDSYmT80"D3>:dKIV.B_7^?S dlQNYj:,hWFSRC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.7	49864	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:13 UTC	621	OUT	GET /browser-ui/3.55.0/DefaultTabs-99ec4522.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sedo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.55.0/index-4d0d6d10.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:13 UTC	1006	IN	HTTP/1.1 200 OK x-goog-generation: 1726571790922349 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1695 Content-Encoding: gzip x-goog-hash: crc32c=GI4GXg== x-goog-hash: md5=tUH3ve32a9XqoEcR328CQA== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 1695 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljtBUEeFv7DVnqhjpXJ-BnOYX2LuBALdVzazZCN2NmRVYbEozCs0SHPq8-xIzSH2wsCLEO1Ruh8flw Server: UploadServer Date: Wed, 18 Sep 2024 18:31:45 GMT Expires: Thu, 18 Sep 2025 18:31:45 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:30 GMT ETag: "b541f7bdedf66bd5eaa04711df6f0240" Content-Type: text/javascript Age: 1051768 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:13 UTC	384	IN	Data Raw: 1f 8b 08 08 0e 65 e9 66 02 ff 74 6d 70 6d 64 67 79 6a 78 62 74 00 ad 58 6d 6f e2 3a 16 fe 7e 7f 45 41 73 a3 44 73 e0 96 95 e6 c3 a6 ca 8c 68 a0 23 ee b2 85 05 06 69 74 35 6a 1d 62 c0 d3 90 20 db 81 d2 34 ff 7d cf c9 0b 84 42 3b d5 ee 95 aa 3e 49 6c 1f 9f b7 e7 b1 5b b1 5a 47 52 27 de f6 82 a9 0b 0e cc 25 54 e0 ed 08 35 b0 1b 42 01 ac 4b c8 80 fd 87 50 c2 9a 20 80 d9 25 61 04 ec 4f c2 19 64 ab 42 f0 9e 08 7d f0 62 c2 31 78 99 d5 05 2c 09 62 60 b7 84 3b 60 23 c2 09 b0 31 a1 07 b3 6c d9 06 bc cc 7a 0f d8 37 c2 15 78 8a 70 0e 5e 9b b0 0b de bf 08 dd 74 2e a3 55 bd f9 87 08 7d fe d8 5c 45 7e 1c f0 e6 4f 55 bf 12 79 4c ff a6 59 7d e0 04 23 98 13 2c 73 17 d6 f0 48 f0 04 0f 04 53 10 04 43 c8 b6 19 80 24 d8 82 26 68 c3 86 a0 03 59 7e 1e f3 00 ef 20 73 f4 01 32 7f Data Ascii: eftmpmdgyjxbtXmo:~EAsDsh#it5jb 4}B;>Il[ZGR'%T5BKP %aOdB}b1x,b`;`#1lz7xp^t.U}\E~OUyLY}#,sHSC$&hY~ s2
2024-09-30 22:41:13 UTC	1311	IN	Data Raw: e3 a8 2f 2d fb 12 7a 8e d7 0c 78 b8 d0 cb 8f ad 8f 1b 48 16 5c 93 db 63 f1 c4 ed 15 a8 ca db 3c 75 46 66 0f 3e 5d 5a 90 cc 02 ce a4 cb 34 5f 44 72 37 8c e5 3a 52 7c 3c a3 60 26 51 cf b7 bb a0 f6 2f 13 e6 4d 05 df be 98 6c bb b0 96 7c 23 a2 58 d1 a8 3d 48 1d 61 a2 e1 58 d8 db d4 61 f8 d8 76 a4 69 5d 89 b9 19 60 ae 28 80 85 61 74 4d 2b b5 e0 af c5 0f 0b 6a db e7 e7 c8 dc 5a 96 e4 3a 96 e1 45 18 07 41 91 de 8e 33 a8 39 ce ac 79 d3 1b 8d 27 77 fd f6 f7 ee c8 30 dc ab 72 a2 39 04 df 4c ea 3e a6 b8 a1 39 26 ca af db f5 78 d6 d8 e4 b5 6b 04 42 e9 3a 48 4c dd 04 68 78 85 9e fb fb 2c 7c ba 84 15 93 0b 11 5e 47 5a 47 2b bb dd 54 6b 36 c3 22 35 3d a6 78 33 58 1c d5 47 e0 32 37 8a 43 6d f7 b2 e7 32 ad d5 ea 74 0c 23 d9 a7 8b 9a db ce e3 c5 d0 5d c3 a8 2b 2d d1 7a dd Data Ascii: /-zxH\c<uFf>]Z4_Dr7:R\|<`&Q/Ml\|#X=HaXavi]`(atM+jZ:EA39y'w0r9L>9&xkB:HLhx,\|^GZG+Tk6"5=x3XG27Cm2t#]+-z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.7	49730	142.250.184.206	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:13 UTC	753	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-30 22:41:13 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 30 Sep 2024 22:41:13 GMT Expires: Mon, 30 Sep 2024 22:41:13 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.7	49870	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:13 UTC	383	OUT	GET /browser-ui/3.55.0/SaveButton-c74cbe89.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:13 UTC	1004	IN	HTTP/1.1 200 OK x-goog-generation: 1726571792788874 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 616 Content-Encoding: gzip x-goog-hash: crc32c=J8vSsw== x-goog-hash: md5=lUyk7QZlqR7sODj2IXAwrg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 616 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljs_oGw2YvyZZheEHcq-vSjQ0FPCycfywCw3vUvc3IzVfXAy3xco3x8NiED2pXeK-SpkFdEoSVMLKQ Server: UploadServer Date: Tue, 17 Sep 2024 11:17:16 GMT Expires: Wed, 17 Sep 2025 11:17:16 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:32 GMT ETag: "954ca4ed0665a91eec3838f6217030ae" Content-Type: text/javascript Age: 1164237 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:13 UTC	386	IN	Data Raw: 1f 8b 08 08 10 65 e9 66 02 ff 74 6d 70 68 65 6a 61 72 63 37 65 00 85 94 cb 8e 9b 30 18 85 f7 7d 8a 0c 8b 08 24 87 ce 2c 66 51 47 34 4a 98 48 bd 8c 66 da 81 46 ea aa 32 b6 1b b9 63 6c e4 4b 1a 94 f0 ee 8d 21 a1 10 92 76 75 c0 e7 60 7e 9f 4f 32 cb 0b a9 cc 0e 2d 47 48 8f 28 40 2f 4e 0d 40 89 53 0e d0 57 a7 12 64 85 53 04 32 eb 54 80 ec 93 53 0d b2 cf 4e 2d 28 9d 64 00 a5 4e 55 f5 53 c9 dc 0b df 32 41 e8 36 cc 25 b1 9c 86 bf b4 37 65 cd df 16 2e c5 4e a9 15 53 c6 22 9e 50 b5 61 98 7e 34 34 9f 90 77 f7 77 f7 77 38 ab 3f c2 52 68 33 c2 91 bf 23 4c a3 8c 53 02 15 90 22 e6 0c bf 42 0c 98 4e e8 21 42 1e 51 49 d5 8a d1 df 90 80 1c a9 35 13 89 29 39 85 65 15 44 ef 77 f5 26 3b 8e 32 ca 35 4c 81 65 30 ae 22 ea 07 60 a7 0e c3 69 58 54 91 f1 79 b8 f8 96 a6 cf 4f 3f e6 Data Ascii: eftmphejarc7e0}$,fQG4JHfF2clK!vu`~O2-GH(@/N@SWdS2TSN-(dNUS2A6%7e.NS"Pa~44www8?Rh3#LS"BN!BQI5)9eDw&;25Le0"`iXTyO?
