Edit tour

Windows Analysis Report
http://infoguard-switzerland.com/

Overview

General Information

Sample URL:	http://infoguard-switzerland.com/
Analysis ID:	1523043
Tags:	urlscan
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3880 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4988 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2380,i,13374029525997523503,1954096389479087345,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://infoguard-switzerland.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1Host: api.aws.parking.godaddy.comConnection: keep-aliveContent-Length: 940sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://infoguard-switzerland.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_70.2.dr	String found in binary or memory: http://infoguard-switzerland.com/
Source: chromecache_81.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmFCG218HAl-o_l1lf9GCqdG2OfV
Source: chromecache_72.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmOuf80slWih38Hb6Azcy4sDT7nC
Source: chromecache_72.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmXIWg_EKVWOKnr37RVn57c0Ztdq
Source: chromecache_81.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmbdDXKdhP0uAUKaBk9aJPt27eo4
Source: chromecache_72.2.dr	String found in binary or memory: https://afs.googleusercontent.com/svg/left_chevron_icon.svg?c=%23757575
Source: chromecache_120.2.dr	String found in binary or memory: https://afs.googleusercontent.com/svg/right_arrow.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://afs.googleusercontent.com/svg/right_chevron_icon.svg?c=%23757575
Source: chromecache_84.2.dr, chromecache_137.2.dr, chromecache_143.2.dr, chromecache_92.2.dr	String found in binary or memory: https://btloader.com/tag?o=5097926782615552&upapi=true
Source: chromecache_69.2.dr, chromecache_133.2.dr, chromecache_94.2.dr, chromecache_111.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_84.2.dr, chromecache_137.2.dr, chromecache_143.2.dr, chromecache_92.2.dr	String found in binary or memory: https://img1.wsimg.com/parking-lander/static/css/main.ef90a627.css
Source: chromecache_84.2.dr, chromecache_137.2.dr, chromecache_143.2.dr, chromecache_92.2.dr	String found in binary or memory: https://img1.wsimg.com/parking-lander/static/js/main.36e19f48.js
Source: chromecache_69.2.dr, chromecache_133.2.dr, chromecache_94.2.dr, chromecache_111.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_69.2.dr, chromecache_133.2.dr, chromecache_94.2.dr, chromecache_111.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_69.2.dr, chromecache_133.2.dr, chromecache_94.2.dr, chromecache_111.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKcQ72j00.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKcg72j00.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKcw72j00.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKew72j00.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKfA72j00.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKfw72.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3js2yNL4U.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jsGyN.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jtGyNL4U.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jvGyNL4U.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jvWyNL4U.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jvmyNL4U.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCxCvjs2yNL4U.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCxCvjsGyN.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCxCvjtGyNL4U.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCxCvjvGyNL4U.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCxCvjvWyNL4U.woff2)
Source: chromecache_119.2.dr	String found in binary or memory: https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCxCvjvmyNL4U.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://www.godaddy.com
Source: chromecache_135.2.dr, chromecache_113.2.dr	String found in binary or memory: https://www.godaddy.com/domainsearch/find?key=parkweb
Source: chromecache_84.2.dr, chromecache_137.2.dr, chromecache_143.2.dr, chromecache_92.2.dr	String found in binary or memory: https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true
Source: chromecache_72.2.dr	String found in binary or memory: https://www.google.com/images/afs/snowman.png
Source: chromecache_69.2.dr, chromecache_133.2.dr, chromecache_94.2.dr, chromecache_111.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_120.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwi0-o713-uIAxUIU5EFHYPBF3YYABACGgJscg
Source: chromecache_72.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiNmcXu3-uIAxVJGKIDHSdtANQYABAIGgJsZQ
Source: chromecache_72.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiNmcXu3-uIAxVJGKIDHSdtANQYABAJGgJsZQ
Source: chromecache_72.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiNmcXu3-uIAxVJGKIDHSdtANQYABAQGgJsZQ
Source: chromecache_81.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwj-0bPy3-uIAxXfUJEFHVqwEBMYABAAGgJscg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwj-0bPy3-uIAxXfUJEFHVqwEBMYABABGgJscg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwj-0bPy3-uIAxXfUJEFHVqwEBMYABACGgJscg
Source: chromecache_69.2.dr, chromecache_133.2.dr, chromecache_94.2.dr, chromecache_111.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_81.2.dr	String found in binary or memory: https://www.hypervsn.com/advertising/
Source: chromecache_81.2.dr	String found in binary or memory: https://www.optisigns.com/
Source: chromecache_146.2.dr, chromecache_104.2.dr	String found in binary or memory: https://www.trustpilot.com/evaluate/embed/www.godaddy.com
Source: chromecache_146.2.dr, chromecache_104.2.dr	String found in binary or memory: https://www.trustpilot.com/evaluate/www.godaddy.com
Source: chromecache_146.2.dr, chromecache_104.2.dr	String found in binary or memory: https://www.trustpilot.com/review/www.godaddy.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49877 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@23/125@50/19

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2380,i,13374029525997523503,1954096389479087345,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://infoguard-switzerland.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2380,i,13374029525997523503,1954096389479087345,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://syndicatedsearch.goog	0%	URL Reputation	safe
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
gddomainparking.com	100.20.12.218	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
syndicatedsearch.goog	142.250.185.238	true	false	unknown
ad.doubleclick.net	142.250.184.230	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
btloader.com	104.22.75.216	true	false	unknown
widget.trustpilot.com	52.222.236.94	true	false	unknown
googlehosted.l.googleusercontent.com	216.58.206.65	true	false	unknown
infoguard-switzerland.com	3.33.130.190	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
ad-delivery.net	104.26.3.70	true	false	unknown
img1.wsimg.com	unknown	unknown	false	unknown
afs.googleusercontent.com	unknown	unknown	false	unknown
api.aws.parking.godaddy.com	unknown	unknown	false	unknown
www.godaddy.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2	false		unknown
https://api.aws.parking.godaddy.com/v1/parking/landers/infoguard-switzerland.com?trafficTarget=gd&abp=1&gdabp=true	false		unknown
https://widget.trustpilot.com/fonts/ubuntu.css	false		unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	false		unknown
https://widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander&referrer=http%3A%2F%2Finfoguard-switzerland.com%2F&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936	false		unknown
https://widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DCustom%2BFolders%2Bwith%2BPockets%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936	false		unknown
https://afs.googleusercontent.com/svg/left_chevron_icon.svg?c=%23757575	false		unknown
https://afs.googleusercontent.com/svg/right_arrow.svg	false		unknown
https://ad-delivery.net/px.gif?ch=2	false		unknown
https://widget.trustpilot.com/stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DCustom%2BFolders%2Bwith%2BPockets%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936	false		unknown
https://afs.googleusercontent.com/svg/right_chevron_icon.svg?c=%23757575	false		unknown
https://www.google.com/images/afs/snowman.png	false		unknown
http://infoguard-switzerland.com/	false		unknown
https://www.godaddy.com/domainsearch/find?key=parkweb&utm_source=godaddy&utm_medium=parkedpages&utm_campaign=x_dom-broker_parkedpages_x_x_invest_b_001&tmskey=dpp_dbs&domainToCheck=infoguard-switzerland.com&isc=GPPTCOM&itc=parkedpage_landers	false		unknown
https://syndicatedsearch.goog/afs/ads/i/iframe.html	false		unknown
https://ad-delivery.net/px.gif?ch=1&e=0.4732434893340589	false		unknown
https://btloader.com/tag?o=5097926782615552&upapi=true	false		unknown
https://api.aws.parking.godaddy.com/v1/parkingEvents?abp=1&gdabp=true	false		unknown
https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/main.js	false		unknown
https://infoguard-switzerland.com/lander	false		unknown
https://infoguard-switzerland.com/lander?query=Custom+Folders+with+Pockets&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1	false		unknown
https://widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DService%2BLabels%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D2&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936	false		unknown
https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919	false		unknown
https://widget.trustpilot.com/trustbox-data/5419b637fa0340045cd0c936?businessUnitId=483fd2b90000640005029919&locale=en-US	false		unknown
https://infoguard-switzerland.com/lander?query=Display+Board+Software&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1	false		unknown
https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=2	false		unknown
https://widget.trustpilot.com/stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DService%2BLabels%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D2&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936	false		unknown
https://widget.trustpilot.com/stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander&referrer=http%3A%2F%2Finfoguard-switzerland.com%2F&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKfw72.woff2	false		unknown
https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250	false		unknown
https://widget.trustpilot.com/stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DDisplay%2BBoard%2BSoftware%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936	false		unknown
http://infoguard-switzerland.com/lander	false		unknown
https://widget.trustpilot.com/stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DDisplay%2BBoard%2BSoftware%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936	false		unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0	false	URL Reputation: safe	unknown
https://ad-delivery.net/px.gif?ch=1&e=0.49639305765025	false		unknown
https://ad-delivery.net/px.gif?ch=1&e=0.10775175719051644	false		unknown
https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js	false		unknown
https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jsGyN.woff2	false		unknown
https://ad-delivery.net/px.gif?ch=1&e=0.18254414261951002	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3js2yNL4U.woff2)	chromecache_119.2.dr	false		unknown
https://syndicatedsearch.goog	chromecache_69.2.dr, chromecache_133.2.dr, chromecache_94.2.dr, chromecache_111.2.dr	false	URL Reputation: safe	unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKfA72j00.woff2)	chromecache_119.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCxCvjvGyNL4U.woff2)	chromecache_119.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmOuf80slWih38Hb6Azcy4sDT7nC	chromecache_72.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jvWyNL4U.woff2)	chromecache_119.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCxCvjsGyN.woff2)	chromecache_119.2.dr	false		unknown
https://www.godaddy.com/domainsearch/find?key=parkweb	chromecache_135.2.dr, chromecache_113.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCxCvjtGyNL4U.woff2)	chromecache_119.2.dr	false		unknown
https://www.godaddy.com	chromecache_104.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmbdDXKdhP0uAUKaBk9aJPt27eo4	chromecache_81.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jsGyN.woff2)	chromecache_119.2.dr	false		unknown
https://www.trustpilot.com/evaluate/embed/www.godaddy.com	chromecache_146.2.dr, chromecache_104.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCxCvjs2yNL4U.woff2)	chromecache_119.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKcQ72j00.woff2)	chromecache_119.2.dr	false		unknown
https://www.trustpilot.com/review/www.godaddy.com	chromecache_146.2.dr, chromecache_104.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKcw72j00.woff2)	chromecache_119.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKew72j00.woff2)	chromecache_119.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCxCvjvmyNL4U.woff2)	chromecache_119.2.dr	false		unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_69.2.dr, chromecache_133.2.dr, chromecache_94.2.dr, chromecache_111.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmXIWg_EKVWOKnr37RVn57c0Ztdq	chromecache_72.2.dr	false		unknown
https://adssettings.google.com/whythisad?source=afs_3p&reasons=AXRXrqmFCG218HAl-o_l1lf9GCqdG2OfV	chromecache_81.2.dr	false		unknown
https://img1.wsimg.com/parking-lander/static/js/main.36e19f48.js	chromecache_84.2.dr, chromecache_137.2.dr, chromecache_143.2.dr, chromecache_92.2.dr	false		unknown
https://www.trustpilot.com/evaluate/www.godaddy.com	chromecache_146.2.dr, chromecache_104.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKfw72.woff2)	chromecache_119.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCxCvjvWyNL4U.woff2)	chromecache_119.2.dr	false		unknown
https://www.hypervsn.com/advertising/	chromecache_81.2.dr	false		unknown
https://www.optisigns.com/	chromecache_81.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jvGyNL4U.woff2)	chromecache_119.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKcg72j00.woff2)	chromecache_119.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jvmyNL4U.woff2)	chromecache_119.2.dr	false		unknown
https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jtGyNL4U.woff2)	chromecache_119.2.dr	false		unknown
https://img1.wsimg.com/parking-lander/static/css/main.ef90a627.css	chromecache_84.2.dr, chromecache_137.2.dr, chromecache_143.2.dr, chromecache_92.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.26.3.70	ad-delivery.net	United States	13335	CLOUDFLARENETUS	false
52.222.236.107	unknown	United States	16509	AMAZON-02US	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
142.250.184.225	unknown	United States	15169	GOOGLEUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
104.22.75.216	btloader.com	United States	13335	CLOUDFLARENETUS	false
100.20.12.218	gddomainparking.com	United States	16509	AMAZON-02US	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
142.250.184.230	ad.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.198	unknown	United States	15169	GOOGLEUS	false
216.58.206.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.222.236.94	widget.trustpilot.com	United States	16509	AMAZON-02US	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false
3.33.130.190	infoguard-switzerland.com	United States	8987	AMAZONEXPANSIONGB	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523043
Start date and time:	2024-10-01 00:45:49 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://infoguard-switzerland.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@23/125@50/19
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.godaddy.com/domainsearch/find?key=parkweb&utm_source=godaddy&utm_medium=parkedpages&utm_campaign=x_dom-broker_parkedpages_x_x_invest_b_001&tmskey=dpp_dbs&domainToCheck=infoguard-switzerland.com&isc=GPPTCOM&itc=parkedpage_landers Browse: https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=2 Browse: https://infoguard-switzerland.com/lander?query=Display+Board+Software&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1 Browse: https://infoguard-switzerland.com/lander?query=Custom+Folders+with+Pockets&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.185.238, 74.125.206.84, 34.104.35.123, 20.114.59.183, 192.229.221.95, 20.3.187.198, 199.232.210.172, 23.38.98.114, 23.38.98.78, 13.85.23.206, 142.250.74.194, 216.58.206.34, 52.165.164.15, 23.201.246.20, 142.250.186.46, 172.217.18.14, 216.58.206.78, 142.250.186.142, 93.184.221.240, 172.217.18.110, 172.217.16.206, 142.250.181.238, 142.250.185.131, 142.250.185.65, 172.217.18.1, 199.232.214.172
Excluded domains from analysis (whitelisted): e40258.g.akamaiedge.net, slscr.update.microsoft.com, e6001.dscx.akamaiedge.net, partner.googleadservices.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, global-wildcard.wsimg.com.sni-only.edgekey.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, encrypted-tbn0.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, encrypted-tbn3.gstatic.com, encrypted-tbn2.gstatic.com, encrypted-tbn1.gstatic.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, wildcard-ipv6.godaddy.com.edgekey.net, edgedl.me.gvt1.com, tpc.googlesyndication.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://infoguard-switzerland.com/