2024-09-30 22:41:13 UTC	230	IN	Data Raw: 49 b3 89 77 70 b7 e6 fa de ce 05 cd 5a 5a 16 f4 a5 e9 fa b8 f2 41 6e a8 6a 96 92 73 64 41 7d c4 0a 90 2e 76 d1 4e 65 2f 60 57 bd 3d f0 10 3b e9 11 2f 7b 50 1f 96 4f df 5b 2b 1d 58 35 ed b8 a5 5d f4 68 93 9a 33 39 10 2e 22 a7 e3 b1 3a 40 ee 11 24 54 94 5d be ff 74 8f 74 c9 89 2e 69 5b 75 c1 ab 6c e3 6e ff 2e d9 23 2b 8e 64 8b 4e 87 1d b2 2e 7f 85 eb 70 df 8b 54 cb 21 d5 f4 9c c8 89 6a d9 a5 8a da 89 44 2f af 87 04 6d 8f 20 ee 61 4a e6 ab 65 6b 91 81 55 13 2c 6b 82 0d b8 1b bb df 2b df 06 33 37 12 bc d8 68 d9 3d b9 46 1b da 6b 14 1d 1b b5 bd 48 e7 30 9d 7a 9d 73 a1 da e1 0f 2e 56 8b 87 d5 92 f3 aa aa 29 dd d6 97 2b 76 97 eb 1c 10 27 0f cd c5 9c 54 d3 37 7f 00 89 14 7e 91 e9 05 00 00 Data Ascii: IwpZZAnjsdA}.vNe/`W=;/{PO[+X5]h39.":@$T]tt.i[uln.#+dN.pT!jD/m aJekU,k+37h=FkH0zs.V)+v'T7~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.7	49871	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:13 UTC	384	OUT	GET /browser-ui/3.55.0/DefaultTabs-99ec4522.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:13 UTC	1006	IN	HTTP/1.1 200 OK x-goog-generation: 1726571790922349 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1695 Content-Encoding: gzip x-goog-hash: crc32c=GI4GXg== x-goog-hash: md5=tUH3ve32a9XqoEcR328CQA== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 1695 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8ljt9fBmuV8z0TY66jMzlXUhzwUw7PMtKyxjSHIE5fynl8BQbdbBpDFc8olF_qP0mSXPz3BW1KzeNOQ Server: UploadServer Date: Tue, 17 Sep 2024 11:17:16 GMT Expires: Wed, 17 Sep 2025 11:17:16 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:30 GMT ETag: "b541f7bdedf66bd5eaa04711df6f0240" Content-Type: text/javascript Age: 1164237 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:13 UTC	384	IN	Data Raw: 1f 8b 08 08 0e 65 e9 66 02 ff 74 6d 70 6d 64 67 79 6a 78 62 74 00 ad 58 6d 6f e2 3a 16 fe 7e 7f 45 41 73 a3 44 73 e0 96 95 e6 c3 a6 ca 8c 68 a0 23 ee b2 85 05 06 69 74 35 6a 1d 62 c0 d3 90 20 db 81 d2 34 ff 7d cf c9 0b 84 42 3b d5 ee 95 aa 3e 49 6c 1f 9f b7 e7 b1 5b b1 5a 47 52 27 de f6 82 a9 0b 0e cc 25 54 e0 ed 08 35 b0 1b 42 01 ac 4b c8 80 fd 87 50 c2 9a 20 80 d9 25 61 04 ec 4f c2 19 64 ab 42 f0 9e 08 7d f0 62 c2 31 78 99 d5 05 2c 09 62 60 b7 84 3b 60 23 c2 09 b0 31 a1 07 b3 6c d9 06 bc cc 7a 0f d8 37 c2 15 78 8a 70 0e 5e 9b b0 0b de bf 08 dd 74 2e a3 55 bd f9 87 08 7d fe d8 5c 45 7e 1c f0 e6 4f 55 bf 12 79 4c ff a6 59 7d e0 04 23 98 13 2c 73 17 d6 f0 48 f0 04 0f 04 53 10 04 43 c8 b6 19 80 24 d8 82 26 68 c3 86 a0 03 59 7e 1e f3 00 ef 20 73 f4 01 32 7f Data Ascii: eftmpmdgyjxbtXmo:~EAsDsh#it5jb 4}B;>Il[ZGR'%T5BKP %aOdB}b1x,b`;`#1lz7xp^t.U}\E~OUyLY}#,sHSC$&hY~ s2
2024-09-30 22:41:13 UTC	1311	IN	Data Raw: e3 a8 2f 2d fb 12 7a 8e d7 0c 78 b8 d0 cb 8f ad 8f 1b 48 16 5c 93 db 63 f1 c4 ed 15 a8 ca db 3c 75 46 66 0f 3e 5d 5a 90 cc 02 ce a4 cb 34 5f 44 72 37 8c e5 3a 52 7c 3c a3 60 26 51 cf b7 bb a0 f6 2f 13 e6 4d 05 df be 98 6c bb b0 96 7c 23 a2 58 d1 a8 3d 48 1d 61 a2 e1 58 d8 db d4 61 f8 d8 76 a4 69 5d 89 b9 19 60 ae 28 80 85 61 74 4d 2b b5 e0 af c5 0f 0b 6a db e7 e7 c8 dc 5a 96 e4 3a 96 e1 45 18 07 41 91 de 8e 33 a8 39 ce ac 79 d3 1b 8d 27 77 fd f6 f7 ee c8 30 dc ab 72 a2 39 04 df 4c ea 3e a6 b8 a1 39 26 ca af db f5 78 d6 d8 e4 b5 6b 04 42 e9 3a 48 4c dd 04 68 78 85 9e fb fb 2c 7c ba 84 15 93 0b 11 5e 47 5a 47 2b bb dd 54 6b 36 c3 22 35 3d a6 78 33 58 1c d5 47 e0 32 37 8a 43 6d f7 b2 e7 32 ad d5 ea 74 0c 23 d9 a7 8b 9a db ce e3 c5 d0 5d c3 a8 2b 2d d1 7a dd Data Ascii: /-zxH\c<uFf>]Z4_Dr7:R\|<`&Q/Ml\|#X=HaXavi]`(atM+jZ:EA39y'w0r9L>9&xkB:HLhx,\|^GZG+Tk6"5=x3XG27Cm2t#]+-z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.7	49869	35.190.14.188	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:13 UTC	391	OUT	GET /browser-ui/3.55.0/VirtualServiceItem-d95151cb.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:13 UTC	1008	IN	HTTP/1.1 200 OK x-goog-generation: 1726571794737332 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 48659 Content-Encoding: gzip x-goog-hash: crc32c=yqx2oQ== x-goog-hash: md5=xQ+x9NAxMAgyuginIPtFxA== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 48659 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AD-8lju8IpdJrLR-h8JHAl2uOY_c9nuYQX83qhmVTTF9rmZW2yKWHHAI0R2CmsSiZQ0DW8j0KrR4Mww_HQ Server: UploadServer Date: Tue, 17 Sep 2024 11:17:18 GMT Expires: Wed, 17 Sep 2025 11:17:18 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Tue, 17 Sep 2024 11:16:34 GMT ETag: "c50fb1f4d031300832ba08a720fb45c4" Content-Type: text/javascript Age: 1164235 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:13 UTC	382	IN	Data Raw: 1f 8b 08 08 12 65 e9 66 02 ff 74 6d 70 6c 69 61 36 5f 39 6b 38 00 ec bd 59 62 db c8 b2 28 b8 15 0a c7 97 05 5c 27 61 82 33 c1 42 f1 ca b2 6c ab 2c 5b 2a 49 1e 55 3a 32 48 82 22 2c 08 60 01 a0 06 4b ec cf b7 97 f7 dd 3b e8 a5 f4 4a 3a 22 32 01 24 40 50 92 ab ea 74 df f7 fa d4 20 02 89 1c 23 23 23 23 63 4a f7 62 1e 84 f1 ed ac 62 47 15 87 8d 76 f1 37 66 f6 4b fc 75 d9 1c 7f 02 36 7a 8b bf 3e 1b fd 81 bf 21 b3 f7 f0 d7 66 f6 3e fe 7a cc de c2 df 88 d9 bf e1 ef 84 d9 07 f8 3b 66 f6 21 fe 2e d8 0d fe cc d9 e8 3b fe ce d8 e8 1d fe 9e 31 fb 3d fe 5e b0 11 55 37 65 23 aa 6e c4 46 cf f1 f7 86 8d 22 fc bd 64 23 aa f6 9a 8d a8 57 57 6c 44 d5 6f 31 fb 0d fe 1e 31 fb 35 fe 9e b3 11 35 b7 cb 6c 6a ef 90 8d 5e e0 ef 36 1b 1d e1 ef 0e 1b 51 7b 9b 6c 14 e3 ef 01 b3 7f c5 Data Ascii: eftmplia6_9k8Yb(\'a3Bl,[*IU:2H",`K;J:"2$@Pt ####cJbbGv7fKu6z>!f>z;f!.;1=^U7e#nF"d#WWlDo1155lj^6Q{l
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: 43 00 29 34 73 be c3 c6 36 4d 19 a4 d0 83 0d 29 23 9a 34 78 18 d3 ac c1 c3 84 a6 0d f2 6c d2 bc c1 03 41 70 01 15 12 42 cc 21 85 06 3b 83 07 02 da 19 94 72 68 f6 e0 61 4a d3 07 0f 67 34 7f f0 40 e8 74 03 99 69 c8 97 90 e2 d2 14 c2 c3 37 9a 43 78 38 a7 49 84 07 8f 66 11 1e 2e 68 1a a1 d4 15 cd 23 a4 f8 34 91 f0 10 d0 4c c2 03 8d 6b 07 1e 08 15 37 e1 21 a4 c9 84 07 c2 96 ef f0 40 d3 bb 07 0f 04 8d 7d 78 b8 a4 09 85 07 aa f9 09 34 41 a5 9e 3b cb 69 18 5c 28 fa 33 d7 9f 38 d7 fa 45 30 59 78 8e fe 2d 52 06 e3 c0 8f e2 ca a9 63 a9 31 73 35 eb 97 5b 4a 38 0e 98 7f 62 39 aa ef 5c 55 36 c3 d0 be 51 63 4d 9f ba 9e a7 ba 9a c6 6c 2b 54 55 d5 61 31 e6 0f 8e 9d 93 0d cb 8a ab 55 5f 55 dd a4 82 4a 60 b9 7a e4 b9 63 47 d5 06 a1 13 2f 42 bf 82 39 ad 98 05 4b 4d 5b 6a ec Data Ascii: C)4s6M)#4xlApB!;rhaJg4@ti7Cx8If.h#4Lk7!@}x4A;i\(38E0Yx-Rc1s5[J8b9\U6QcMl+TUa1U_UJ`zcG/B9KM[j
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: 9a 0d ca d7 fa b1 7c 65 74 e8 81 8e b4 1e d9 40 0f f3 69 ec 15 4e 3f 2d 16 98 fd 6c 83 05 4e 2e 82 c7 79 e0 d2 1c 26 f3 ee fa 04 44 9a fe c2 fe 0a 6f b5 2b c0 5d 13 ff ac 6c b0 34 61 33 c0 ab 1a 92 33 9c 64 ca 86 53 5a 82 72 98 fb 69 65 e2 5e de d2 f4 8a 99 2a ee 6c b8 c2 92 75 f2 f0 96 14 3a 67 0b cf e6 59 67 ee c4 39 0a ce ce 00 39 e0 24 45 e5 e2 25 ad 61 a0 94 fa db cd 83 57 3b ef 4e 0f 76 5e bd 3e 62 ce b0 6e c6 f9 1d ea fa 3a d2 1e dc 22 80 1c ac 54 55 24 e5 d7 9e a6 dd 57 6c 77 fb e5 9a 52 1a 7b 8f f3 06 10 2a 5f b3 b9 75 ca 51 1e 37 4f e0 68 fc 20 56 4d cf 8e e2 da 78 e6 c2 26 7d 9b b2 1b eb be ad 42 ff de b1 71 10 fd 39 08 d5 71 64 1f b2 91 e5 86 41 18 36 71 43 87 d8 71 13 26 7e 71 e1 0b 2c 1c 28 c0 7f 7e 14 67 86 e4 00 31 51 a5 9d 42 89 2e cf 14 Data Ascii: \|et@iN?-lN.y&Do+]l4a33dSZrie^lu:gYg99$E%aW;Nv^>bn:"TU$WlwR{_uQ7Oh VMx&}Bq9qdA6qCq&~q,(~g1QB.
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: a6 2f 97 ab f7 93 bf fc 5f 5e b2 32 86 a7 06 f6 a1 91 3c b4 61 d4 69 af d2 1e d4 78 55 df 1f 05 4d 89 02 02 45 fc ee 84 81 92 10 f1 4f ff 26 e2 ff 26 e2 ff 26 e2 ff ed 88 f8 23 49 f8 7f db b3 d0 83 04 fd df 27 a1 7f 9f 84 fe d7 3a 09 ad a2 34 df 42 3f a3 89 cb 78 e6 8c cf 9d 89 19 a3 f6 4b 9c 99 5e a2 b6 c1 74 31 45 12 25 fb f8 ee a2 9e ec 5a d5 98 1b bd 48 f4 4a 36 7e 48 34 65 f4 bb 7d 0d 3b d3 8e 3f 0d cc 88 2b d9 28 75 93 24 9b a9 09 82 39 91 be 41 3d cf 6f cc 31 6a f7 26 4e 34 0e dd 11 25 2c 30 21 f0 45 0f ce 18 09 fd 2f 2c 45 48 bb 95 4c d7 76 3c 65 23 32 2b 82 2a 33 2b 9a 69 b5 3a d5 49 79 a2 92 0d 0e 5a 3e 8c c3 00 00 b4 51 5f a6 d6 08 9c 87 b8 b2 6e d4 af 4f 6e 43 54 68 6e 59 73 f5 92 0c 4b 58 34 9c ab 1f 1c fe ec 55 ab 73 f5 95 c3 6e 01 0c 5f 39 Data Ascii: /_^2<aixUMEO&&&#I':4B?xK^t1E%ZHJ6~H4e};?+(u$9A=o1j&N4%,0!E/,EHLv<e#2+*3+i:IyZ>Q_nOnCThnYsKX4Usn_9
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: fe c0 98 61 1e fe e5 83 c6 1d e0 31 e0 6f 63 4f 34 16 c4 8f b2 d3 0b 83 ab a2 71 28 52 85 a4 c8 c8 0b c6 e7 6b 4e 65 7e fc e3 96 80 89 3d ea 63 db 08 7f a8 0d 99 2b 8b e2 d0 81 03 fe ba 5d 90 b8 24 a2 33 b9 c5 2d 1c 11 72 d3 56 ad 7e 4d 4f 6b 71 de b2 15 6d fd 99 fd 43 7d 2c dd 17 65 5f 92 35 be 25 7f 8a c8 7d ad af 7a 70 5c 7b cb 87 17 51 a1 60 62 db 7a 4d 85 a1 f4 9f 47 ae 13 b4 9a 4f 4b ff c9 73 d9 e3 0f 84 39 ce 39 d9 ed 13 3e c7 a8 1b 83 7b a1 fb 27 e8 87 c6 26 7f 61 5d 88 89 c7 51 9b 06 ec 92 ab 8c 47 71 2c 12 ba d4 38 6b 97 bc e5 4e a3 c5 f9 be bb 5b a1 73 59 52 92 e9 d3 a1 c6 c6 8f 60 eb ca 98 b8 94 ed 49 b9 b9 15 a6 9a fe 05 8e 3a 37 57 12 77 77 fd 80 fb 41 32 42 a3 4e 90 5a 65 db c2 82 37 42 7b cd 31 e8 5e be aa 08 4e 92 52 fd 40 25 fd f6 9a 3a Data Ascii: a1ocO4q(RkNe~=c+]$3-rV~MOkqmC},e_5%}zp\{Q`bzMGOKs99>{'&a]QGq,8kN[sYR`I:7WwwA2BNZe7B{1^NR@%:
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: 23 0d dc 58 9b b1 6a 33 8f 8d d8 99 64 90 85 7a 9d 64 eb e5 26 10 c4 ca c0 3e 05 ab e1 52 61 b7 12 95 f2 81 4a 39 68 40 b4 b5 42 0f 63 89 38 dc 14 23 22 00 29 2b 2c c3 9b 6a 35 da 40 f4 d9 da da df cc 22 22 7c ad 57 6a 4f 6e 83 22 83 06 54 e3 2b 8c 60 23 84 52 d6 4a a9 23 00 42 b0 12 9f 84 ba aa 91 a9 5a bc 64 6a b1 7d 58 77 38 45 a4 c7 55 35 8d d3 7a d8 e9 a6 d5 aa 5d ad c2 1e 38 02 ac 3d cb e1 ea dd 9d ad 0d 77 60 87 b9 95 03 69 7c 95 fb 9b 30 79 48 e4 96 9a 99 75 76 18 12 a3 20 66 b7 a4 16 ee 87 b0 5a 97 87 23 37 63 b3 ac c4 5a 48 a1 05 0e 8c fd 3b 2d 21 27 e5 8f 32 7c 88 79 98 2e b4 de 0a 60 5d 0d b8 19 14 6c a1 b7 63 68 b5 c2 fb 6c c2 1e be 1b 63 c4 0c 51 1e 89 91 b0 83 89 59 46 99 4c 77 69 39 83 c0 3a 8f d5 63 58 f3 27 da 92 0e 34 03 51 d5 d1 d6 4b Data Ascii: #Xj3dzd&>RaJ9h@Bc8#")+,j5@""\|WjOn"T+`#RJ#BZdj}Xw8EU5z]8=w`i\|0yHuv fZ#7cZH;-!'2\|y.`]lchlcQYFLwi9:cX'4QK
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: 7a 27 81 99 54 9f 34 b5 e5 18 20 b8 63 8e 51 6b 42 52 b0 f7 ff cb 2f e5 69 10 5e d9 e1 e4 ff fd d5 5c d2 f0 df b3 a0 d3 99 6f e6 51 0c 83 33 e4 52 b2 b5 23 f0 12 d0 bf 91 60 02 47 dd 7c 42 a7 ce 4b ca 05 71 0d 08 6c cd 96 1e 5f 2b 3c 39 5b 80 f9 d4 56 67 b5 8a 5d 7a 66 d9 82 21 44 36 70 ad 24 cb b0 c2 13 b2 85 5a e1 65 b2 b5 9c 23 55 7f 2f cd 41 00 75 57 69 5c 2e b5 67 ac 56 01 04 33 a9 58 cc 83 4c 59 a5 09 93 92 81 9c f5 4b 96 65 23 9d 40 79 61 4b a9 3d 2c 99 bd 65 04 42 aa 4f c2 82 72 6c 79 d4 e2 ff 20 54 2e b0 d6 6f 76 61 8d 1d c1 c9 02 58 f1 c0 17 12 b4 d7 b6 3f f1 80 bd 88 57 4e 01 6e f9 29 e0 75 9c 48 2a de a2 bc 2a 71 3d ad 97 b8 92 d2 f1 c0 77 bd 1a 36 5e c3 48 b8 2c 1f 12 5a 3a 0a b8 92 6e 1a 9e de 38 37 fb a1 13 45 14 f4 59 d9 46 ee 98 34 7d 70 Data Ascii: z'T4 cQkBR/i^\oQ3R#`G\|BKql_+<9[Vg]zf!D6p$Ze#U/AuWi\.gV3XLYKe#@yaK=,eBOrly T.ovaX?WNn)uH**q=w6^H,Z:n87EYF4}p
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: a9 46 3f d8 52 fe 97 1a e9 ad 6d 45 bc cc 70 0a c6 bc f3 a2 ad d2 a6 b0 fb 35 a9 f7 ab f8 94 be 50 39 81 51 2d 09 a3 3a 35 39 c3 ae 84 ae f9 a0 bf 99 ca 1d 35 92 e1 23 56 db 23 16 57 1a d4 b7 55 6a 08 92 2c ac c4 26 a4 5c d1 ff a1 fe 3d 27 c5 cc c9 15 b3 11 70 4d 5b 16 ac 18 6b 01 a8 b7 c6 35 34 07 01 9c ad e8 ad 36 fc 35 2e 9b 80 38 90 06 af 68 a9 51 31 66 cd 31 65 41 93 10 4c ab 19 51 8d f2 e2 bf af bb 97 b5 06 1a 88 b4 db 59 e2 f7 8b 7a ad 55 2c f4 a1 3b 6b dc 57 51 e7 e1 9e 7c bf 30 8c 4a 77 06 0d 16 b3 46 f7 f4 f6 b2 d6 2c 76 30 92 1a 69 7c 7f 8b 44 a9 38 e8 c6 65 a3 90 14 65 43 e9 14 2b 9c 41 1b c5 3e 91 05 c6 92 d9 6e 41 3e 04 7c 4f c6 f8 3f d2 66 e2 2f 5d ba 44 7a 6b 0f 7d 14 1e 7d 5d 20 6c 2c ae 25 5b 0c af 88 02 85 ed e2 d1 ce d1 ee b6 84 fc b6 Data Ascii: F?RmEp5P9Q-:595#V#WUj,&\='pM[k5465.8hQ1f1eALQYzU,;kWQ\|0JwF,v0i\|D8eeC+A>nA>\|O?f/]Dzk}}] l,%[
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: cc f2 fd 6d 0b b6 98 8a d1 02 e2 69 90 39 5c a7 d2 22 e3 b6 3e fd 46 3a 7a 7e 34 3b 90 a9 d6 98 c1 e7 1e 1c b5 eb 68 f4 52 43 71 22 7c 6a d0 43 03 1d 4a 50 22 88 75 37 49 d4 d8 78 8d 55 7f bf 40 51 5e 63 86 a3 1c 43 6e ec 6b 5b c7 5b 56 e8 3c 0f 15 56 68 94 5d d8 82 d0 48 0a ff e2 38 db 68 2e 69 40 71 2c 58 eb bd c6 77 bb 98 09 36 d7 26 07 52 11 7e 1c 68 04 25 03 66 06 e5 1b 3d 84 42 03 21 81 40 68 e3 9b 00 c2 8c c0 54 e3 20 22 60 d5 49 d2 d8 a9 a5 a0 44 39 05 ba d6 18 ad d7 7d 18 3c 02 a1 5f e3 50 c0 5c 04 05 80 50 a5 5e 23 28 74 31 ad 4d 49 33 60 07 7a 63 c8 0e 5d d3 0d 02 4f 03 7f 05 c4 a0 a2 2e 81 ac 46 89 00 ae 46 1b 5d 77 3a 63 1d 2b 36 d0 5f 87 9c 84 f0 8a 97 04 27 08 9a 76 1e 31 6a 08 0c 82 25 f4 b5 83 f3 68 00 72 c0 84 43 2f 61 3a 6a bc dd 56 d2 Data Ascii: mi9\">F:z~4;hRCq"\|jCJP"u7IxU@Q^cCnk[[V<Vh]H8h.i@q,Xw6&R~h%f=B!@hT "`ID9}<_P\P^#(t1MI3`zc]O.FF]w:c+6_'v1j%hrC/a:jV
2024-09-30 22:41:13 UTC	1390	IN	Data Raw: 0b 0e d2 45 66 47 91 7b e6 0f 73 6f 7c 6f d1 cc 8c 02 fd 08 f2 ca 98 3a 48 8a 05 38 48 57 13 cd 00 73 13 07 48 8b f5 99 1d 49 13 ad 23 93 44 8b 08 83 31 1d 07 30 02 f8 23 4d 36 3b 70 c5 4a 8b 67 6e c4 d2 a6 24 52 f2 9d d6 9a 28 f1 3d 1d 27 b0 0b fb 49 ab 7b d3 61 86 67 52 6a d9 b8 d3 a0 82 a7 a7 d4 eb d3 d3 bb bb d2 c2 2a 6a fd a8 f1 ac 2f 7b 02 25 13 f2 f2 40 6f a2 07 7a 23 55 25 f5 c7 02 3e 69 c9 44 53 59 db fb a2 6d 8c ca 08 d0 54 38 cb 95 ed 81 b0 95 94 30 22 b0 ba 12 b4 44 ba cb af 33 03 3e 3a 96 b8 06 64 ac 04 e7 f0 c2 09 dd 4b e0 8d 49 56 11 2e c6 c4 42 5f d8 37 15 bc 5e ac 92 18 3f 53 cb 95 20 ac 64 6c 51 ca 09 c8 b0 4e 1b c4 1d 59 6a f0 c0 99 3a a1 03 2c a4 68 15 e7 be 02 98 e3 ff 14 57 46 8e 03 88 c5 ed 53 dd 08 ba 52 43 8e 05 e8 bb 96 cb 81 88 Data Ascii: EfG{so\|o:H8HWsHI#D10#M6;pJgn$R(='I{agRj*j/{%@oz#U%>iDSYmT80"D3>:dKIV.B_7^?S dlQNYj:,hWFSRC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.7	49868	142.250.184.206	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:13 UTC	2253	OUT	GET /afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3Df9bcb952ac981036%3AT%3D1727736043%3ART%3D1727736043%3AS%3DALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNzImdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Online%20Personal%20Banking&afdt=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=4151727740856308&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727740856310&u_w=1280&u_h=1024&biw=1263&bih=907&psw [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:14 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Mon, 30 Sep 2024 22:41:14 GMT Expires: Mon, 30 Sep 2024 22:41:14 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-SfWGbWnzUNNI3OZp9EjWPw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 22:41:14 UTC	583	IN	Data Raw: 36 32 38 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 628e<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-30 22:41:14 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-30 22:41:14 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-30 22:41:14 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-30 22:41:14 UTC	1390	IN	Data Raw: 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 38 38 38 38 38 3b 7d 2e 73 69 31 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 33 70 78 3b 63 6f 6c 6f 72 3a 23 36 36 36 36 36 36 3b 7d 2e 73 69 33 7b 63 6f 6c 6f 72 3a 23 38 30 38 30 38 30 3b 7d 2e 73 69 31 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 70 78 3b 63 6f 6c 6f 72 3a 23 38 30 38 30 38 30 3b 7d 2e 73 69 31 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 7d 2e 73 69 31 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b Data Ascii: ne-height:20px;max-width:600px;padding-bottom:31px;color:#888888;}.si1{line-height:13px;color:#666666;}.si3{color:#808080;}.si11{font-size:14px;line-height:15px;color:#808080;}.si14{margin-left:12px;margin-top:4px;padding-bottom:5px;}.si15{font-size:14px;
2024-09-30 22:41:14 UTC	1390	IN	Data Raw: 6e 67 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 32 33 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 77 69 64 74 68 3a 31 34 70 78 3b 7d 2e 73 69 32 34 7b 63 6f 6c 6f 72 3a 23 38 38 38 38 38 38 3b 7d 2e 73 69 32 35 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 38 31 31 32 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 3a 30 70 78 20 73 6f 6c 69 64 20 23 38 38 38 38 38 38 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 Data Ascii: ng-bottom:3px;padding-left:3px;padding-right:3px;padding-top:3px;}.si23{height:14px;width:14px;}.si24{color:#888888;}.si25{font-weight:400;background-color:#081126;border-radius:3px;border:0px solid #888888;font-size:14px;line-height:15px;padding-left:1px
2024-09-30 22:41:14 UTC	1390	IN	Data Raw: 72 69 63 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 7d 2e 73 69 32 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 7d 2e 73 72 53 70 61 63 65 43 68 61 72 7b 77 69 64 74 68 3a 33 70 78 3b 7d 2e 73 72 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 70 72 6f 6d 6f 74 69 6f 6e 45 78 74 65 6e 73 69 6f 6e 4f 63 63 61 73 69 6f 6e 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 7d 2e 70 72 6f 6d 6f 74 69 6f 6e 45 78 74 65 6e 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 37 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 70 Data Ascii: rice{margin-left:5px;margin-right:5px;}.si2{padding-right:3px;}.srSpaceChar{width:3px;}.srLink:hover{text-decoration:underline;}.promotionExtensionOccasion{font-weight:700;}.promotionExtensionLink:hover{text-decoration:underline;}.si7{padding-bottom:3px;p