Input	Output
URL: https://infoguard-switzerland.com/lander Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get This Domain", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.godaddy.com/domainsearch/find?key=parkweb&utm_source=godaddy&utm_medium=parkedpages&utm_campaign=x_dom-broker_parkedpages_x_x_invest_b_001&tmskey=dpp_dbs&domainToCheck=infoguard-switzerland.com&isc=GPPTCOM&itc=parkedpage_landers Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcs Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":true, "trigger_text":"Visit Website", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://infoguard-switzerland.com/lander Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get This Domain", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcs Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":true, "trigger_text":"Visit Website", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcs Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":true, "trigger_text":"Visit Website", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://infoguard-switzerland.com/lander?query=Display+Board+Software&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1 Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get This Domain", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcs Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":true, "trigger_text":"Visit Website", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://infoguard-switzerland.com/lander?query=Custom+Folders+with+Pockets&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv8 Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":true, "trigger_text":"Get This Domain", "prominent_button_name":"Visit Website", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://infoguard-switzerland.com/lander?query=Display+Board+Software&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1 Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":true, "trigger_text":"Get This Domain", "prominent_button_name":"Visit Website", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://infoguard-switzerland.com/lander?query=Custom+Folders+with+Pockets&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv8 Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":true, "trigger_text":"Get This Domain", "prominent_button_name":"Visit Website", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 24134
Category:	dropped
Size (bytes):	7514
Entropy (8bit):	7.972817339817039
Encrypted:	false
SSDEEP:	192:xu+tUmw+Xl4veocBfqyrPEuB+59F1oeIjjY:cjcKvPcBfqyrD+b1
MD5:	149F8B397FE711244EF204823190CB86
SHA1:	1AE7A6222C28FD5D32A89B6A2C9BBC72FD6F647A
SHA-256:	8D54148B53158E3D06FE5285AFF2C3E189390FE355B2EE400BAF8F1F5A0A819A
SHA-512:	B6CA495E1A0A55D00854F467BF88D87D86C149BFE285CE490F9BEFEA0D0EEA06B868F8B02880E30D2EFD779980554862F38DEF6992B2018701550AD90D13E1E2
Malicious:	false
Reputation:	low
Preview:	...........<Mo.Hv...2..q...m..o...]...gv.1..X...".d.n...bo.$@..r..,..{.....a~.$../..bQ.l..,..i.-.>_.z........2.!gY.J.d$...$r9....._.B<.Dy...n.!...l...K..v[=....2/......AW...'.,Qe.:.n]....u..Y.:.Q.f.5bi..gq...g._u>s<..f1....o...:}.....^:..X. .S.q......A./...0J......E..V.P....zy.O..a......j.3.....F.$O...a.O..~B.+~...^..0.....i/...$.0o..m.<gC..O....1.4..y6.9.s.q.....C`...+.. .?<y...:z...7.^.Nw.?..~..W.\|w\|....K..<.p.6....M..uw........C........`.7.ot..&...s9#..%Y.dA.QB5..B.t.g\.....).!.`...i9.y4H........I.\...e.J.8.%..y.m7.os.U.G..Ja....l..hw....mx.'y.3$.X+a..jg....)..8.G..(...;D.j.%..x..e.M..V...;.> .0.8.....g.p.....+.tn..~J?r..+.R..."....SL.\|...Y.....e.....f9....I..CRB.(.i..8.h.%..aX..#{=.n(..S...L.n.kV...1'.M.....^#OG.T...l.p...AZ....<V=A7....yB ....3.q......f..q<..c8.....A..H.v..J.^aR...b..F...z....@...<.z...LC.. .T..gnA.f..0.Q...iVr7.H....r]l...d..i.$@. [.jM..r.. @.nT6(h~Cs....8....A..i.A..JN..h..p.)...d(k.l.0..M}Z.}.gt..1.I.^...

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	114
Entropy (8bit):	4.802925647778009
Encrypted:	false
SSDEEP:	3:PouVIZx/XMn30EEBuvFfD0OkADYyT0NV9kBbZWM:hax/XW3/p5mmYyT0NVuB9d
MD5:	E89F75F918DBDCEE28604D4E09DD71D7
SHA1:	F9D9055E9878723A12063B47D4A1A5F58C3EB1E9
SHA-256:	6DC9C7FC93BB488BB0520A6C780A8D3C0FB5486A4711ACA49B4C53FAC7393023
SHA-512:	8DF0AB2E3679B64A6174DEFF4259AE5680F88E3AE307E0EA2DFFF88EC4BA14F3477C9FE3A5AA5DA3A8E857601170A5108ED75F6D6975958AC7A314E4A336AED0
Malicious:	false
Reputation:	low
URL:	http://infoguard-switzerland.com/
Preview:	<!DOCTYPE html><html><head><script>window.onload=function(){window.location.href="/lander"}</script></head></html>

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 140x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	5120
Entropy (8bit):	7.960851304764892
Encrypted:	false
SSDEEP:	96:DPdJJiHHcOLRbzd2T6pWTPuIg9UXBhCxrMtelC3vOnDKET5VtIQLxGY0Fl:hJZOLJx2TvT2IgOwrEelCmnn7Lxa
MD5:	1983C9593E667E4F4D510C1749DC7B9C
SHA1:	7238DEA7C42B054906736D47E51750F9EDD25222
SHA-256:	ECBB8551577EA33181F1B20CBB89A1C14FDA32A980D360E167E1CFB045DDCB12
SHA-512:	6D57DCBC18EC5EB288C69013F432CFBE32AA24B93ADAA5E8C08255B987AEF2592A92D80088FAC44B846403FC0A7BF4904E296875DC304A8A9F7E1715D2C17EB5
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....K.......>i(.E."!..^.@....e../..].{......x1../;>.~.=.?Z.b...........3.;.....?A...h...I\......?&.... v....?.?.{i........"....\|6......S...B......>.'.........=.............\|..1...3./.../.?e.....x~.Y..XTR.......r.J......Z.ld..m.t;.m..o.YN..........yY.j.V..v.g_...(.......P..gB.... z\|.`#..B..bo.=...0......0.C..P.p.N..c;.}.tY...{..A&6.pXl.q51.W.............zq...l=~Fb.W^..../.wk\.....T.s.F....O.s.....;H....B....e.;....%..2#....99.]..2)..........&.\|..+..<..V..M...&]%}......2.i.jUY.z.m6.V.@G>..w..x.>m,...5./.".Z.C..5T.U..)h=..=....,.........]kTg.mY)?.H.Y_J...R1F...R.p..<.R..S.n..>_... ........x..B...k.B.T).y.f.........._.}...r..Jc.>B....O......"...c]....)n...........h$9.2...+&H...temG$...6n...b.&...5...ww.._...}.7..4...r.!1;.5.>.\|f....=...C.....I..U...ni\!.......%_..{M....O=.....T.._...].J=~....'.)T.c......oj?.:-hK...Q.~.Ow.Z.PvCh..u..U.~..=8v.c....-^.y.^5V....).S....*H.d..E.,<.{Db.....T..<....m<&w...vg....O...&7X'...k...

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 140x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	3228
Entropy (8bit):	7.936496398314537
Encrypted:	false
SSDEEP:	96:o/UFJ/SLk26X/hBwYCqixarN9xRUNuauocD:o/0VSLQvhXCqixa59PMuXom
MD5:	D9150675027977347F26B216D43FE7E3
SHA1:	66C1545793952B7E3BD5574EAC4BE5D99FF32E71
SHA-256:	C5BE8FA5D2A5284AFC8305394E12ACD68DE18FFBB3B4DB54AE62A96B10574512
SHA-512:	18A40FC7C831661C48E8A86B60409844ABCB66A0756D487784927F59659274A8A3422D973BC336C0DF04D151E68CD5253D9492054108C3157445EB6241697D1A
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....:.......>M .D..!.)=.(...e.)._W.E.q..<\|.0.\|>i:%....{..n=).p9.D..^.;a.j.{............._`..JOb_........R..3.u.5=..@a}.2.....g.....K..3...2..<Y..L'...z...........#1....k......J.qY..g.......p}.{\|3>.e.t...v..k^.=....L..?..M..)5..u.."%.d..\|.#...+=....x(...E=F.D.#.&....0......_..I.xNzm..F(...n{.j&.d......C.w.0..F..nb.@....uN.-....7..........:.4.Q.^..@>...2.h..t$....Z.......JQ!.q5.?m.h\.W........,.'.PC..$.m...3C..=`.(z..#J..z?.+........$..A2I`...:........z....i.......O8..~......-......M.GF.uY.Jz#....N...x3.g...R.+C..yo.\/.........>.C.y.l..yu.._.<..D.n.S.&.W..!....z..5e==..m.`;P$.T."...d..p...oeT....s2%.[....."c. ..I.c....(.8...".L........M^.......P..9f...b.-..e....A.n..JnM.G.O.....U....w...@B.A.SN.8.F.....!w...:,.S.......5:-R.L..=..I.c.U..6O...=....."....h&@..,i..N..a..E.T.,..,@.p:`.3Q..2.&...B...........i.W.u... r.t.........jK.kj..>.2M...I.c'...e..!..6.......\.."..x..z.CB......55..=*.../......j.&.........