2024-09-30 22:41:14 UTC	1390	IN	Data Raw: 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 32 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 Data Ascii: ign:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si32" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-b
2024-09-30 22:41:14 UTC	1390	IN	Data Raw: 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 34 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 Data Ascii: ass="i_ div si34" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:cente
2024-09-30 22:41:14 UTC	1390	IN	Data Raw: 62 61 6e 6b 3c 2f 73 70 61 6e 3e 2e 63 6f 6d 2f 3c 2f 61 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 36 37 20 77 5f 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 69 64 3d 22 65 34 22 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 79 5f 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 Data Ascii: bank</span>.com/</a><div class="i_ div si67 w_" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div id="e4" class="i_ div y_" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -we

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.7	49872	142.250.184.206	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:14 UTC	753	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-30 22:41:14 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 30 Sep 2024 22:41:14 GMT Expires: Mon, 30 Sep 2024 22:41:14 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.7	49874	142.250.184.206	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:17 UTC	2279	OUT	GET /afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3Df9bcb952ac981036%3AT%3D1727736043%3ART%3D1727736043%3AS%3DALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNzcmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Cit%20Online%20Savings%20Account%20Rates&afdt=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=9271727740860643&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727740860645&u_w=1280&u_h=1024&biw=126 [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:18 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Mon, 30 Sep 2024 22:41:17 GMT Expires: Mon, 30 Sep 2024 22:41:17 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ihxn9LRWdXLV3qHFOP23gA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 22:41:18 UTC	583	IN	Data Raw: 36 38 61 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 68a8<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-30 22:41:18 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-30 22:41:18 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-30 22:41:18 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-30 22:41:18 UTC	1390	IN	Data Raw: 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 31 70 78 3b 63 6f 6c 6f 72 3a 23 38 38 38 38 38 38 3b 7d 2e 73 69 31 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 33 70 78 3b 63 6f 6c 6f 72 3a 23 36 36 36 36 36 36 3b 7d 2e 73 69 33 7b 63 6f 6c 6f 72 3a 23 38 30 38 30 38 30 3b 7d 2e 73 69 31 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 70 78 3b 63 6f 6c 6f 72 3a 23 38 30 38 30 38 30 3b 7d 2e 73 69 31 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 7d 2e 73 69 31 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b Data Ascii: ne-height:20px;max-width:600px;padding-bottom:31px;color:#888888;}.si1{line-height:13px;color:#666666;}.si3{color:#808080;}.si11{font-size:14px;line-height:15px;color:#808080;}.si14{margin-left:12px;margin-top:4px;padding-bottom:5px;}.si15{font-size:14px;
2024-09-30 22:41:18 UTC	1390	IN	Data Raw: 6e 67 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 7d 2e 73 69 32 33 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 77 69 64 74 68 3a 31 34 70 78 3b 7d 2e 73 69 32 34 7b 63 6f 6c 6f 72 3a 23 38 38 38 38 38 38 3b 7d 2e 73 69 32 35 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 38 31 31 32 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 3a 30 70 78 20 73 6f 6c 69 64 20 23 38 38 38 38 38 38 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 Data Ascii: ng-bottom:3px;padding-left:3px;padding-right:3px;padding-top:3px;}.si23{height:14px;width:14px;}.si24{color:#888888;}.si25{font-weight:400;background-color:#081126;border-radius:3px;border:0px solid #888888;font-size:14px;line-height:15px;padding-left:1px
2024-09-30 22:41:18 UTC	1390	IN	Data Raw: 72 69 63 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 7d 2e 73 69 32 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 7d 2e 73 72 53 70 61 63 65 43 68 61 72 7b 77 69 64 74 68 3a 33 70 78 3b 7d 2e 73 72 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 70 72 6f 6d 6f 74 69 6f 6e 45 78 74 65 6e 73 69 6f 6e 4f 63 63 61 73 69 6f 6e 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 7d 2e 70 72 6f 6d 6f 74 69 6f 6e 45 78 74 65 6e 73 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 37 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 70 Data Ascii: rice{margin-left:5px;margin-right:5px;}.si2{padding-right:3px;}.srSpaceChar{width:3px;}.srLink:hover{text-decoration:underline;}.promotionExtensionOccasion{font-weight:700;}.promotionExtensionLink:hover{text-decoration:underline;}.si7{padding-bottom:3px;p
2024-09-30 22:41:18 UTC	1390	IN	Data Raw: 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 32 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 Data Ascii: ign:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si32" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-b
2024-09-30 22:41:18 UTC	1390	IN	Data Raw: 35 32 30 73 61 76 69 6e 67 73 25 32 35 32 35 32 30 61 63 63 6f 75 6e 74 25 32 35 32 35 32 30 72 61 74 65 73 25 32 35 32 36 75 74 6d 5f 63 6f 6e 74 65 6e 74 25 32 35 33 44 6d 6d 61 5f 34 35 5f 74 65 78 74 5f 63 69 74 25 32 35 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 32 35 33 44 33 51 5f 67 67 6c 5f 70 73 5f 68 79 73 61 5f 62 72 61 6e 64 5f 61 6c 70 68 61 25 32 35 32 36 67 61 64 5f 73 6f 75 72 63 65 25 32 35 33 44 35 22 20 61 74 74 72 69 62 75 74 69 6f 6e 73 72 63 3d 22 22 20 64 61 74 61 2d 73 65 74 2d 74 61 72 67 65 74 3d 22 31 22 20 74 61 72 67 65 74 3d 22 5f 74 6f 70 22 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 69 6e 68 65 72 69 74 3b 27 20 63 6c 61 73 73 3d 22 Data Ascii: 520savings%252520account%252520rates%2526utm_content%253Dmma_45_text_cit%2526utm_campaign%253D3Q_ggl_ps_hysa_brand_alpha%2526gad_source%253D5" attributionsrc="" data-set-target="1" target="_top"><span style='display:inline;text-transform:inherit;' class="
2024-09-30 22:41:18 UTC	1390	IN	Data Raw: 2e 65 76 65 72 65 73 74 74 65 63 68 2e 6e 65 74 2f 35 32 34 33 2f 63 71 3f 65 76 5f 73 69 64 25 33 44 33 25 32 36 65 76 5f 6c 6e 25 33 44 63 69 74 25 32 35 32 30 6f 6e 6c 69 6e 65 25 32 35 32 30 73 61 76 69 6e 67 73 25 32 35 32 30 61 63 63 6f 75 6e 74 25 32 35 32 30 72 61 74 65 73 25 32 36 65 76 5f 6c 78 25 33 44 6b 77 64 2d 38 32 35 30 31 36 39 32 33 34 38 35 25 32 36 65 76 5f 63 72 78 25 33 44 36 35 31 34 39 34 37 30 30 32 30 35 25 32 36 65 76 5f 6d 74 25 33 44 65 25 32 36 65 76 5f 6e 25 33 44 73 25 32 36 65 76 5f 6c 74 78 25 33 44 25 32 36 65 76 5f 70 6c 25 33 44 25 32 36 65 76 5f 70 6f 73 25 33 44 25 32 36 65 76 5f 64 76 63 25 33 44 63 25 32 36 65 76 5f 64 76 6d 25 33 44 25 32 36 65 76 5f 70 68 79 25 33 44 32 38 34 30 25 32 36 65 76 5f 6c 6f 63 25 33 Data Ascii: .everesttech.net/5243/cq?ev_sid%3D3%26ev_ln%3Dcit%2520online%2520savings%2520account%2520rates%26ev_lx%3Dkwd-825016923485%26ev_crx%3D651494700205%26ev_mt%3De%26ev_n%3Ds%26ev_ltx%3D%26ev_pl%3D%26ev_pos%3D%26ev_dvc%3Dc%26ev_dvm%3D%26ev_phy%3D2840%26ev_loc%3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.7	49867	142.250.185.110	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:17 UTC	883	OUT	GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=svryvr6p6bri&aqid=Cin7Zu_YCOuijuwP3-uAyQw&psid=3259787283&pbt=bs&adbx=442.0625&adby=373.359375&adbh=1203&adbw=379&adbah=401%2C401%2C401&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=23%7C0%7C-4782737%7C12%7C4785046&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:17 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-m8Klro4h2P49eMctR_an6g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 30 Sep 2024 22:41:17 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.7	49875	142.250.184.206	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:18 UTC	753	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-30 22:41:18 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 30 Sep 2024 22:41:18 GMT Expires: Mon, 30 Sep 2024 22:41:18 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.7	49876	142.250.184.206	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:19 UTC	753	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-30 22:41:19 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 30 Sep 2024 22:41:19 GMT Expires: Mon, 30 Sep 2024 22:41:19 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.7	49877	142.250.185.110	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:20 UTC	883	OUT	GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=9s2srwsu99nc&aqid=Cin7Zu_YCOuijuwP3-uAyQw&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1203&adbw=379&adbah=401%2C401%2C401&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=23%7C0%7C-4782737%7C12%7C4785046&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:20 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-D_nQwmleXIBl-cjgYfPoug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 30 Sep 2024 22:41:20 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.7	49878	142.250.185.110	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:20 UTC	882	OUT	GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=qpt5jqk9jmvt&aqid=DSn7ZuO7L_a7juwPr_uimQM&psid=3259787283&pbt=bs&adbx=442.0625&adby=373.359375&adbh=1381&adbw=379&adbah=550%2C401%2C430&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=18%7C0%7C-4783746%7C4%7C4784387&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:21 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-0M2jMd-XyhsbUdlkEa_--w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 30 Sep 2024 22:41:20 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.7	49879	142.250.185.110	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:21 UTC	882	OUT	GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=hocrzb5il20c&aqid=DSn7ZuO7L_a7juwPr_uimQM&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1381&adbw=379&adbah=550%2C401%2C430&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=18%7C0%7C-4783746%7C4%7C4784387&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:21 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-lF_8epDSdTzJKW9y42LWZA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 30 Sep 2024 22:41:21 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.7	49884	142.250.184.206	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:25 UTC	753	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-30 22:41:25 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 30 Sep 2024 22:41:25 GMT Expires: Mon, 30 Sep 2024 22:41:25 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.7	49883	142.250.184.206	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:25 UTC	2241	OUT	GET /afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3Df9bcb952ac981036%3AT%3D1727736043%3ART%3D1727736043%3AS%3DALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwODMmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Easy%20Credit%20Online&afdt=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=1421727740867155&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727740867157&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263& [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:25 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Mon, 30 Sep 2024 22:41:25 GMT Expires: Mon, 30 Sep 2024 22:41:25 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-nnKYh73C5jiR8xX6GqvpZA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 22:41:25 UTC	583	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 8000<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-30 22:41:25 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-30 22:41:25 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-30 22:41:25 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-30 22:41:25 UTC	1390	IN	Data Raw: 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 36 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 36 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 32 70 78 3b 63 6f 6c 6f 72 3a 23 42 44 43 31 43 36 3b 7d 2e 73 69 31 32 38 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 62 65 62 65 62 3b 68 65 69 67 68 74 3a 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 Data Ascii: -serif;font-size:16px;line-height:24px;padding-bottom:22px;padding-left:16px;padding-right:16px;padding-top:22px;color:#BDC1C6;}.si128{background-color:#ebebeb;height:0px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-sh
2024-09-30 22:41:25 UTC	1390	IN	Data Raw: 6e 6f 64 65 5f 31 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 63 75 73 74 6f 6d 5f 6e 6f 64 65 5f 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 63 75 73 74 6f 6d 5f 6e 6f 64 65 5f 34 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 Data Ascii: node_1{margin-bottom:8px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.custom_node_2{width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.custom_node_4{height:100%;widt
2024-09-30 22:41:25 UTC	1390	IN	Data Raw: 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 79 5f 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 64 64 64 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: rgin-top:24px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.y_{font-weight:400;background-color:#ffffff;border:1px solid #dddddd;font-family:sans-serif,arial,sans-serif;font-size:12px;line-height:12px;padding
2024-09-30 22:41:25 UTC	1390	IN	Data Raw: 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 Data Ascii: ion:column; -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -w
2024-09-30 22:41:25 UTC	1390	IN	Data Raw: 72 20 73 70 61 6e 22 3e 53 70 6f 6e 73 6f 72 65 64 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 76 69 73 69 62 6c 65 5f 75 72 6c 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 63 75 73 74 6f 6d 5f 6e 6f 64 65 5f 34 20 76 5f 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 Data Ascii: r span">Sponsored</span></div><div class="i_ div visible_url" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div class="i_ div custom_node_4 v_" style="-ms-flex-direction:row; -webkit-box-or
2024-09-30 22:41:25 UTC	1390	IN	Data Raw: 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 63 75 73 74 6f 6d 5f 6e 6f 64 65 5f 38 22 20 Data Ascii: lex-direction:column;-ms-flex-pack:center; -webkit-box-pack:center; -webkit-justify-content:center; justify-content:center;-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;"><div class="i_ div custom_node_8"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.7	49885	142.250.184.206	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:26 UTC	753	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-30 22:41:26 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 30 Sep 2024 22:41:26 GMT Expires: Mon, 30 Sep 2024 22:41:26 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.7	49888	172.217.18.1	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:27 UTC	694	OUT	GET /svg/right_arrow.svg HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:27 UTC	748	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 171 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 22:41:27 GMT Expires: Tue, 01 Oct 2024 21:41:27 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 16 Feb 2023 19:33:13 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:27 UTC	171	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 44 37 44 37 44 37 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 77 69 64 74 68 3d 22 34 38 22 3e 3c 70 61 74 68 20 64 3d 22 6d 32 34 20 34 30 2e 35 35 2d 33 2e 33 35 2d 33 2e 34 20 31 30 2e 38 35 2d 31 30 2e 38 48 37 2e 34 35 76 2d 34 2e 37 48 33 31 2e 35 4c 32 30 2e 36 35 20 31 30 2e 38 20 32 34 20 37 2e 34 35 20 34 30 2e 35 35 20 32 34 5a 22 2f 3e 3c 2f 73 76 67 3e 0a Data Ascii: <svg fill='#D7D7D7' xmlns="http://www.w3.org/2000/svg" height="48" width="48"><path d="m24 40.55-3.35-3.4 10.85-10.8H7.45v-4.7H31.5L20.65 10.8 24 7.45 40.55 24Z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.7	49891	142.250.186.100	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:27 UTC	686	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:27 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Mon, 30 Sep 2024 22:41:27 GMT Expires: Mon, 30 Sep 2024 22:41:27 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:41:27 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.7	49882	142.250.185.110	443	3592	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:41:28 UTC	882	OUT	GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=ajf1s0f0ifll&aqid=FSn7ZoOGLOuijuwP3-uAyQw&psid=3259787283&pbt=bs&adbx=442.0625&adby=373.359375&adbh=1026&adbw=379&adbah=334%2C334%2C358&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=18%7C0%7C-4781439%7C5%7C4784418&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.bankwir.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:41:28 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-uRwOT3fi08UgDyBqk6RAkg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Mon, 30 Sep 2024 22:41:28 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	18:40:33
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:40:35
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=2184,i,7239552655901931415,17710681725114952505,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	18:40:38
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://bankwir.com/"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: http://www.bankwir.com/	HTTP Parser: No favicon
Source: http://www.bankwir.com/	HTTP Parser: No favicon
Source: http://www.bankwir.com/	HTTP Parser: No favicon
Source: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Easy+Credit+Online&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Easy+Credit+Online&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Easy+Credit+Online&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Easy+Credit+Online&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ&pcsa=false&nb=0	HTTP Parser: No favicon
Source: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon
Source: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&nb=0&nm=2	HTTP Parser: No favicon
Source: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0&nm=3	HTTP Parser: No favicon
Source: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0&nm=3	HTTP Parser: No favicon
Source: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0&nm=3	HTTP Parser: No favicon

Source: global traffic	HTTP traffic detected: GET /templates/images/hero_nc.svg HTTP/1.1Host: img.sedoparking.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=3&uiopt=false&swp=as-drid-2280784292183247&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=r3%7Cs&nocache=9481727736041134&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727736041142&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1146&frm=0&uio=--&cont=rb-default&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fwww.bankwir.com%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/images/hero_nc.svg HTTP/1.1Host: img.sedoparking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=v9j5kxslamme&aqid=6yj7ZoLRH-rdjuwPstOM8QY&psid=3259787283&pbt=bs&adbx=385.203125&adby=413.015625&adbh=571&adbw=493&adbah=212%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=20%7C0%7C1376%7C2057%7C783&lle=0&ifv=1&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=tig31t74dzzu&aqid=6yj7ZoLRH-rdjuwPstOM8QY&pbt=bs&adbx=481.5&adby=986.015625&adbh=16&adbw=300&adbn=slave-1-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=12%7C0%7C1384%7C2057%7C784&lle=0&ifv=0&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=lrsy5ttgkmyk&aqid=6yj7ZoLRH-rdjuwPstOM8QY&psid=3259787283&pbt=bv&adbx=385.203125&adby=413.015625&adbh=571&adbw=493&adbah=212%2C171%2C171&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=20%7C0%7C1376%7C2057%7C783&lle=0&ifv=1&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services/parking.php3 HTTP/1.1Host: www.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /services/parking.php3 HTTP/1.1Host: sedo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /redirect.php?id=22 HTTP/1.1Host: sedo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=
Source: global traffic	HTTP traffic detected: GET /us/park-domains/?tracked=&partnerid=&language=us HTTP/1.1Host: sedo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8
Source: global traffic	HTTP traffic detected: GET /dist/css/typo3/main.css?1724922195 HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin_git/resources/public/JavaScripts/jquery-3.7.1.min.js?1724921946 HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/user_upload/park-domains_bild.png HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/user_upload/Park_Domains/Domain-Parking.jpg HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/user_upload/Park_Domains/Domain-Parking-Profis.jpg HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/user_upload/Park_Domains/Domain-Parking.jpg HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/images/legacy/images/icons/icn-check-blue.svg HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.sedo.com/dist/css/typo3/main.css?1724922195Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/user_upload/Park_Domains/Parking_50-50_1420x1082_EN.jpg HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/user_upload/Park_Domains/Parking_einrichten.jpg HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /dist/js/typo3/app.min.js?1724922195 HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sedo.com/us/park-domains/?tracked=&partnerid=&language=usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8
Source: global traffic	HTTP traffic detected: GET /fileadmin_git/resources/public/JavaScripts/jquery-3.7.1.min.js?1724921946 HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /c7r/assets/static/dist/js/deprecated/typescript/static/app.min.js HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fileadmin/user_upload/park-domains_bild.png HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/user_upload/Park_Domains/Domain-Parking-Profis.jpg HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /components/p9HJ4M2Uz7U4/full.header.min.js HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /components/zkLxDsbw1hz2/full.footer.min.js HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/images/legacy/images/icons/icn-check-blue.svg HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8
Source: global traffic	HTTP traffic detected: GET /components/TfcP3WYRyZ9A/cookie-banner.min.js HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/user_upload/Park_Domains/Parking_einrichten.jpg HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /c7r/assets/static/libs/external/jquery-ui.min.js HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin_git/resources/public/JavaScripts/splide.min.js?1724921946 HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /typo3temp/assets/js/4c6258062633129d69aecce4f0023d9c.js?1718178726 HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /service/common.php?v=0.1&m=translate&f=getTexts&language=us&app=com.sedo.translation.global HTTP/1.1Host: sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sedo.com/us/park-domains/?tracked=&partnerid=&language=usAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8
Source: global traffic	HTTP traffic detected: GET /dist/js/typo3/app.min.js?1724922195 HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/user_upload/Park_Domains/Parking_50-50_1420x1082_EN.jpg HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /c7r/assets/static/dist/js/deprecated/typescript/static/app.min.js HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/user_upload/Sell_Domains/Domain_Auction/FAQ.jpg HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1Host: widget.trustpilot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /components/TfcP3WYRyZ9A/cookie-banner.min.js HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /typo3temp/assets/js/cfd16b174d7f7b046e20adbc2e0a1094.js?1689601391 HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/images/legacy/images/icons/icn-check-beige.svg HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.sedo.com/dist/css/typo3/main.css?1724922195Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /components/zkLxDsbw1hz2/full.footer.min.js HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /components/p9HJ4M2Uz7U4/full.header.min.js HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /browser-ui/latest/loader.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/files/sourcesanspro-regular-webfont.woff2 HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.sedo.com/dist/css/typo3/main.css?1724922195Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /typo3temp/assets/js/4c6258062633129d69aecce4f0023d9c.js?1718178726 HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin_git/resources/public/JavaScripts/splide.min.js?1724921946 HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/user_upload/Sell_Domains/Domain_Auction/FAQ.jpg HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /components/p9HJ4M2Uz7U4/b75b73e313804cf110ea.svg HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US
Source: global traffic	HTTP traffic detected: GET /components/zkLxDsbw1hz2/e3c69f63348c1ec6e547.png HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /components/zkLxDsbw1hz2/d5634a838071888dbd2a.png HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /components/zkLxDsbw1hz2/48d68b70659b28905e87.jpg HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /components/zkLxDsbw1hz2/b75b73e313804cf110ea.svg HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /service/common.php?v=0.1&m=translate&f=getTexts&language=us&app=com.sedo.translation.global HTTP/1.1Host: sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US
Source: global traffic	HTTP traffic detected: GET /c7r/assets/static/libs/external/jquery-ui.min.js HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /components/p9HJ4M2Uz7U4/d26139c0fd3b917ce03b.woff2 HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/index.module.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /components/p9HJ4M2Uz7U4/a7d29342348138d42728.woff2 HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /components/p9HJ4M2Uz7U4/98a8d93f852421263258.woff2 HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /components/p9HJ4M2Uz7U4/2febe6dbe65f64ce36be.woff2 HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/latest/loader.js HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /typo3temp/assets/js/cfd16b174d7f7b046e20adbc2e0a1094.js?1689601391 HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /fileadmin/images/legacy/images/icons/icn-check-beige.svg HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1Host: sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US
Source: global traffic	HTTP traffic detected: GET /components/zkLxDsbw1hz2/e3c69f63348c1ec6e547.png HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /components/p9HJ4M2Uz7U4/b75b73e313804cf110ea.svg HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /components/zkLxDsbw1hz2/b75b73e313804cf110ea.svg HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /components/zkLxDsbw1hz2/9f07a3eca6d4792ac529.svg HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /components/zkLxDsbw1hz2/48d68b70659b28905e87.jpg HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /service/common.php HTTP/1.1Host: sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/index.module.js HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /components/zkLxDsbw1hz2/d5634a838071888dbd2a.png HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /c7r/assets/static/images/icons/favicon.ico?v=dLJ3bx2xjj HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /settings/5QJe3R54G/latest/languages.json HTTP/1.1Host: api.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://sedo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c7r/assets/static/images/icons/site.webmanifest?v=dLJ3bx2xjj HTTP/1.1Host: cdn.sedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://sedo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1Host: sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/8cb7b7b79a0b42be HTTP/1.1Host: sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg; campaignId=; session=03e31c5ec68ea2ed808724c8900cf8d8; locale=en-US
Source: global traffic	HTTP traffic detected: GET /c7r/assets/static/images/icons/favicon.ico?v=dLJ3bx2xjj HTTP/1.1Host: cdn.sedo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Jg2WMt4CTlyZO2nSGSsm52JkZzQ_pcYfZWibdG477zs-1727736052-1.0.1.1-b9MRhozq2P5yEyhr1BgOKtP5D9NF0n3x9fsEYEyCodhSSEtzD_5oJd_GO8Ce81goEif4FQ1zNj4gi4pLI9nMYg