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1030
Entropy (8bit):	5.065659262849548
Encrypted:	false
SSDEEP:	24:Ya1jyVeku1jyVekxJ6VjLU6OemW/n6K+IPs:Ya1mV41mV+iW/n6K+qs
MD5:	FC4BD7C7EE62CE9303D57A034BA1C344
SHA1:	4BE9AFDE026F2539FDD14992E89E292C8EA3D2DF
SHA-256:	4C7CE2D2CA11A4E6D6564ECB174C37371A9F101A8648CCC981010DF749974B80
SHA-512:	21D722C81630FF1296ACD6B091753BE1BE0E62D5631358AE1D0092589B90BC7317B8FD6938079DDF00EB8D5E125D50BDA7B9985E03C89B8DF6B2FB947328EFBE
Malicious:	false
Reputation:	low
Preview:	{"businessUnit":{"stars":4.5,"trustScore":4.6,"displayName":"GoDaddy","numberOfReviews":{"total":107921,"oneStar":8781,"twoStars":1267,"threeStars":1745,"fourStars":5157,"fiveStars":90971},"websiteUrl":"https://www.godaddy.com","identifyingName":"www.godaddy.com"},"businessEntity":{"stars":4.5,"trustScore":4.6,"displayName":"GoDaddy","numberOfReviews":{"total":107921,"oneStar":8781,"twoStars":1267,"threeStars":1745,"fourStars":5157,"fiveStars":90971},"websiteUrl":"https://www.godaddy.com","identifyingName":"www.godaddy.com"},"reviews":null,"links":{"profileUrl":"https://www.trustpilot.com/review/www.godaddy.com","evaluateUrl":"https://www.trustpilot.com/evaluate/www.godaddy.com","evaluateEmbedUrl":"https://www.trustpilot.com/evaluate/embed/www.godaddy.com","consumerWebPageUrl":null},"starsString":"Excellent","translations":{"main":"<span class='score'>[RATED]</span> <span class='text'>out of 5</span>","firstreviewer":"Be the first to review us on"},"settings":{"customStylesAllowed":tru

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2210
Entropy (8bit):	7.90006091497654
Encrypted:	false
SSDEEP:	48:BaqmlS3IsRlSL7DyG0PwVN5Tvt9QRfLAnk5s4Muz/RYH/eULd3KZ44x:BZxo7Dv0YTvaTAAoW/JULdt+
MD5:	F3FE66FB2560C576B0DE1FFA4162EA64
SHA1:	1D637ADED0B38AB703D9C37D37E9FD4B912A9AB2
SHA-256:	1AD419A4B91532B1635789149C6FE96BF31710540F22D705848BC66783234CBA
SHA-512:	C2C7AA0CC1664C0737A60EFA33C6E2206D0AACB8290ADCFF70D5B0519B5447CD245664A7F620D4681C0781A340CE58EB64E584E6E0D3F220FEABC560C04B4335
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../.......m#...?.....H..yN i.....M...m.7T.. .......x....(..".4d"Hl........H.q.Z.p...,....p..o...m..l.......{..]...C..+...&.@h w\q..q......3..L..1.....$)....Y.]........Z".jQ...."...qX. .j.l.v.....5...c.b~np[.....?...B....m..y.A.......R.0.e.Q3......L....L...)hT.G\..hj#bbb"+..a....b...@.v`....#&&&.g.Wi.....P.....FH.1.O(.......11IUP...g".9...S.;........".EN...[.P41...("2...d..i...S."...D.....O..h.....!NKS."K.&"..F1J1P..E..+1.........i_...(<..~..Yq.D....5..Hi.p..<X.4..R...K.z../..J.+.1Y"J.........b.,H.nTj.X.$.o..../.5..\..p.{k.}...............^Nzq....N............l...x.IK^.....y..(E.9.fz..'3..H}Y....GkX,K.+.\|".^.N.7.....2.RxI.....#..,..h.c.a...R..._\.M"%z4f..D.(.5b........dT.4Q>r.kM'.j..PJ.'&....*[B..Z........."Y&@..P\"..L.\..M......TI.2..y>4..-.3...M.:oV.}.~.Qq..+_..{.v..%.=...\l...?\|w..j8...<i.)..\. . JVz...m.^.1b.l.D.1.Q.q.G.+...i2.~....i(.O.Kq....[.w....!.u).L.(.i...-./W.#..ib..A9^..\..Do...c..H..k\|.z..{.t..;.6./BCx..iB.S.D

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.4732434893340589
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 55734
Category:	dropped
Size (bytes):	17138
Entropy (8bit):	7.985486819045762
Encrypted:	false
SSDEEP:	384:1bXp9pe0GiXw9f00mCbhwBnI9gX4yCq0Pj3IBaINXBUw:15MHmCbhwjCBEBFX6w
MD5:	732769F238A36CB44705F2D6A18312EE
SHA1:	4145A129B7285EF794924619940D72DB4C03F1A0
SHA-256:	AC450BC0F8F949594349262A4F1AFCCD1B1B2DB4B8AE231BEB3D23F673120035
SHA-512:	4AE2753606AC2DC30D53DDC78FE1D233ADC8F2DA8727629A73F8B28B9EA2B458511043F38ACFA8EBEFAFBCA2D92F9B3EE1B80761C1C892DE6BFA2D0E19C375D5
Malicious:	false
Reputation:	low
Preview:	............v.F.'..<..>c.-...B..8.d.3r.....u. ...!......\k.d....{....W...U...)..;.V.{ED.P.k............6...\|T..#3...i....w...QvZ.._...N.Q>.TWm6.o.iq1...de....qD..2....(..,...m).....<..}U.E9.'y^..,_.V.b.LGO...@{..9/..L{.._~<....~..w?~......@..o.EYW... .O.3s.,.......1......>;M..K.......!0...i&us{...;........ib.....:J...j.`V.H........H.6r.N.T..l^kGc.H.....MU..eQ......d...brQ&...(..t.[^..W.L.1Vw.~.O.h{f8.o......ym.RP-..,.iY.sC{.&.^2.5.,...G.V.jw..]..b......(.4.(........?..Yz...jzU'....n.-.7..h.....:{..Sk#&If.Vh.....F5....I..W.+..tc.t+........#.-.R...8....d....v......<Lb.....w...].n.j..ak6..&.3}...X;...!..ww[.lY..i.......u.K.S..L.E..u.O.N=. .3..........7...N^~......W.........99.c].W..~Y..b..eUo.o...j...A... ....Q....f.9.J.g..eR_......O..X.s..Qo...K.evVzU.kP.D[....<...;5V..C.oWS..e....."J).z..f.........\...w.r9-.ER'..6.yZUS..R..z.....}.........O.....7...;..<.....(Mt,.].y...7i.<..).Nl.=m.....d..U.M^.S.Z/.Z...]#....b..}..&?:...j].U

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	171
Entropy (8bit):	4.99164110946794
Encrypted:	false
SSDEEP:	3:t6WCrSrwvDmJS4RKb5sAR+bIAG7dScHaZfPRFUV6d+GsMQ5rxXEREhfgW:t6h/mc4slhobIAKRaFNzQ5rREyN5
MD5:	4D5C5B51837AC556B931A2D38B6566D2
SHA1:	AB94B7F0E1881E6C5475EE14EC37AAB254F64542
SHA-256:	FCF552DAEECA47E67A22CE6EDA8EE35C5F0DF67CDBFA5CD5AD8C33055C300A34
SHA-512:	BE0FDE7A0D261AA92AF89DF904A47A88973EA4B855D7119E3FDB84E42E81AD7CFA059754273E816386AAC3536A71DE2D0CA96072D206D0251DDB8DE33FAFE233
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/svg/right_arrow.svg
Preview:	<svg fill='#D7D7D7' xmlns="http://www.w3.org/2000/svg" height="48" width="48"><path d="m24 40.55-3.35-3.4 10.85-10.8H7.45v-4.7H31.5L20.65 10.8 24 7.45 40.55 24Z"/></svg>.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (404), with no line terminators
Category:	dropped
Size (bytes):	404
Entropy (8bit):	5.469212369855459
Encrypted:	false
SSDEEP:	12:xWnBfxh+rWg2QTodt7HgK+rGMGQTodt7n:kBuWg1atzQGMlat7n
MD5:	9BD916270339648EFBAEE7FE86531EEE
SHA1:	9827A7E8D31638CBB16FE5D4EEE2C76B20081391
SHA-256:	47BCAD5363D620BEE834DC98DE903410206F5F1538AB2E662BEA2199290ADE7B
SHA-512:	977CE99F51F37782AEE42A239B54D1D01778A6DE85712731B48102744B5C2D503225103936A05E9C2FFF191FCD4A919A010DAC7FED5CAB04C2E8E7D6270BDF7B
Malicious:	false
Reputation:	low
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=448f27a7a3dace87:T=1727736434:RT=1727736434:S=ALNI_MZcUJZ2OkkmRonB8uylHaUKEshG6A","_expires_":1761432434,"_path_":"/","_domain_":"infoguard-switzerland.com","_version_":1},{"_value_":"UID=00000eff0cf41339:T=1727736434:RT=1727736434:S=ALNI_MYBrEJ4mj3mQjif0Zfo3vgZ1Qv7hg","_expires_":1761432434,"_path_":"/","_domain_":"infoguard-switzerland.com","_version_":2}]});

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 24134
Category:	downloaded
Size (bytes):	7514
Entropy (8bit):	7.972817339817039
Encrypted:	false
SSDEEP:	192:xu+tUmw+Xl4veocBfqyrPEuB+59F1oeIjjY:cjcKvPcBfqyrD+b1
MD5:	149F8B397FE711244EF204823190CB86
SHA1:	1AE7A6222C28FD5D32A89B6A2C9BBC72FD6F647A
SHA-256:	8D54148B53158E3D06FE5285AFF2C3E189390FE355B2EE400BAF8F1F5A0A819A
SHA-512:	B6CA495E1A0A55D00854F467BF88D87D86C149BFE285CE490F9BEFEA0D0EEA06B868F8B02880E30D2EFD779980554862F38DEF6992B2018701550AD90D13E1E2
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
Preview:	...........<Mo.Hv...2..q...m..o...]...gv.1..X...".d.n...bo.$@..r..,..{.....a~.$../..bQ.l..,..i.-.>_.z........2.!gY.J.d$...$r9....._.B<.Dy...n.!...l...K..v[=....2/......AW...'.,Qe.:.n]....u..Y.:.Q.f.5bi..gq...g._u>s<..f1....o...:}.....^:..X. .S.q......A./...0J......E..V.P....zy.O..a......j.3.....F.$O...a.O..~B.+~...^..0.....i/...$.0o..m.<gC..O....1.4..y6.9.s.q.....C`...+.. .?<y...:z...7.^.Nw.?..~..W.\|w\|....K..<.p.6....M..uw........C........`.7.ot..&...s9#..%Y.dA.QB5..B.t.g\.....).!.`...i9.y4H........I.\...e.J.8.%..y.m7.os.U.G..Ja....l..hw....mx.'y.3$.X+a..jg....)..8.G..(...;D.j.%..x..e.M..V...;.> .0.8.....g.p.....+.tn..~J?r..+.R..."....SL.\|...Y.....e.....f9....I..CRB.(.i..8.h.%..aX..#{=.n(..S...L.n.kV...1'.M.....^#OG.T...l.p...AZ....<V=A7....yB ....3.q......f..q<..c8.....A..H.v..J.^aR...b..F...z....@...<.z...LC.. .T..gnA.f..0.Q...iVr7.H....r]l...d..i.$@. [.jM..r.. @.nT6(h~Cs....8....A..i.A..JN..h..p.)...d(k.l.0..M}Z.}.gt..1.I.^...

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153198
Entropy (8bit):	5.54355971169404
Encrypted:	false
SSDEEP:	1536:8ni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:wqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	B22C1AC60EAD0F027FBE0661AA5AED8A
SHA1:	6F078850BF476EE27DC182C5D7203586DE7B403D
SHA-256:	BD4D16F5DCFC31BEEDDCBB565F052072034461C145DA3DF205B834422709A64D
SHA-512:	DE4B373622BFCF826278EEF166AF9E4867E2333E2396FBE969FD7C4F50950682BDD7A7BFD766743F6565F3562B7F8BC45D6DE46C98A2BB49C724C47E4ED46949
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return function(){return b<a.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	dropped
Size (bytes):	691197
Entropy (8bit):	5.615967391062194
Encrypted:	false
SSDEEP:	12288:Jsb1QYnTxQYnT9DUk4f0WTI4WugqciqXDEu4Omj+BcWON:J01QYnTxQYnTF4OQ9
MD5:	449B102F3891BAA1B7E19C676A443066
SHA1:	09FC9B6B47F792E96339121FE61A7B1C53C8481E
SHA-256:	81A5900839E1BB0D7504909E489997D1DAC54FD473FACE4168D9377D73CFA46F
SHA-512:	06162C2A757DAB2DC244E22D1F022F2F65E6FB9CAC72B2BBF5A7E266AC80A1392EA04C9651FD6A3535D22C59410588659331F869E56AFF395CF72F3EF1321610
Malicious:	false
Reputation:	low
Preview:	/! For license information please see main.36e19f48.js.LICENSE.txt /.(()=>{var e={8665:e=>{"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,r=[],o=window,i=o;i;){try{if(i.frames.__tcfapiLocator){e=i;break}}catch(e){}if(i===o.top)break;i=i.parent}e\|\|(function e(){var t=o.document,n=!!o.frames.__tcfapiLocator;if(!n)if(t.body){var r=t.createElement("iframe");r.style.cssText="display:none",r.name="__tcfapiLocator",t.body.appendChild(r)}else setTimeout(e,5);return!n}(),o.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),o=0;o<e;o++)t[o]=arguments[o];if(!t.length)return r;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplie

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	998
Entropy (8bit):	5.139676547935253
Encrypted:	false
SSDEEP:	24:Yh3LQ1IDoXuoT1xlfkdcJozc11IR+shdAP2EG:Yh3LLa5TfkcJYBR+sUK
MD5:	F0AFD05213F281EBC496557EF8B89CF6
SHA1:	D957F31D8EB0DBAD9C67AE3315D652AD5A6A46E0
SHA-256:	64FA8F04833F0C729D682BC925BAA3AD16B0CDEF090183E19EDBE967BB75FB15
SHA-512:	3266F43D09073AB8E734727638F40FE1EF8425230724DBB99FB019ECEA283DA001C421931982CDDF6A461EF99778834DE7454B2AC268204D01FEBA65B56D88AA
Malicious:	false
Reputation:	low
URL:	https://api.aws.parking.godaddy.com/v1/parking/landers/infoguard-switzerland.com?trafficTarget=gd&abp=1&gdabp=true
Preview:	{"untargeted":{"system":"PW","displayType":"ADS","dataSource":"INVENTORY","adSense":{"drid":"as-drid-oo-1885714186540894","channel":"non-expiry","pubId":"dp-godaddy1_xml"},"domain":{"rootDomain":"infoguard-switzerland.com","rootDomainFromBrowser":"infoguard-switzerland.com","rootDomainDisplayText":"infoguard-switzerland.com","expired":false,"expiresAt":"","status":{"internal":"ACTIVE"},"hasAuction":false},"lander":{"template":"PARK_WEB","banner":{"show":true,"link":"https://www.godaddy.com/domainsearch/find?key=parkweb\u0026utm_source=godaddy\u0026utm_medium=parkedpages\u0026utm_campaign=x_dom-broker_parkedpages_x_x_invest_001\u0026tmskey=dpp_dbs\u0026domainToCheck=infoguard-switzerland.com\u0026isc=GPPTCOM\u0026itc=parkedpage_landers","type":"DBS"},"ads":{"show":true},"i18n":true},"experiment":{"experiment":"parking_parkweb_ab_05","cohort":"pw_treatment","start":"","end":"","enabled":true,"data":{"channel":"treatment","utmCampaignDBS":"x_dom-broker_parkedpages_x_x_invest_b_001"}}}}.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 140x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1624
Entropy (8bit):	7.865370736475816
Encrypted:	false
SSDEEP:	48:UD5tUz1wBdU8ARBrRb86LvF3b492IL4ClVwa+tr5:UltURw1AbG6LR492JClwV
MD5:	5E0D4950920F43037B3C70E4B8EFA4CA
SHA1:	D3AC5CB011B2946C627A9125A76B779A2FB2377A
SHA-256:	6D440800FFDA11B90FEBE87A7784C804CF58517EF5DE4D0BD9D596EE7B0A1C8D
SHA-512:	08B10ED75BD122A6597CED55F01E9A7C30A082F19845C788C6B09186BF30773E2F8DBE292B00CC259DE8155C197C30CCD85999E4EBF7F280A00D6EE27C355B5D
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn3.gstatic.com/shopping?q=tbn:ANd9GcSwuHjOAbCv2CLpMoMDNumnEyRfgnuSv7BqxRNkHl1RJi4F1qtfgrAldFBZew1XpCQyzrRwedwOIBDhqYXvtUoSIfrY3dKJTRg0TWm0P14uryStW2GLhL47Fw&usqp=CAs
Preview:	RIFFP...WEBPVP8 D...p'.......>=..D"!...N. ...8.y..,@$\|....)]...).4L.lM7`..k.OH.%k...]x.?..C...j...`.}q...80$...p..Qu`W..B....G]1g.."\|lN.(s.r.K.R..;Zd.z...y..M.S._..Dz._.WBj..]... ..s.F....4.r@...5.\|...&.`...1.....~..."/...?jG....S9.Eo.>P..}.$...........L1")...r....P.0h.;V.5..........cL.A.T`...%^9...!.................D...g.\'[.!e.e ......;w?......Q..5.}_$`.f3..WG....E......#.;.-...,i3..K....6.zM......#2....[......47%mO.(......=Z..../.&..d..%...V.2.g.Q.b....B....H.;..7..7<...v.4....Z.l..3p_...."..z..+.b..-Pq... R.....N.c...~`.f$.GI.=.).Vw....p%.$M1_..........$=...R.5..T.o./...=q...S.1..Qc...Z...m...j..cssg%..)............6.?.j..f..W.c.........1... .:Z..y..!..]9]..O?..8..^y.....V.>.......}.{.;x.../.H]..\c.,......'USP];..<;..w..>.....s9.u4j.g...A.Q.."..!.u.f...1.P...F...)...pA...<..!....5..a....o.6.rV...+..O.sN..A.....;\|k.E~..po.........wE.`.i.....L..............=...4Hmn.3?.....<.....5..........oER....u...c...Dg.S.bS@.v.[v ...75]...H.m

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 140x78, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3566
Entropy (8bit):	7.947650251477354
Encrypted:	false
SSDEEP:	96:lBUoRdTk4BYfBgFkM/XdANI0aXqqQdNFHwoCXVtSlWK4q:lBUoRdA4BYfQXdn7aqQvGHVK4q
MD5:	C84308916166AB840004203E9968A5F6
SHA1:	01C4D899F2CA73875F8F2122060FEB88326F5E6D
SHA-256:	53C8F72CB44518EA69A657EB463B07AA1EBAE3AEE3D30AD804700B73ABECDEC2
SHA-512:	23DE9386792DF88FBAAEC1B6F46EC7486C00BA7E8627A888E15405C14B7A8A0D1637804CE8E86B3788E851EC0DAE9F16DEC2AE2939D32145AD1E8B5817F4BE5E
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/shopping?q=tbn:ANd9GcRhN61oXqERyG4OQ7KhWkYF80wF7MH06D9__LmlTNjhXkYcwfHcMz4gm9OTepwNUTjA8q90JGgW0DA71LFGwWvXgk-I3-YJvHR4ZS_WFQ&usqp=CAs
Preview:	RIFF....WEBPVP8 .....2.....N.>q..N$.$..0...l...9.l.....[..}I...?...3...'....P...B..]....?..L....A{..{...u..G..yk../.....~9......w.h?.}.=..o....Q;......M..@....=X..........................3.u......{....\=(3\|..?...K...(.ef..(>o.@.....WO.uB.0.k........k."V7X..R..Z\..!F.#8..X;b....0w.).!1.6....fj'.....i.>...v.....&..u...2..b.$f.D.7F.l..nZ0....U..n...#..L{..2.:cB..3.0....&U.f.2...x..o..y]M...:.6..0T.z...Du.J.v\|)S?.20......?.m5...ps..O.;.4c.v....CZ-]..$.L.......c........c.f./......cE..d1...e.4ST.~.......A.../.I..._...T.i.w..z%M....f.q>.0=E6....r.J..m5...Y....k3.X....cr....s..5.}p.0....p+.........s.n.7..R3n.#S.....(..}c......t...;".$.v..P..D...^..'..Tl.P...Z....V.......8].Ez.....F.`..(..!......f.....n.cS..Z...p.....s..k..{.L..Wa..}r...q..}...pc..-.( .C..d.6.._./.be.SV....b+)..._T..Yo...i...;..r..[...q..".......[.0......-n..EK..4......4\.=...j.x..Z{..I@...q...o.=.+.&.O.......\|..5.rTy..w...9.o[[.<....s..D..L."........QSp....p...)%....j.jd(....z.(..

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.734751697115265
Encrypted:	false
SSDEEP:	6:t6FNmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6FNFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	6751E07E0F93BD43AB90822F4B2EB62A
SHA1:	D1D0C6F0B4697B0A4E61FFBF171E8C60EAC7C832
SHA-256:	FF563F41765DA081FE9FD40E8BB33A623DF033B10050A8AE8C1B46E15107D8F1
SHA-512:	A00080E16354A0193A31CB848CBBD81AFEBF9253BECE0B81003027FD9435A060AF56C520D0C003D91086105616CF0511F54C12CFBDA261FE917D054AEF8B0C79
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2
Preview:	<svg fill='#1967D2' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1559)
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	5.348327055619805
Encrypted:	false
SSDEEP:	48:0JhmOnK8lwSb6YS4tyPWp2PXihm0wQR2FgbnYfblV:8/DbL1tzAXr+0P
MD5:	596AB116B78C0FE9917941250E61DA62
SHA1:	6F94C4F19BD809AAF1956D68E6CCDC4348695E20
SHA-256:	4BF62600D6842720E7780EA07EDC5D17F0B8B688E22BB34C43F600BAD411DAD7
SHA-512:	CC7503FC9ABB44D800B29514DD90D1232299FDDE726409E1392F35E49816D7D81D3828B45197F4CB144FFDE0A21652575CE2BE87BEC4E51C511CD69123CE9E7A
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads/i/iframe.html
Preview:	<!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="uoY-Juza51zSM-gi7gSxgg">if (window.name.match(/^{"name":"master-\d+"/)) {var script = document.createElement('script');script.src = "/adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\| href.indexOf('&pac=2') > 0) {script.src += '?pac=2';} else {script.src += '?pac=0';}}document.head.appendChild(script);window.IS_GOOGLE_AFS_IFRAME_ = true;}function populate(el) {var adBlock = document.getElementById('adBlock');adBlock.innerHTML += el;}function getMaster() {var m = null;var pIndex = window.name.indexOf('\|');if (pIndex > -1 && window.name.charAt(0) != '{') {try {m = window.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34852, version 1.0
Category:	downloaded
Size (bytes):	34852
Entropy (8bit):	7.99370036872867
Encrypted:	true
SSDEEP:	768:zF+n1CXK5zIgArjvw2FiGzwrRnMiVPxhA31bgD8BgYyjAtJ:kAda5rRnMiVjAuDtYbtJ
MD5:	0E8EEFB4549A2EDF26C560CB9845952E
SHA1:	8D0B1718AACAD934FD0043C87CBC54AA091396BF
SHA-256:	7F653B3CE9D3277457FC6DA4EDB246AE2F6C913F088C42DCB8CD2E96267AA21A
SHA-512:	237659DD4B8680AB4856D38290D57AE9211B479C51033D8DB4AC61326551E33CC245EBF10EED35AAB6854D8196D6651EB70CB63A2BA1D7373404851FE084772E
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKfw72.woff2
Preview:	wOF2.......$......<................................r..2.`..V........#...........,...(.6.$..T. ..v..X..q[.+...n..!..m.ad..%.`.b...$...q..`..@.m~......IE.L:H...........A9.(u@F.(.E>..TZ.>..<L.],....&!...(x.R.Q:....yx..+r~.....r,..R.....\y..\|:.\...9.$r...\|..j].....-.0_..9=...B...}.U.`..2.L.........O..n.I];....P.7....GO..k...w.]$Q..M..t..!(..>p8...a...&....@............p.......LIC.....X....J............t.w.l....J..k...D.}o...............Y..D.....m....".6"r..Y.f`......V..E.U$...g}../.....I(.>u.....U.`n....`.............F.(0Q....BQ.9...#.Q...\|...kZy.5ee..2....{Z.....+5w..1..bG".$......;..sE.=g(i...kB...Jj....VUWWu5T.t.4..fF.Z&.,....l.9a...Zr..V.V...4,........./.t?.B.2I ...t .J.......\.v.vn.r.f@T.:Qtdp.........@l.x....)......A9Ra%..5`.s(..\|.C..S'R.W...t(..u.....S.....DG~.h..`.7hG...z..pf.Kk..F....k.N%..S....2.8jN..V.H;.v.B.....2...j6$.6......Gt..> ;cgh.> ./_......K..hC.@.:J..._]*.v....s3,m.....K.b...zZ..1w............([.=.5...l......

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5197
Entropy (8bit):	5.435781183893483
Encrypted:	false
SSDEEP:	96:9OLvNOLuFZsOL4OLSOLwooOLHNVOgoNOgpFZsOgVOgzqOg1ooOghNVOC5NOC4FZf:ovYCV3wyZojULw11Z5dNqti7Y
MD5:	6AA91841B259A6C32E2F779E08C588C4
SHA1:	BB09ACE026B11CDEE001BDA5E630F74FE39D49AE
SHA-256:	A216AE8B4E5F92C6D428BEE4E515F445FB1633B620290DDFD1C1C73B0E3A6B4A
SHA-512:	F914917F66F14512803494AB974DC07D04C83634FD78F33A7BCCFCDF80C17504CA7271C1A71C23788BD1CFD78A8CD3DE8DFF76399730D46AA90976184DEBAF52
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/fonts/ubuntu.css
Preview:	/* cyrillic-ext /..@font-face {. font-family: 'Ubuntu';. font-style: normal;. font-weight: 400;. src: url(https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKcg72j00.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}../ cyrillic /..@font-face {. font-family: 'Ubuntu';. font-style: normal;. font-weight: 400;. src: url(https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKew72j00.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}../ greek-ext /..@font-face {. font-family: 'Ubuntu';. font-style: normal;. font-weight: 400;. src: url(https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKcw72j00.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}../ greek */..@font-face {. font-family: 'Ubuntu';. font-style: normal;. font-weight: 400;. src: url(https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKfA72j00.woff2) format('woff2');. uni

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (28656)
Category:	downloaded
Size (bytes):	41756
Entropy (8bit):	5.35484581742043
Encrypted:	false
SSDEEP:	384:2ni0DnEWoSktKuaAX1mtpyxCSIj9AuiWRq+AhCYVW82swOM:2iqqEuaAFmtp48FRqdC+WBKM
MD5:	CB578D4FC0B880064720024BB8A42B7A
SHA1:	0823F8D98F99E4C43A617F3239DFCDA0AC124107
SHA-256:	9ED34EF8D62807911F97DB7447C8FE7CDA0D81C5DCA1AD569A385F7BBFC0EDE6
SHA-512:	1664F90824678B0D111ED54AA35087DB2827004069A6972987FD0CC858EBEDCBD1321E248509EF1699B46B2AF1EBE5179C865E519F2FE2B24BA374045D544F5B
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=infoguard-switzerland.com&client=dp-godaddy1_xml&r=m&sct=ID%3D57aed5ead6c1e5c0%3AT%3D1727736433%3ART%3D1727736433%3AS%3DALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A&sc_status=6&rpbu=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DCustom%2BFolders%2Bwith%2BPockets%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&type=0&uiopt=true&swp=as-drid-oo-1885714186540894&q=Custom%20Folders%20with%20Pockets&afdt=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=7531727736469140&num=0&output=afd_ads&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727736469141&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=907&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DCustom%2BFolders%2Bwith%2BPockets%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 140x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5120
Entropy (8bit):	7.960851304764892
Encrypted:	false
SSDEEP:	96:DPdJJiHHcOLRbzd2T6pWTPuIg9UXBhCxrMtelC3vOnDKET5VtIQLxGY0Fl:hJZOLJx2TvT2IgOwrEelCmnn7Lxa
MD5:	1983C9593E667E4F4D510C1749DC7B9C
SHA1:	7238DEA7C42B054906736D47E51750F9EDD25222
SHA-256:	ECBB8551577EA33181F1B20CBB89A1C14FDA32A980D360E167E1CFB045DDCB12
SHA-512:	6D57DCBC18EC5EB288C69013F432CFBE32AA24B93ADAA5E8C08255B987AEF2592A92D80088FAC44B846403FC0A7BF4904E296875DC304A8A9F7E1715D2C17EB5
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn3.gstatic.com/shopping?q=tbn:ANd9GcQA-YRHgNQXPQl1rU9GpmvyKoMkCSMMkZFuQs8V_Uta7_tOOQL1Isix2tqS7m668At4-fgIVvu1QDH4g-gzk21Ts-gaFa-Oxr5FOB0GQP2f&usqp=CAs
Preview:	RIFF....WEBPVP8 .....K.......>i(.E."!..^.@....e../..].{......x1../;>.~.=.?Z.b...........3.;.....?A...h...I\......?&.... v....?.?.{i........"....\|6......S...B......>.'.........=.............\|..1...3./.../.?e.....x~.Y..XTR.......r.J......Z.ld..m.t;.m..o.YN..........yY.j.V..v.g_...(.......P..gB.... z\|.`#..B..bo.=...0......0.C..P.p.N..c;.}.tY...{..A&6.pXl.q51.W.............zq...l=~Fb.W^..../.wk\.....T.s.F....O.s.....;H....B....e.;....%..2#....99.]..2)..........&.\|..+..<..V..M...&]%}......2.i.jUY.z.m6.V.@G>..w..x.>m,...5./.".Z.C..5T.U..)h=..=....,.........]kTg.mY)?.H.Y_J...R1F...R.p..<.R..S.n..>_... ........x..B...k.B.T).y.f.........._.}...r..Jc.>B....O......"...c]....)n...........h$9.2...+&H...temG$...6n...b.&...5...ww.._...}.7..4...r.!1;.5.>.\|f....=...C.....I..U...ni\!.......%_..{M....O=.....T.._...].J=~....'.)T.c......oj?.:-hK...Q.~.Ow.Z.PvCh..u..U.~..=8v.c....-^.y.^5V....).S....*H.d..E.,<.{Db.....T..<....m<&w...vg....O...&7X'...k...

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.18254414261951002
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (404), with no line terminators
Category:	downloaded
Size (bytes):	404
Entropy (8bit):	5.448823433218795
Encrypted:	false
SSDEEP:	12:xW1l1o5IeYv3O5tlodt7HWm5I0fsurlodt7n:SRe5atzW30gt7n
MD5:	701CF36A61BB83DA9FDFB7DD62DDBE8B
SHA1:	45271B9A4DFC6B825B9EC5C4C2B2F3985FF8BA59
SHA-256:	AD3E984F99048BC915DB28F34EEEB92DF343437AAB103BC8AB71C89505EE48D9
SHA-512:	5DB9228A45755493634C2FD31F3FB79F838988CE994F6AF43EF4D36AC86575266E45841B009EC39866B9ED2ABCF6DF7D3DDE0C2A372E34E354DF63DD760B0DB7
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=infoguard-switzerland.com&client=dp-godaddy1_xml&product=SAS&callback=__sasCookie&cookie_types=v1%2Cv2
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=57aed5ead6c1e5c0:T=1727736433:RT=1727736433:S=ALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A","_expires_":1761432433,"_path_":"/","_domain_":"infoguard-switzerland.com","_version_":1},{"_value_":"UID=00000eff0c839e0e:T=1727736433:RT=1727736433:S=ALNI_MZrg9zsqqFi8YjuqeeRuxUCO14hWg","_expires_":1761432433,"_path_":"/","_domain_":"infoguard-switzerland.com","_version_":2}]});

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	691197
Entropy (8bit):	5.615967391062194
Encrypted:	false
SSDEEP:	12288:Jsb1QYnTxQYnT9DUk4f0WTI4WugqciqXDEu4Omj+BcWON:J01QYnTxQYnTF4OQ9
MD5:	449B102F3891BAA1B7E19C676A443066
SHA1:	09FC9B6B47F792E96339121FE61A7B1C53C8481E
SHA-256:	81A5900839E1BB0D7504909E489997D1DAC54FD473FACE4168D9377D73CFA46F
SHA-512:	06162C2A757DAB2DC244E22D1F022F2F65E6FB9CAC72B2BBF5A7E266AC80A1392EA04C9651FD6A3535D22C59410588659331F869E56AFF395CF72F3EF1321610
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/parking-lander/static/js/main.36e19f48.js
Preview:	/! For license information please see main.36e19f48.js.LICENSE.txt /.(()=>{var e={8665:e=>{"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,r=[],o=window,i=o;i;){try{if(i.frames.__tcfapiLocator){e=i;break}}catch(e){}if(i===o.top)break;i=i.parent}e\|\|(function e(){var t=o.document,n=!!o.frames.__tcfapiLocator;if(!n)if(t.body){var r=t.createElement("iframe");r.style.cssText="display:none",r.name="__tcfapiLocator",t.body.appendChild(r)}else setTimeout(e,5);return!n}(),o.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),o=0;o<e;o++)t[o]=arguments[o];if(!t.length)return r;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplie

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1767
Entropy (8bit):	7.859401496657763
Encrypted:	false
SSDEEP:	48:zStOOHoqELIPuS18i89GpYKa7zvp4uMCyrZSfaDFQ7:zSzs8PuS184Da7zauty5By
MD5:	EE5DF4FAF46CFE7A2EA13ADAFC0E8DC7
SHA1:	ADEB9317F2D8DFC3AC169EDC55B4BE9CD7EA0202
SHA-256:	43A870FE0EACA4784F8CA36AF90231120A3D682D1538450F82670B660093FF92
SHA-512:	5C4DBFA4E4AE0A8A658311712CFDFB71DB78DF4B4B04CAE59AA505190CD2CB040521CE5FC286A147DAC3F78B527D8245BF1C78671F9DE485EC50F850BF8A4A91
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/8470980301734709408?sqp=-oaymwEKCCgQKCABUAFYAQ&rs=AOga4qlBSp6pHgPBOfS5VHixxg3yiNsoOQ
Preview:	.PNG........IHDR...(...(......./:....IDATX...{X.U........c...x.-o....&...%..(%^"..I.Z.$%...y.k$..>.4.....G+..\|....cl.6.}o..'.w7..._;....s.y.......8...n...l..@H.=..c2.Ayp....J.VV^.kY.)Y5.......`s:...a`..O.6u....\N.`......\|..@Vz7L.d.... .....f..h.h..W,.s..)cF.....\..y.....d...hr8......I(J..dEQ..Y....g{6.....G.RS.....Q...3z..e.TV^Q]RV-.G.L.I!ad.."8....T.r.Xv...A.Lfkc.NvV:{.A.W..<]R...u.8...Nif......jU6.Z..Z.........J"D...K..p..q\...!).....G..Z..ox?.[..^..Vrv...^....R..~....f....Z..C.LB.<v.. ./...9o`.=..)..\.w..%U..2.#....D$..##3'@v.......?`.pZ.J"....._........%f..F_......~...........Z... ...ff}...?.u....;6.V[.....d5qT`.C./?x........z} `....7~..q.P....{......-........?.............l6... }.W.k...6.J<$tQ.fu{._K..U~..+.....8N^.......a....Y}..b...o....4......X.V..}N......*.<..3..,+..k...W....Wn+...t....j..>....{>.....m..;(....Ts_..`..DQ<V..0.Xmv..'..+....0L.u.=4v..`~.FY...B.............d...P......Z+7.')...&KP......5Ng.)..F.HK1.\[4.5y...t..t.t:.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2210
Entropy (8bit):	7.90006091497654
Encrypted:	false
SSDEEP:	48:BaqmlS3IsRlSL7DyG0PwVN5Tvt9QRfLAnk5s4Muz/RYH/eULd3KZ44x:BZxo7Dv0YTvaTAAoW/JULdt+
MD5:	F3FE66FB2560C576B0DE1FFA4162EA64
SHA1:	1D637ADED0B38AB703D9C37D37E9FD4B912A9AB2
SHA-256:	1AD419A4B91532B1635789149C6FE96BF31710540F22D705848BC66783234CBA
SHA-512:	C2C7AA0CC1664C0737A60EFA33C6E2206D0AACB8290ADCFF70D5B0519B5447CD245664A7F620D4681C0781A340CE58EB64E584E6E0D3F220FEABC560C04B4335
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn2.gstatic.com/shopping?q=tbn:ANd9GcQVTd2hdwJNJFfst8LbhqYOYHj3PzygLsPtsCKfp4jT2YTDP1pMrqjVkhag1_PZ3a7akpre1ZeB9Kong4k4NAEo6bJ0o3-5Sa00muMXEQ&usqp=CAs
Preview:	RIFF....WEBPVP8L..../.......m#...?.....H..yN i.....M...m.7T.. .......x....(..".4d"Hl........H.q.Z.p...,....p..o...m..l.......{..]...C..+...&.@h w\q..q......3..L..1.....$)....Y.]........Z".jQ...."...qX. .j.l.v.....5...c.b~np[.....?...B....m..y.A.......R.0.e.Q3......L....L...)hT.G\..hj#bbb"+..a....b...@.v`....#&&&.g.Wi.....P.....FH.1.O(.......11IUP...g".9...S.;........".EN...[.P41...("2...d..i...S."...D.....O..h.....!NKS."K.&"..F1J1P..E..+1.........i_...(<..~..Yq.D....5..Hi.p..<X.4..R...K.z../..J.+.1Y"J.........b.,H.nTj.X.$.o..../.5..\..p.{k.}...............^Nzq....N............l...x.IK^.....y..(E.9.fz..'3..H}Y....GkX,K.+.\|".^.N.7.....2.RxI.....#..,..h.c.a...R..._\.M"%z4f..D.(.5b........dT.4Q>r.kM'.j..PJ.'&....*[B..Z........."Y&@..P\"..L.\..M......TI.2..y>4..-.3...M.:oV.}.~.Qq..+_..{.v..%.=...\l...?\|w..j8...<i.)..\. . JVz...m.^.1b.l.D.1.Q.q.G.+...i2.~....i(.O.Kq....[.w....!.u).L.(.i...-./W.#..ib..A9^..\..Do...c..H..k\|.z..{.t..;.6./BCx..iB.S.D