Source: global traffic	HTTP traffic detected: GET /settings/5QJe3R54G/latest/languages.json HTTP/1.1Host: api.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings/5QJe3R54G/latest/en.json HTTP/1.1Host: api.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://sedo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-sdk/4.38.4/cross-domain-bridge.html HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings/5QJe3R54G/latest/en.json HTTP/1.1Host: api.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /session/1px.png?settingsId=5QJe3R54G HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/DefaultData-fa10cf7f-3d7db9aa.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.55.0/index.module.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /session/1px.png?settingsId=5QJe3R54G HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/DefaultData-fa10cf7f-3d7db9aa.js HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /translations/translations-en.json HTTP/1.1Host: api.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://sedo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /translations/translations-en.json HTTP/1.1Host: api.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/DefaultUI-efcc91c9-fa5e06dd.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.55.0/index.module.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/FirstLayerCustomization-de8ec6f3-0ed66d66.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.55.0/DefaultUI-efcc91c9-fa5e06dd.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/ButtonsCustomization-5698ac85-5d43b15f.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.55.0/DefaultUI-efcc91c9-fa5e06dd.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/SecondLayerUI-2d936468-4fd84b50.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.55.0/DefaultUI-efcc91c9-fa5e06dd.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/DefaultUI-efcc91c9-fa5e06dd.js HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/Taglogger-ece90602-40fbde48.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.55.0/index.module.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/ButtonsCustomization-5698ac85-5d43b15f.js HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/FirstLayerCustomization-de8ec6f3-0ed66d66.js HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/SecondLayerUI-2d936468-4fd84b50.js HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/Taglogger-ece90602-40fbde48.js HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/PrivacyButton-62ab6c78.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.55.0/index.module.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/index-3ff76a26.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.55.0/index.module.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=5QJe3R54G&t=1&abv=&r=https%3A%2F%2Fsedo.com%2Fus%2Fpark-domains%2F&cb=1727736069897 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sedo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/index-4d0d6d10.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.55.0/index.module.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/PrivacyButton-62ab6c78.js HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/index-3ff76a26.js HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=5QJe3R54G&t=1&abv=&r=https%3A%2F%2Fsedo.com%2Fus%2Fpark-domains%2F&cb=1727736069897 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/SaveButton-c74cbe89.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.55.0/index-4d0d6d10.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/index-4d0d6d10.js HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/VirtualServiceItem-d95151cb.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.55.0/index-4d0d6d10.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/DefaultTabs-99ec4522.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sedo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.55.0/index-4d0d6d10.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/SaveButton-c74cbe89.js HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/DefaultTabs-99ec4522.js HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.55.0/VirtualServiceItem-d95151cb.js HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3Df9bcb952ac981036%3AT%3D1727736043%3ART%3D1727736043%3AS%3DALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNzImdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Online%20Personal%20Banking&afdt=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=4151727740856308&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727740856310&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1227&frm=0&uio=-&cont=ab-default&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%253D%26query%3DOnline%2BPersonal%2BBanking%26afdToken%3DChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4%26pcsa%3Dfalse%26nb%3D0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3Df9bcb952ac981036%3AT%3D1727736043%3ART%3D1727736043%3AS%3DALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNzcmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Cit%20Online%20Savings%20Account%20Rates&afdt=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=9271727740860643&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727740860645&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1227&frm=0&uio=-&cont=ab-default&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%253D%26query%3DCit%2BOnline%2BSavings%2BAccount%2BRates%26afdToken%3DChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ%26pcsa%3Dfalse%26nb%3D0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=svryvr6p6bri&aqid=Cin7Zu_YCOuijuwP3-uAyQw&psid=3259787283&pbt=bs&adbx=442.0625&adby=373.359375&adbh=1203&adbw=379&adbah=401%2C401%2C401&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=23%7C0%7C-4782737%7C12%7C4785046&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=9s2srwsu99nc&aqid=Cin7Zu_YCOuijuwP3-uAyQw&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1203&adbw=379&adbah=401%2C401%2C401&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=23%7C0%7C-4782737%7C12%7C4785046&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=qpt5jqk9jmvt&aqid=DSn7ZuO7L_a7juwPr_uimQM&psid=3259787283&pbt=bs&adbx=442.0625&adby=373.359375&adbh=1381&adbw=379&adbah=550%2C401%2C430&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=18%7C0%7C-4783746%7C4%7C4784387&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=hocrzb5il20c&aqid=DSn7ZuO7L_a7juwPr_uimQM&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1381&adbw=379&adbah=550%2C401%2C430&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=18%7C0%7C-4783746%7C4%7C4784387&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3Df9bcb952ac981036%3AT%3D1727736043%3ART%3D1727736043%3AS%3DALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwODMmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Easy%20Credit%20Online&afdt=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=1421727740867155&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727740867157&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1227&frm=0&uio=-&cont=ab-default&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%253D%26query%3DEasy%2BCredit%2BOnline%26afdToken%3DChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ%26pcsa%3Dfalse%26nb%3D0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /svg/right_arrow.svg HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=ajf1s0f0ifll&aqid=FSn7ZoOGLOuijuwP3-uAyQw&psid=3259787283&pbt=bs&adbx=442.0625&adby=373.359375&adbh=1026&adbw=379&adbah=334%2C334%2C358&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=18%7C0%7C-4781439%7C5%7C4784418&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /svg/right_arrow.svg HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=lp9u7lxh6zn6&aqid=FSn7ZoOGLOuijuwP3-uAyQw&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1026&adbw=379&adbah=334%2C334%2C358&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=18%7C0%7C-4781439%7C5%7C4784418&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3Df9bcb952ac981036%3AT%3D1727736043%3ART%3D1727736043%3AS%3DALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwOTcmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Online%20Personal%20Banking&afdt=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717108&format=n3&ad=n3&nocache=6801727740881857&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727740881858&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1227&frm=0&uio=-&cont=ab-default&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%253D%26query%3DOnline%2BPersonal%2BBanking%26afdToken%3DChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4%26pcsa%3Dfalse%26nb%3D0%26nm%3D2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=fndbf5aaed6e&aqid=Iin7ZqOHO7W7juwPtdmd2AM&psid=3259787283&pbt=bs&adbx=442.0625&adby=373.359375&adbh=1232&adbw=379&adbah=401%2C401%2C430&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=15%7C0%7C-4783771%7C8%7C4784389&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=g2y9xf98rbdi&aqid=Iin7ZqOHO7W7juwPtdmd2AM&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1232&adbw=379&adbah=401%2C401%2C430&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=15%7C0%7C-4783771%7C8%7C4784389&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adsafe=low&adtest=off&psid=3259787283&channel=exp-0051%2Cauxa-control-1%2C44786252&client=dp-sedo80_3ph&r=m&sct=ID%3Df9bcb952ac981036%3AT%3D1727736043%3ART%3D1727736043%3AS%3DALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q&sc_status=6&hl=en&ivt=1&rpbu=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYxMDUmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&type=0&uiopt=false&swp=as-drid-2280784292183247&q=Cit%20Online%20Savings%20Account%20Rates&afdt=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=4981727740888451&num=0&output=afd_ads&domain_name=www.bankwir.