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1132
Entropy (8bit):	7.737962737747392
Encrypted:	false
SSDEEP:	24:+Ed7GF7Ow+Gcuq5E7oRVzRiSTPLYyWlDJ4Xw3oxlgwymf:+EdyxFruEkRPfPkll1WPoTQ
MD5:	848A8D4823A2578CCC3311127FB40A63
SHA1:	AB03457825156A859DFBEC5AAB0FE00CFDCF8D8D
SHA-256:	E57B42114A2E1CEA6C03FD31A27B02B152FBF40A8B161DBDE171282F9A99EADB
SHA-512:	153D91DB9F02D77E6AE81EC261D79B0B03C13463667881365D0EDF796A8AB6368F2D21D71A960CAC7FC29493E222C6500C926D532A2C66A6CBA93D5CA79C8622
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....3IDATX.._lTE...3.n.l..e.....#5h....R..I.!.01$D..(>h......QHx.QP)<..hlb.bH..1n...!...Bl.v.g{g\|......i...f....s.3..J..V..X.......Z..NK...(p........E..%.-`3p..."..b6.......?.N!".......a...\.R)...)A..c.8...b..D.Vf.o.>..e......o$.g.F..b}g..B$4p.x...K".y.x..1...-4Z),....7.\|...-..kj..{.h.k8.x.H....3I.<.....T..k.F...oS.....\|y..P..]D_>.\<..$.5H...K...L.F.X..@.G..........8v....p..B;......w.A.&3.)......lnd..{qsB..KL.e..ZcU....s..Qn.8I\|p..8..2....1.....4..O.]x.j.Z.F....[Z.......L.Q.g2.B..O.)%.....#.&\O...O...{.r.....,1.~.....d.o.....R.r....\LK.-@W...`]@.... ....^......v..XV.Z%.^A.a.T-y.T..c../dUK>{!-l...!@9XU.R.B.l`....\+.u.l8y..8.'h...c.\|..,n.6p.\.BJ....;.35.F@...!./.^L......H9.....8...K....6.z~g......h..j.4.........q1/H...U6....0 .!.....8h...Q-.@?0d..F8...(.@z<..X...JQ...\|....l.)..!de.\|.Xh#...:.+..\|..d.....o.I....M.a.N.6.@..`..BF@.....?c.....f.&l.......F..}....&....gxp.W..]4...}..BQ.u.2..W...E....7.L..v .."9>...x..U.[.#

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 140x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3228
Entropy (8bit):	7.936496398314537
Encrypted:	false
SSDEEP:	96:o/UFJ/SLk26X/hBwYCqixarN9xRUNuauocD:o/0VSLQvhXCqixa59PMuXom
MD5:	D9150675027977347F26B216D43FE7E3
SHA1:	66C1545793952B7E3BD5574EAC4BE5D99FF32E71
SHA-256:	C5BE8FA5D2A5284AFC8305394E12ACD68DE18FFBB3B4DB54AE62A96B10574512
SHA-512:	18A40FC7C831661C48E8A86B60409844ABCB66A0756D487784927F59659274A8A3422D973BC336C0DF04D151E68CD5253D9492054108C3157445EB6241697D1A
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/shopping?q=tbn:ANd9GcTCO-0R2_gYUGKy1_WxqMg6SRNrfkYQS42kcn7abvVFJdoDFSusEagX1xv6PJPMi1yS50IQ6eiMYQuh3Xw2d-iD6vt047zZqeOaQu4SBqI&usqp=CAs
Preview:	RIFF....WEBPVP8 .....:.......>M .D..!.)=.(...e.)._W.E.q..<\|.0.\|>i:%....{..n=).p9.D..^.;a.j.{............._`..JOb_........R..3.u.5=..@a}.2.....g.....K..3...2..<Y..L'...z...........#1....k......J.qY..g.......p}.{\|3>.e.t...v..k^.=....L..?..M..)5..u.."%.d..\|.#...+=....x(...E=F.D.#.&....0......_..I.xNzm..F(...n{.j&.d......C.w.0..F..nb.@....uN.-....7..........:.4.Q.^..@>...2.h..t$....Z.......JQ!.q5.?m.h\.W........,.'.PC..$.m...3C..=`.(z..#J..z?.+........$..A2I`...:........z....i.......O8..~......-......M.GF.uY.Jz#....N...x3.g...R.+C..yo.\/.........>.C.y.l..yu.._.<..D.n.S.&.W..!....z..5e==..m.`;P$.T."...d..p...oeT....s2%.[....."c. ..I.c....(.8...".L........M^.......P..9f...b.-..e....A.n..JnM.G.O.....U....w...@B.A.SN.8.F.....!w...:,.S.......5:-R.L..=..I.c.U..6O...=....."....h&@..,i..N..a..E.T.,..,@.p:`.3Q..2.&...B...........i.W.u... r.t.........jK.kj..>.2M...I.c'...e..!..6.......\.."..x..z.CB......55..=*.../......j.&.........

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153207
Entropy (8bit):	5.543700716520015
Encrypted:	false
SSDEEP:	1536:dni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:1qM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	A12DAE6806D5B0CCC2059D1DF765EFD2
SHA1:	C020D67501779A23B1808AAB42172EA1AD1771C7
SHA-256:	CA4052DB8CA3BF695BA25200BC5ACDB4022A45DA338AD070F89FD610109A5DF6
SHA-512:	2CA335F26F183225C31468BA3BCF512EABAEA453FAE404394AC59E6CBB7420371D0719D3A0D7FF9ACAB033872FFAE713D6570137DB36657F55551F460AFDEEA7
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301437,17301439,17301442,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return function(){re

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=2
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	998
Entropy (8bit):	5.139676547935253
Encrypted:	false
SSDEEP:	24:Yh3LQ1IDoXuoT1xlfkdcJozc11IR+shdAP2EG:Yh3LLa5TfkcJYBR+sUK
MD5:	F0AFD05213F281EBC496557EF8B89CF6
SHA1:	D957F31D8EB0DBAD9C67AE3315D652AD5A6A46E0
SHA-256:	64FA8F04833F0C729D682BC925BAA3AD16B0CDEF090183E19EDBE967BB75FB15
SHA-512:	3266F43D09073AB8E734727638F40FE1EF8425230724DBB99FB019ECEA283DA001C421931982CDDF6A461EF99778834DE7454B2AC268204D01FEBA65B56D88AA
Malicious:	false
Reputation:	low
Preview:	{"untargeted":{"system":"PW","displayType":"ADS","dataSource":"INVENTORY","adSense":{"drid":"as-drid-oo-1885714186540894","channel":"non-expiry","pubId":"dp-godaddy1_xml"},"domain":{"rootDomain":"infoguard-switzerland.com","rootDomainFromBrowser":"infoguard-switzerland.com","rootDomainDisplayText":"infoguard-switzerland.com","expired":false,"expiresAt":"","status":{"internal":"ACTIVE"},"hasAuction":false},"lander":{"template":"PARK_WEB","banner":{"show":true,"link":"https://www.godaddy.com/domainsearch/find?key=parkweb\u0026utm_source=godaddy\u0026utm_medium=parkedpages\u0026utm_campaign=x_dom-broker_parkedpages_x_x_invest_001\u0026tmskey=dpp_dbs\u0026domainToCheck=infoguard-switzerland.com\u0026isc=GPPTCOM\u0026itc=parkedpage_landers","type":"DBS"},"ads":{"show":true},"i18n":true},"experiment":{"experiment":"parking_parkweb_ab_05","cohort":"pw_treatment","start":"","end":"","enabled":true,"data":{"channel":"treatment","utmCampaignDBS":"x_dom-broker_parkedpages_x_x_invest_b_001"}}}}.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	163
Entropy (8bit):	4.915973751308317
Encrypted:	false
SSDEEP:	3:t6WCFXFF/cBH8+hH0DDmJS4RKb58ZSFuH1NLQxL/VCUtqfvy6RLkqIv:t6DVRmdhU3mc4slvIcVqfaAS
MD5:	10C6B7C13682C17647A6C489C288C76C
SHA1:	70D9AD4CC493D1E1A3A3CB09A79FE0170D35CBF1
SHA-256:	58DA3AE9CE19E17AFA3789215603A8DC81435568851055E46E11C6ACEDEE27B4
SHA-512:	8D0F27650D842DF63B25502984F4CDEE67C5E7E55FD5AA1342B98A0F41B798889CBF5C7923EB6139F5FD41FF26E9E05DD9E324A0D240D4E016301E3DC77B5B07
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/svg/right_chevron_icon.svg?c=%23757575
Preview:	<svg fill='#757575' width="24" height="24" xmlns="http://www.w3.org/2000/svg">.<path d="M7.59003 18.59L9.00003 20L17 12L9.00003 4L7.59003 5.41L14.17 12"/>.</svg>.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (619)
Category:	downloaded
Size (bytes):	620
Entropy (8bit):	5.151818445302556
Encrypted:	false
SSDEEP:	12:qTE0L26zFtAiSTFzU1UgYTJ5HSQQ9WSPD3LLpVe2KPD3LqDsTbk:0E0LRzKTFjpn49WSVVpKSY/k
MD5:	E8F82F528FDC2C4C8623D403036C0DE6
SHA1:	6CCCCEED5D1E2C6BCB395C01919262A386620C7F
SHA-256:	7AD3AC99D3887B29AF20C4EAB1BB8BA4933499F063C1AEA50F88D1D250AB271C
SHA-512:	38079D190312C56E0902496452C004287B758F8A0F86043D72D0D79F80F86856925B5D7034C7F4BE95539E6B3A3DEE2DAEFF65A7A7F162010AAD661A1994D94D
Malicious:	false
Reputation:	low
URL:	https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=2
Preview:	<!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="data:,"/><script src="https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true"></script><script src="https://btloader.com/tag?o=5097926782615552&upapi=true" async></script><script>window.LANDER_SYSTEM="PW"</script><script defer="defer" src="https://img1.wsimg.com/parking-lander/static/js/main.36e19f48.js"></script><link href="https://img1.wsimg.com/parking-lander/static/css/main.ef90a627.css" rel="stylesheet"></head><body><div id="root"></div></body></html>.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	147
Entropy (8bit):	5.007439060898157
Encrypted:	false
SSDEEP:	3:t6WCFXFF/cBH8+hH0DDmJS4RKb58ZSFuHUOhQ9S9CuLRgLUYZv:t6DVRmdhU3mc4slvI69mCulFQ
MD5:	EB05A477007506DE65AF51D9C5831A57
SHA1:	56BEF565FC8F7D73B3F7AC1561C0D769A021E6EE
SHA-256:	09D04AE593BD4A4A7CFEDDC1473579584CD540B6B055283D817E1038C8ECCD01
SHA-512:	E3C987F27068F4CF4FCFC20141B7F7B1D8834C2B7E91B4A3ACD65E543A1F5271545AC1E2FA4DBEDD70FA026163CB9198EF846B75F2A727A40BBB0DA80EBB98D8
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/svg/left_chevron_icon.svg?c=%23757575
Preview:	<svg fill='#757575' width="24" height="24" xmlns="http://www.w3.org/2000/svg">.<path d="M16.41 5.41L15 4L7 12L15 20L16.41 18.59L9.83 12"/>.</svg>.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 81x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	1962
Entropy (8bit):	7.904375435319802
Encrypted:	false
SSDEEP:	24:bWAKTuL1ani4dVpXy0pmfSYsyVWYjIxxtCAI06evvmzNixK9zMBWHF+khxM3V+NA:bWR6EnhLmWvxxtCdgsNQKDlNhE+6ZTl
MD5:	EC4FB5D1FD5961313FE9DEC8A6169704
SHA1:	CA54D894992569481D77746F2D305DA80F5EA46C
SHA-256:	045667966E0501606C364E60B1FF78A3A4C0F04E0E2340B081B83D1669FB5078
SHA-512:	E739D789BBC858C252BD26FB20C97DA3E04722D9A4958453DE846B2B2312335B2D75124E8519CE83D111BD5EBFC3220EC93C54DBACA480A774DEBCD83418ADDA
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....."...Q...>E..H..QI.(.D....?n.U.....2-.....6.......]w.3...s>W.c?.}e?......>...>../T.`.n..rW......L.x.G.3....wo.$T.U.g.Y%..'$z..{../.h.y....A..Q.BO...Z.E.w...:{.....m..Dg.uE.)_S...;.],?... ......j.........q...Bd.....a....T.u....kH}..D...KX3..qn..r..];..{..Kk.J.....F.+p.....g{.y7.G.fZ.\....m..;.)...b/.z...?.).)Rg.$-.R..(+.7va.U..#..<.[...J.{...L..(....g.]..4Hp^..L....A.M.L%.%p.{..?..f....f... ..(K...Oe.:..S\|..1.dl..hU$..\.@H....Q.Gy.\R........@.,..~..... F.s..0..i......4.....d.).a$.B...;9.g....#........~O.I_...Bk...7?.{ir+5.'.h7.9..N9..C.....v.N..3.?yM9....A...9x.G+.sR^N.M.....9\O.=..>......9k.......l....."... .....Y...S.>2...i..7...H;.$.cC....x.XV..ja..=...9..h....%o..rd..u.'S../(.U....l..,,1...=X%......1..}V{L...PE.S%.L..R.T..`......N+.M.-.....C.j......S......N#......]<.....z.Y...#..4&,..t..;.L..A t5..HT.].Q{i.........0....U....1...].a.E...g...)b...S.......hwM..@..R.....-6.....jt;.6.g.x...B.-.SKU..F...8Pz.^I.?..:^#.hl3

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1132
Entropy (8bit):	7.737962737747392
Encrypted:	false
SSDEEP:	24:+Ed7GF7Ow+Gcuq5E7oRVzRiSTPLYyWlDJ4Xw3oxlgwymf:+EdyxFruEkRPfPkll1WPoTQ
MD5:	848A8D4823A2578CCC3311127FB40A63
SHA1:	AB03457825156A859DFBEC5AAB0FE00CFDCF8D8D
SHA-256:	E57B42114A2E1CEA6C03FD31A27B02B152FBF40A8B161DBDE171282F9A99EADB
SHA-512:	153D91DB9F02D77E6AE81EC261D79B0B03C13463667881365D0EDF796A8AB6368F2D21D71A960CAC7FC29493E222C6500C926D532A2C66A6CBA93D5CA79C8622
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/7022991917692339348?sqp=-oaymwEKCCAQICABUAFYAQ&rs=AOga4qmt3Y-oInHb_AW3_zKIlwczzZf5nA
Preview:	.PNG........IHDR... ... .....szz....3IDATX.._lTE...3.n.l..e.....#5h....R..I.!.01$D..(>h......QHx.QP)<..hlb.bH..1n...!...Bl.v.g{g\|......i...f....s.3..J..V..X.......Z..NK...(p........E..%.-`3p..."..b6.......?.N!".......a...\.R)...)A..c.8...b..D.Vf.o.>..e......o$.g.F..b}g..B$4p.x...K".y.x..1...-4Z),....7.\|...-..kj..{.h.k8.x.H....3I.<.....T..k.F...oS.....\|y..P..]D_>.\<..$.5H...K...L.F.X..@.G..........8v....p..B;......w.A.&3.)......lnd..{qsB..KL.e..ZcU....s..Qn.8I\|p..8..2....1.....4..O.]x.j.Z.F....[Z.......L.Q.g2.B..O.)%.....#.&\O...O...{.r.....,1.~.....d.o.....R.r....\LK.-@W...`]@.... ....^......v..XV.Z%.^A.a.T-y.T..c../dUK>{!-l...!@9XU.R.B.l`....\+.u.l8y..8.'h...c.\|..,n.6p.\.BJ....;.35.F@...!./.^L......H9.....8...K....6.z~g......h..j.4.........q1/H...U6....0 .!.....8h...Q-.@?0d..F8...(.@z<..X...JQ...\|....l.)..!de.\|.Xh#...:.+..\|..d.....o.I....M.a.N.6.@..`..BF@.....?c.....f.&l.......F..}....&....gxp.W..]4...}..BQ.u.2..W...E....7.L..v .."9>...x..U.[.#

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 139x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5300
Entropy (8bit):	7.963015958427043
Encrypted:	false
SSDEEP:	96:4isbaRCA5Y1BAZsYNrEiRKpX3vzbhOWUTj8psvT0QnR85szH/LjQ:caRR52KBwX3vzlEjNvTzRzzTjQ
MD5:	C686F778483D5AEA1A492EDD8548F88C
SHA1:	203A3E6D79AE2703FEFE770433CE17512CAE34B1
SHA-256:	83972221EF053C99F6F8F531E7A3D54568BAE8060E8B7C342D6A1FE1BFCB093F
SHA-512:	178A43D84B6E91A9332894F22D2FF947EF23773C90BF5D71E821C4E38C3F8CFB1BABDC7CE3408B5B802785AADB60073A0A93486BC54AF1B79BAB74032158DACB
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn3.gstatic.com/shopping?q=tbn:ANd9GcRmIM5zhyMyz2cvVSWcbaF2krM0hq8FPk2-ZBEowt9YO6vW_KN2T3x5fvmgl7yTKZCA6fnmyT7HXzeYPOrCMrogh0BQqQMQ2ug9FUTGOgA&usqp=CAs
Preview:	RIFF....WEBPVP8 ....PN.......>a&.F$!.!-tM....el......#.Z;.....oI.`....}\...W...A.....7R..o......^.7.?.......=....=...}..+............?..A.+.y.W...'.N..{.G...w.?F.Y...k.g.?................?..o.w......"...._...........~L...U.U....?..">...d.}.'.K.[.W..g.;.c."gc..W...s.....)....K?......^]..i7...X_.;\|FC......}.u...V.2......?j......{......7.....>.:f.8:r..u].z........uM.%...=q..q.I.{.H....'..9.......x)..).xWk.w'.....V2{ .bQ.c6q...........j.6$S.....yj....)[Sw.?........u..6. .;.N..iw..f...8..\|..o1..S.B.....\|...'..!.v3.}.,..Q:_k..:h.t.e.p......p....^x...U..}....&...^` .V\|..7..........%~.T5#.`:...\|-..pp.8^=.ad#.[,.Z..........( ;...<.J:..t...Z..Ro.=.#........fL.<..P...,D..L.q+v.9.w..._..CPK.....c......,.m0....cJf..L....!7..).z5W...3G...4j.\|.T....p......2...o....#F..5.9.E....&.....7dm.....U...H...jK........zO..5..0..i.{.$.....Z..B..j..mC..X^xg.....@6=......\.b.u.d]-.y...........c.3J...N...M0N..}"T%....S....\|=...VW.K....eZ.0.p.u..y\Y..

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	dropped
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (619)
Category:	downloaded
Size (bytes):	620
Entropy (8bit):	5.151818445302556
Encrypted:	false
SSDEEP:	12:qTE0L26zFtAiSTFzU1UgYTJ5HSQQ9WSPD3LLpVe2KPD3LqDsTbk:0E0LRzKTFjpn49WSVVpKSY/k
MD5:	E8F82F528FDC2C4C8623D403036C0DE6
SHA1:	6CCCCEED5D1E2C6BCB395C01919262A386620C7F
SHA-256:	7AD3AC99D3887B29AF20C4EAB1BB8BA4933499F063C1AEA50F88D1D250AB271C
SHA-512:	38079D190312C56E0902496452C004287B758F8A0F86043D72D0D79F80F86856925B5D7034C7F4BE95539E6B3A3DEE2DAEFF65A7A7F162010AAD661A1994D94D
Malicious:	false
Reputation:	low
URL:	https://infoguard-switzerland.com/lander?query=Custom+Folders+with+Pockets&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1
Preview:	<!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="data:,"/><script src="https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true"></script><script src="https://btloader.com/tag?o=5097926782615552&upapi=true" async></script><script>window.LANDER_SYSTEM="PW"</script><script defer="defer" src="https://img1.wsimg.com/parking-lander/static/js/main.36e19f48.js"></script><link href="https://img1.wsimg.com/parking-lander/static/css/main.ef90a627.css" rel="stylesheet"></head><body><div id="root"></div></body></html>.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59530)
Category:	downloaded
Size (bytes):	59531
Entropy (8bit):	5.416908367760983
Encrypted:	false
SSDEEP:	768:bemBuCcWzxP2UozEk3bU0Frg0G6vHWLdDrJVDQEPXqHC/uPNYXXCALmpyGdUwUnJ:zurO3GDrgIQDCAL1sUwul
MD5:	C12136CBA2FE1C0FE21D1ED2111E327C
SHA1:	B19F45E611ED088A922038815AB769166BE10830
SHA-256:	AE7B6A565832E2F85E1D88E4A01794B6614E1F44D076BC2E63326367F0B4B40F
SHA-512:	76AE101D47AD16DF08C94F948A5241FC4DD998003435794F94A8012737B925B118E7490D28463B0FDFA730688988A5F970074EE9293C34CE3EFAC16519AF7CF2
Malicious:	false
Reputation:	low
URL:	https://btloader.com/tag?o=5097926782615552&upapi=true
Preview:	!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e,t,n,s){return new(n\|\|(n=Promise))((function(r,i){function o(e){try{c(s.next(e))}catch(e){i(e)}}function a(e){try{c(s.throw(e))}catch(e){i(e)}}function c(e){var t;e.done?r(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,a)}c((s=s.apply(e,t\|\|[])).next())}))}function n(e,t){var n,s,r,i,o={label:0,sent:function(){if(1&r[0])throw r[1];return r[1]},trys:[],ops:[]};return i={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function a(i){return function(a){return function(i){if(n)throw new TypeError("Generator is already executing.");for(;o;)try{if(n=1,s&&(r=2&i[0]?s.return:i[0]?s.throw\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1030
Entropy (8bit):	5.065659262849548
Encrypted:	false
SSDEEP:	24:Ya1jyVeku1jyVekxJ6VjLU6OemW/n6K+IPs:Ya1mV41mV+iW/n6K+qs
MD5:	FC4BD7C7EE62CE9303D57A034BA1C344
SHA1:	4BE9AFDE026F2539FDD14992E89E292C8EA3D2DF
SHA-256:	4C7CE2D2CA11A4E6D6564ECB174C37371A9F101A8648CCC981010DF749974B80
SHA-512:	21D722C81630FF1296ACD6B091753BE1BE0E62D5631358AE1D0092589B90BC7317B8FD6938079DDF00EB8D5E125D50BDA7B9985E03C89B8DF6B2FB947328EFBE
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/trustbox-data/5419b637fa0340045cd0c936?businessUnitId=483fd2b90000640005029919&locale=en-US
Preview:	{"businessUnit":{"stars":4.5,"trustScore":4.6,"displayName":"GoDaddy","numberOfReviews":{"total":107921,"oneStar":8781,"twoStars":1267,"threeStars":1745,"fourStars":5157,"fiveStars":90971},"websiteUrl":"https://www.godaddy.com","identifyingName":"www.godaddy.com"},"businessEntity":{"stars":4.5,"trustScore":4.6,"displayName":"GoDaddy","numberOfReviews":{"total":107921,"oneStar":8781,"twoStars":1267,"threeStars":1745,"fourStars":5157,"fiveStars":90971},"websiteUrl":"https://www.godaddy.com","identifyingName":"www.godaddy.com"},"reviews":null,"links":{"profileUrl":"https://www.trustpilot.com/review/www.godaddy.com","evaluateUrl":"https://www.trustpilot.com/evaluate/www.godaddy.com","evaluateEmbedUrl":"https://www.trustpilot.com/evaluate/embed/www.godaddy.com","consumerWebPageUrl":null},"starsString":"Excellent","translations":{"main":"<span class='score'>[RATED]</span> <span class='text'>out of 5</span>","firstreviewer":"Be the first to review us on"},"settings":{"customStylesAllowed":tru

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	downloaded
Size (bytes):	153223
Entropy (8bit):	5.5437637967096665
Encrypted:	false
SSDEEP:	1536:Cni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:OqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	C875D08DB819C6BD95956ED168ABAE89
SHA1:	C5784C32F97B5A264C33D2C72127DA98C9D7C41F
SHA-256:	0667AA014554DEF8BAA63E171F87E26A7A567DA7F92FA6CB8369D32446958B35
SHA-512:	E9391F0090891CA7FC87AB3F319656E37B7AEFA7CCE4E725328365FE5865CE2DE6312416860B778FB83D07ACBCF2BCE007A9EB003F9AC7F5191FE60CF0951233
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;retu