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727740888452&u_w=1280&u_h=1024&biw=1263&bih=907&psw=1263&psh=1227&frm=0&uio=-&cont=ab-default&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=http%3A%2F%2Fwww.bankwir.com%2Fcaf%2F%3Fses%3DY3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%253D%26query%3DCit%2BOnline%2BSavings%2BAccount%2BRates%26afdToken%3DChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ%26pcsa%3Dfalse%26nb%3D0%26nm%3D3 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "16762785716741463394"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=6u5tcc8490pr&aqid=Kin7ZrzkLL2ixdwPyozRuAY&psid=3259787283&pbt=bs&adbx=442.0625&adby=373.359375&adbh=1410&adbw=379&adbah=550%2C430%2C430&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=23%7C0%7C2141%7C1367%7C4554&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-sedo80_3ph&output=uds_ads_only&zx=zguyri9jkluj&aqid=Kin7ZrzkLL2ixdwPyozRuAY&psid=3259787283&pbt=bv&adbx=442.0625&adby=373.359375&adbh=1410&adbw=379&adbah=550%2C430%2C430&adbn=master-1&eawp=partner-dp-sedo80_3ph&errv=678245571&csala=23%7C0%7C2141%7C1367%7C4554&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.bankwir.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: bankwir.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/bg/arrows-curved.png HTTP/1.1Host: img.sedoparking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.bankwir.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /search/tsc.php?ses=ogcVt54d5CL1QzrEa2Fnlup2YwhjFZWtx5ieJ-i5M1BAqpknHMrN-3ZcPQyhBkBhXvtw0sPQcrD3jocC371nD7s_gxJVCVbnDi15G1kxLffDCjC35IADRf6EiBwa1NMoNxPKUpiQM7BPe_s78qN4h25yQOVG_p59c5_09dlcDL7IJ5KN6iqBhGi5LxR1lW9aC8i8pirx54A39C3JeCyRGy6OHn_3BhwHNX8IkCHpzp7bAjWNoMEu4GyWwWwn0WdxBnuPdkE_SU7NbvaSWSDHGyDs9iVUWolf1nf3JqWcEH1EIbOZw5_3XW8PrzkTvc5CvkZVHnh8D05ZvQk33nE-BTgr46Mdvet9Qe_tXJHu4lVTrc-Vfw66UE8o1kC&cv=2 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.bankwir.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/bg/arrows-curved.png HTTP/1.1Host: img.sedoparking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /search/tsc.php?ses=ogcVt54d5CL1QzrEa2Fnlup2YwhjFZWtx5ieJ-i5M1BAqpknHMrN-3ZcPQyhBkBhXvtw0sPQcrD3jocC371nD7s_gxJVCVbnDi15G1kxLffDCjC35IADRf6EiBwa1NMoNxPKUpiQM7BPe_s78qN4h25yQOVG_p59c5_09dlcDL7IJ5KN6iqBhGi5LxR1lW9aC8i8pirx54A39C3JeCyRGy6OHn_3BhwHNX8IkCHpzp7bAjWNoMEu4GyWwWwn0WdxBnuPdkE_SU7NbvaSWSDHGyDs9iVUWolf1nf3JqWcEH1EIbOZw5_3XW8PrzkTvc5CvkZVHnh8D05ZvQk33nE-BTgr46Mdvet9Qe_tXJHu4lVTrc-Vfw66UE8o1kC&cv=2 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/logos/sedo_logo.png HTTP/1.1Host: img.sedoparking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.bankwir.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/logos/sedo_logo.png HTTP/1.1Host: img.sedoparking.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirect.php?id=22 HTTP/1.1Host: sedo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&nb=0 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /search/tsc.php?ses=ogcV14EreA4EoIZw_-LU2Q3lXkYfE3OnozKITGjNkP94gIIEhFnsW-etuHLK2aqXRE9BVN0UEIe6ycipmPUznSrFgIWiv0JTOxF7CZWlA3KyYQtP-X7oQadg0fHVdSLPOQ-L6b-5J5fASepmmXUHYW-VWf247ymnouT7pDq17b27lz92olfr-O_xbsN-QbuCTyk5jB5E4mDGn_aQpGtR9TofLtNfafVe60H-ztO89PoEV6V-sm8zifpBmp9arqfQGQLcjNjfZtsLt-8lACY-nt2WnoYdtwbIPGhVoClzq3Qm5GHKyKQe0d3NKpOkX3WXJ00KMNhX8UuvlGfZKXkRwh8SbowBPW4IEXz4EnJMGRhIohsEeXyZcfpRqIv&cv=2 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /search/tsc.php?ses=ogcV14EreA4EoIZw_-LU2Q3lXkYfE3OnozKITGjNkP94gIIEhFnsW-etuHLK2aqXRE9BVN0UEIe6ycipmPUznSrFgIWiv0JTOxF7CZWlA3KyYQtP-X7oQadg0fHVdSLPOQ-L6b-5J5fASepmmXUHYW-VWf247ymnouT7pDq17b27lz92olfr-O_xbsN-QbuCTyk5jB5E4mDGn_aQpGtR9TofLtNfafVe60H-ztO89PoEV6V-sm8zifpBmp9arqfQGQLcjNjfZtsLt-8lACY-nt2WnoYdtwbIPGhVoClzq3Qm5GHKyKQe0d3NKpOkX3WXJ00KMNhX8UuvlGfZKXkRwh8SbowBPW4IEXz4EnJMGRhIohsEeXyZcfpRqIv&cv=2 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /search/tsc.php?ses=ogc_6KaAP3qvZpm3n9bvdQ8nyOhbuX_2yo7FoIIXRa7JpqLjwWHLQZggjpOY7-ZV4LHVnH6RYuCSEsjYSY1V3OMvx4_tEeHVaQPg2iz3GYXOMI3rMkGzYncYnqC4Gctvus_-6Fo48nzl_m_4CBNeROlXFzQdDIP2d5Ch7oMEYWxfPFogzfV6Fm5L3zkEZUk06dJ0OloHtf92IuWxl_MmLZ0MucVwzhYEWh2Oaeegd_JAdutx7xq6XiU3aWP3VUTd65P2fsUWaFDWsB1VlXm_e8nmnaqx8v3o0UiDiGXM1PMBudspugRhfDImPUkQuj8qhZY7oFrUoLA6mcp5TrBv54G_hkuhwrM8MXNukMmKJmWCPxBNDexAXtQlOLx&cv=2 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /search/tsc.php?ses=ogc_6KaAP3qvZpm3n9bvdQ8nyOhbuX_2yo7FoIIXRa7JpqLjwWHLQZggjpOY7-ZV4LHVnH6RYuCSEsjYSY1V3OMvx4_tEeHVaQPg2iz3GYXOMI3rMkGzYncYnqC4Gctvus_-6Fo48nzl_m_4CBNeROlXFzQdDIP2d5Ch7oMEYWxfPFogzfV6Fm5L3zkEZUk06dJ0OloHtf92IuWxl_MmLZ0MucVwzhYEWh2Oaeegd_JAdutx7xq6XiU3aWP3VUTd65P2fsUWaFDWsB1VlXm_e8nmnaqx8v3o0UiDiGXM1PMBudspugRhfDImPUkQuj8qhZY7oFrUoLA6mcp5TrBv54G_hkuhwrM8MXNukMmKJmWCPxBNDexAXtQlOLx&cv=2 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Easy+Credit+Online&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ&pcsa=false&nb=0 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Easy+Credit+Online&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ&pcsa=false&nb=0 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /search/tsc.php?ses=ogcCEgzSeontOgAbrSzHQVODwWyiFd4Smw4NzjHCVuKwwf_Zh7smDYw8XcvF9mEwvIWDdMpWAhDhSCRGbwXXCwb7M94EIr_Y6XNgLEPfbup_J4Ss8zT-lIgI2E1lTQvRqm4D_wHpAD6GCKXnzRLM6h-4XAF_YoB7VMC7Qom8P5eH2cRNIWJys3VzkYjG_PkO-YTn-zuMeAJzDzmh8Vaj_oduMSL0HNXnpScEHSqfUof9WL9FX52GfWZ8EyYqGYtNCgOAY2PVNL6BWyP9SwiMmIxd6bpOZHKALHYm_rGRZTdJzo75bx6Mqs8nv5nNP8HbkZIyHWpLGDGeIaWw9WrCtgsNKgvJgi-8OMtQHqw9GFYlMdCq-lCrC4fiq9n&cv=2 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Easy+Credit+Online&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmsBlLqpj1eTZ0bYYlbd4QSUsy-mM9hIyMZHUHYOZIY1UvVUb2Tw1Y_z37v1uz0-0RvNyY0rRXBjmG9NHtHEhAjED3nLQuh_1qANZh7d-FsYCxYMcIDk6OV-mhBzUy3d1m-or9ZPeYX-NJt0gQ&pcsa=false&nb=0Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /search/tsc.php?ses=ogcCEgzSeontOgAbrSzHQVODwWyiFd4Smw4NzjHCVuKwwf_Zh7smDYw8XcvF9mEwvIWDdMpWAhDhSCRGbwXXCwb7M94EIr_Y6XNgLEPfbup_J4Ss8zT-lIgI2E1lTQvRqm4D_wHpAD6GCKXnzRLM6h-4XAF_YoB7VMC7Qom8P5eH2cRNIWJys3VzkYjG_PkO-YTn-zuMeAJzDzmh8Vaj_oduMSL0HNXnpScEHSqfUof9WL9FX52GfWZ8EyYqGYtNCgOAY2PVNL6BWyP9SwiMmIxd6bpOZHKALHYm_rGRZTdJzo75bx6Mqs8nv5nNP8HbkZIyHWpLGDGeIaWw9WrCtgsNKgvJgi-8OMtQHqw9GFYlMdCq-lCrC4fiq9n&cv=2 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&nb=0&nm=2 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /search/tsc.php?ses=ogcOvUmN52CO_eKsS5JZzE0wynRpt6QbiS6sAHuO_6msznjeTMydQ93ointIivefiiMkkBN_NZP1WxDDsxt58gmUI3k7v-SyUMSMr2tGGCjigQ7KWxayEJJgFOj_5eggQILa25IYaBcIfHpeOUsJz8ZWbj9Isa1HKZefUYxR9gqczds4rqBm0yCZ7J1Jf6c7wbfB7U7yeSJmHNLobTZ93Kck3FGEtHrIs6Hs0zIgy_lpTBM6wGPDV0TmKYKguw-dhwwuXdAXisOicYz3810tShNiPEEjuJnuYzeKyjojdjxmg6E49xGGmDuUa9wzlLggqxKPZ6vddXV_a_t5qGbkpK3crZZGymFtcClYf7VUApPj_TtA9upvttLb_lb&cv=2 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Online+Personal+Banking&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpj83GkSv_qTfJmr0vMvsF4lRX1v5EiQog9_VBnAHX1ESiBnqrLrSb-JwgIUhknaXdPffRbUD2d0MAqST59WM4PpjRJIetDh2bOvEKEy3mxJMcFw4xdNNcOr2ScuZn8OOikXeeBoLaDs4&pcsa=false&nb=0&nm=2Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /search/tsc.php?ses=ogcOvUmN52CO_eKsS5JZzE0wynRpt6QbiS6sAHuO_6msznjeTMydQ93ointIivefiiMkkBN_NZP1WxDDsxt58gmUI3k7v-SyUMSMr2tGGCjigQ7KWxayEJJgFOj_5eggQILa25IYaBcIfHpeOUsJz8ZWbj9Isa1HKZefUYxR9gqczds4rqBm0yCZ7J1Jf6c7wbfB7U7yeSJmHNLobTZ93Kck3FGEtHrIs6Hs0zIgy_lpTBM6wGPDV0TmKYKguw-dhwwuXdAXisOicYz3810tShNiPEEjuJnuYzeKyjojdjxmg6E49xGGmDuUa9wzlLggqxKPZ6vddXV_a_t5qGbkpK3crZZGymFtcClYf7VUApPj_TtA9upvttLb_lb&cv=2 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0&nm=3 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0&nm=3 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /search/tsc.php?ses=ogcQkbQpzTES3IebH-jL7XHjZBaJcAFoaSa-avJH62SFZ15x2TZWk5GCiUOcmmFAix2mUIhlcIacIOBT4ovgKwAARzX-W2gTMrxEGA62NTxSdgOb30zCDj2huDe6QDewz05_n2ib87RzA7Hsxwue3b9rz7vpxsDSy3FnfxvKgaPoEPsS9-LHgsEn40EKANf-1ToBovE_SHVODsfDg4wbme94iYHhL3DRwEZLpVgxIXa0AJd0YVF6ofq-nPg3OmTUQ9wHwzYgefz5yDvfHIiyADevu-zfd3DlJ_-rlaeDJ24haWRQ7ORilmszsxqyBu4IZt6zsPA7cZAdO1JXAYHQQONrYWiYTo3vGT8lqK-0a5gkbJPdGPuDLXlIXfg&cv=2 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.bankwir.com/caf/?ses=Y3JlPTE3Mjc3MzYwNDAmdGNpZD13d3cuYmFua3dpci5jb202NmZiMjhlOGJlZDM3NC44ODYxNjU1OSZ0YXNrPXNlYXJjaCZkb21haW49YmFua3dpci5jb20mYV9pZD0zJnNlc3Npb249YnFONXNYN3ZoZnNhSUFXNFBPeEo%3D&query=Cit+Online+Savings+Account+Rates&afdToken=ChMI8IWNqd7riAMVK4v9Bx0AtylkEmwBlLqpjzZf00jJRYvUGJ6wvGGsT2iU7IbVe168rFuvCx3ClVd3qSBXnf4CLASbz7kwedvhMecrsczNl32swrUMcpftMdXlGiL-m7emDq6on4nnz5HtJwqgpuSRwRpUHuJ8v97FWdnG2CacayQ&pcsa=false&nb=0&nm=3Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q
Source: global traffic	HTTP traffic detected: GET /search/tsc.php?ses=ogcQkbQpzTES3IebH-jL7XHjZBaJcAFoaSa-avJH62SFZ15x2TZWk5GCiUOcmmFAix2mUIhlcIacIOBT4ovgKwAARzX-W2gTMrxEGA62NTxSdgOb30zCDj2huDe6QDewz05_n2ib87RzA7Hsxwue3b9rz7vpxsDSy3FnfxvKgaPoEPsS9-LHgsEn40EKANf-1ToBovE_SHVODsfDg4wbme94iYHhL3DRwEZLpVgxIXa0AJd0YVF6ofq-nPg3OmTUQ9wHwzYgefz5yDvfHIiyADevu-zfd3DlJ_-rlaeDJ24haWRQ7ORilmszsxqyBu4IZt6zsPA7cZAdO1JXAYHQQONrYWiYTo3vGT8lqK-0a5gkbJPdGPuDLXlIXfg&cv=2 HTTP/1.1Host: www.bankwir.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=f9bcb952ac981036:T=1727736043:RT=1727736043:S=ALNI_MYzaclFj_jU8Gw2EbZxXIAVqtL37Q

Source: global traffic	DNS traffic detected: DNS query: bankwir.com
Source: global traffic	DNS traffic detected: DNS query: www.bankwir.com
Source: global traffic	DNS traffic detected: DNS query: img.sedoparking.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: www.sedo.com
Source: global traffic	DNS traffic detected: DNS query: sedo.com
Source: global traffic	DNS traffic detected: DNS query: cdn.sedo.com
Source: global traffic	DNS traffic detected: DNS query: widget.trustpilot.com
Source: global traffic	DNS traffic detected: DNS query: app.usercentrics.eu
Source: global traffic	DNS traffic detected: DNS query: api.usercentrics.eu
Source: global traffic	DNS traffic detected: DNS query: consent-api.service.consent.usercentrics.eu
Source: global traffic	DNS traffic detected: DNS query: uct.service.usercentrics.eu

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://bankwir.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Windows Analysis Report
http://bankwir.com/