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (12951)
Category:	downloaded
Size (bytes):	13578
Entropy (8bit):	5.293145266851993
Encrypted:	false
SSDEEP:	192:2E12iMpgbBIMYO0YfOeV4OlWrzBOLagp+sOb:2ni0RMZEeRlqnggsOb
MD5:	CD30DC58825F096EE2AA44CBB974CB5E
SHA1:	FDDA738C1B90C97A6A99E46C8ACA8FAAD1E42B84
SHA-256:	B9CF177983A7E6999C1A810A9738708362AC0EE6385D1C4F6EEF0977338545F3
SHA-512:	EBFB21F6437630B9C9AC48C07C5474E62CC77687834271E668E26000EC9AA9251219D1548EAB00228A238F8A0840A3F12A37651E508EB6A802B7BA59B83F2CF7
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=infoguard-switzerland.com&client=dp-godaddy1_xml&r=m&rpbu=https%3A%2F%2Finfoguard-switzerland.com%2Flander&type=3&uiopt=true&swp=as-drid-oo-1885714186540894&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=r3&nocache=9201727736431066&num=0&output=afd_ads&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727736431068&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=907&frm=0&uio=-&cont=relatedLinks&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Finfoguard-switzerland.com%2Flander&referer=http%3A%2F%2Finfoguard-switzerland.com%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	171
Entropy (8bit):	4.99164110946794
Encrypted:	false
SSDEEP:	3:t6WCrSrwvDmJS4RKb5sAR+bIAG7dScHaZfPRFUV6d+GsMQ5rxXEREhfgW:t6h/mc4slhobIAKRaFNzQ5rREyN5
MD5:	4D5C5B51837AC556B931A2D38B6566D2
SHA1:	AB94B7F0E1881E6C5475EE14EC37AAB254F64542
SHA-256:	FCF552DAEECA47E67A22CE6EDA8EE35C5F0DF67CDBFA5CD5AD8C33055C300A34
SHA-512:	BE0FDE7A0D261AA92AF89DF904A47A88973EA4B855D7119E3FDB84E42E81AD7CFA059754273E816386AAC3536A71DE2D0CA96072D206D0251DDB8DE33FAFE233
Malicious:	false
Reputation:	low
Preview:	<svg fill='#D7D7D7' xmlns="http://www.w3.org/2000/svg" height="48" width="48"><path d="m24 40.55-3.35-3.4 10.85-10.8H7.45v-4.7H31.5L20.65 10.8 24 7.45 40.55 24Z"/></svg>.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (33757)
Category:	downloaded
Size (bytes):	78911
Entropy (8bit):	5.5170573600738875
Encrypted:	false
SSDEEP:	768:2i01TDBJKJmUJ8MYzQqbNhhRxiNqPau1VBYGrpqHAkqrLfaLcUhLiPz0n1hofkoP:QgmzFbv501CXaS1UkBWi9
MD5:	21673FAED3F38E8F49027F15367D0485
SHA1:	898245A067C3DED17750E9D1BBD31D8731EA3D2A
SHA-256:	2DAC8BF979AA83EAA499AED0BBB754A4C1B6103EE83B41373F375365CD461E87
SHA-512:	CFF8EE6181517C674212E9B03693663031B4D3A26D5AB6529694BD27C1B1CE6D8AD54C91BF9C922B979FE1FF89A481D4BE60BC8FBA77CE2BEC5EE114C751DFE2
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=infoguard-switzerland.com&client=dp-godaddy1_xml&r=m&sct=ID%3D57aed5ead6c1e5c0%3AT%3D1727736433%3ART%3D1727736433%3AS%3DALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A&sc_status=6&rpbu=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DService%2BLabels%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D2&type=0&uiopt=true&swp=as-drid-oo-1885714186540894&q=Service%20Labels&afdt=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=9571727736455062&num=0&output=afd_ads&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727736455064&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=907&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DService%2BLabels%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D2
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 30480, version 1.0
Category:	downloaded
Size (bytes):	30480
Entropy (8bit):	7.9929154993736145
Encrypted:	true
SSDEEP:	768:YE3aTX6k4q5zBwxMiWJPq8+qYmAWE+5hbhPUI3I:YE3AiqZBwoy1qYTURpUI4
MD5:	0E7E5F9D3A8EF121149827180B790B5C
SHA1:	0E9F9333078E5DF9245630FF6F68BA1D9DA3C403
SHA-256:	E8E147E15907F25CAD69B2BCF060213EFAD4ED04E0D36374715CBCA17B2AFC1C
SHA-512:	E6FB4856D43AC4D2DDA6B7FEFC89FE5E8D446BBB3FE187CFE1F49C8E24CC5A76BAB505D5B6E7E70B84CAA67D0052F02B136A9E99B5637AE19873D382E0432A16
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jsGyN.woff2
Preview:	wOF2......w.......!...v............................T..2.`..V........#.....\..n..,...(.6.$..T. ..d..X..9[[.q.k..W}.....5{Z._0....(.5TeDp.@T..9......".i7m.....?...2A.#).\..`..D.....e..`UM.mp.....^.O4y...k/Q...8..c..a.+"&0...\|......)}0.1'0..1.z..lL.R:..6N.z..Mk.+M\+[\|Q.e.a.....]{.J......Y..7.O...<.z.fzDW.&...B.....t...%..p.Oq.%..Yu3m....-.....-..E.O.K..b.....0:,......h?....U.Lt..k.D.P.........y.{....T`...h...d..E. M[.i..&0.ev.j.B....../..O.\.f..I....i6....h......)m.b.-J......K]e.._.."..._...W.....b9...<.......)1.:Q..0T".q..YS.._.L+..Z......Z!....@.q...A.?KP.k\.T..{.I..X.Ri.b..WgJv...V~.9. ..K.P*..o...5O.:..-o...;....<.+?. ...n....'.`.^. ..A%S..&..{....p....]..g...(...r..s.%y........>.../9.P...Z.....JT..%.c.n............n{.....[r.M!f.6...=q..o..w.J....+..(...B.`>...KE.6..=?{.o%.`....R..mt.4.".....1M....c5.n4D...k....NA.....3.6.....W..5..o\|9..Q.V.7]./..#..Z. .$...`4^.J^.........../...v....^....G.o...@..........b.-../9....0..t.........6...../.,?

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	147
Entropy (8bit):	5.007439060898157
Encrypted:	false
SSDEEP:	3:t6WCFXFF/cBH8+hH0DDmJS4RKb58ZSFuHUOhQ9S9CuLRgLUYZv:t6DVRmdhU3mc4slvI69mCulFQ
MD5:	EB05A477007506DE65AF51D9C5831A57
SHA1:	56BEF565FC8F7D73B3F7AC1561C0D769A021E6EE
SHA-256:	09D04AE593BD4A4A7CFEDDC1473579584CD540B6B055283D817E1038C8ECCD01
SHA-512:	E3C987F27068F4CF4FCFC20141B7F7B1D8834C2B7E91B4A3ACD65E543A1F5271545AC1E2FA4DBEDD70FA026163CB9198EF846B75F2A727A40BBB0DA80EBB98D8
Malicious:	false
Reputation:	low
Preview:	<svg fill='#757575' width="24" height="24" xmlns="http://www.w3.org/2000/svg">.<path d="M16.41 5.41L15 4L7 12L15 20L16.41 18.59L9.83 12"/>.</svg>.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	163
Entropy (8bit):	4.915973751308317
Encrypted:	false
SSDEEP:	3:t6WCFXFF/cBH8+hH0DDmJS4RKb58ZSFuH1NLQxL/VCUtqfvy6RLkqIv:t6DVRmdhU3mc4slvIcVqfaAS
MD5:	10C6B7C13682C17647A6C489C288C76C
SHA1:	70D9AD4CC493D1E1A3A3CB09A79FE0170D35CBF1
SHA-256:	58DA3AE9CE19E17AFA3789215603A8DC81435568851055E46E11C6ACEDEE27B4
SHA-512:	8D0F27650D842DF63B25502984F4CDEE67C5E7E55FD5AA1342B98A0F41B798889CBF5C7923EB6139F5FD41FF26E9E05DD9E324A0D240D4E016301E3DC77B5B07
Malicious:	false
Reputation:	low
Preview:	<svg fill='#757575' width="24" height="24" xmlns="http://www.w3.org/2000/svg">.<path d="M7.59003 18.59L9.00003 20L17 12L9.00003 4L7.59003 5.41L14.17 12"/>.</svg>.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	5.322783336176378
Encrypted:	false
SSDEEP:	6:wBqWekiTakpxxdGztoIhS3EaXqnRCsDPLCmKyj4bcaS3jfU0cMOj6WT:dkK9dg5qEaXScy3jf4B
MD5:	AB0A80E1DE146DA4A9F85ED3D661D595
SHA1:	373E6BE21590A868950417A9469C802868477BCB
SHA-256:	54246DEEB2A99F8E6BF32C43C39D637A6CDAD0F3BCB24504CF51C648F6EB9FE5
SHA-512:	C398FA38107F5AA343E47077FA09AFF288635374268C594D2EA3342938B4F88B77CDCC593DF48CE13E7E12C0772A65C4782B92C7851372A0764AD27D26CC1C1A
Malicious:	false
Reputation:	low
URL:	https://www.godaddy.com/favicon.ico
Preview:	<HTML><HEAD>.<TITLE>Access Denied</TITLE>.</HEAD><BODY>.<H1>Access Denied</H1>. .You don't have permission to access "http://www.godaddy.com/favicon.ico" on this server.<P>.Reference #18.9cf01002.1727736442.51ff7b5.<P>https://errors.edgesuite.net/18.9cf01002.1727736442.51ff7b5</P>.</BODY>.</HTML>.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 55734
Category:	downloaded
Size (bytes):	17138
Entropy (8bit):	7.985486819045762
Encrypted:	false
SSDEEP:	384:1bXp9pe0GiXw9f00mCbhwBnI9gX4yCq0Pj3IBaINXBUw:15MHmCbhwjCBEBFX6w
MD5:	732769F238A36CB44705F2D6A18312EE
SHA1:	4145A129B7285EF794924619940D72DB4C03F1A0
SHA-256:	AC450BC0F8F949594349262A4F1AFCCD1B1B2DB4B8AE231BEB3D23F673120035
SHA-512:	4AE2753606AC2DC30D53DDC78FE1D233ADC8F2DA8727629A73F8B28B9EA2B458511043F38ACFA8EBEFAFBCA2D92F9B3EE1B80761C1C892DE6BFA2D0E19C375D5
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/main.js
Preview:	............v.F.'..<..>c.-...B..8.d.3r.....u. ...!......\k.d....{....W...U...)..;.V.{ED.P.k............6...\|T..#3...i....w...QvZ.._...N.Q>.TWm6.o.iq1...de....qD..2....(..,...m).....<..}U.E9.'y^..,_.V.b.LGO...@{..9/..L{.._~<....~..w?~......@..o.EYW... .O.3s.,.......1......>;M..K.......!0...i&us{...;........ib.....:J...j.`V.H........H.6r.N.T..l^kGc.H.....MU..eQ......d...brQ&...(..t.[^..W.L.1Vw.~.O.h{f8.o......ym.RP-..,.iY.sC{.&.^2.5.,...G.V.jw..]..b......(.4.(........?..Yz...jzU'....n.-.7..h.....:{..Sk#&If.Vh.....F5....I..W.+..tc.t+........#.-.R...8....d....v......<Lb.....w...].n.j..ak6..&.3}...X;...!..ww[.lY..i.......u.K.S..L.E..u.O.N=. .3..........7...N^~......W.........99.c].W..~Y..b..eUo.o...j...A... ....Q....f.9.J.g..eR_......O..X.s..Qo...K.evVzU.kP.D[....<...;5V..C.oWS..e....."J).z..f.........\...w.r9-.ER'..6.yZUS..R..z.....}.........O.....7...;..<.....(Mt,.].y...7i.<..).Nl.=m.....d..U.M^.S.Z/.Z...]#....b..}..&?:...j].U

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1767
Entropy (8bit):	7.859401496657763
Encrypted:	false
SSDEEP:	48:zStOOHoqELIPuS18i89GpYKa7zvp4uMCyrZSfaDFQ7:zSzs8PuS184Da7zauty5By
MD5:	EE5DF4FAF46CFE7A2EA13ADAFC0E8DC7
SHA1:	ADEB9317F2D8DFC3AC169EDC55B4BE9CD7EA0202
SHA-256:	43A870FE0EACA4784F8CA36AF90231120A3D682D1538450F82670B660093FF92
SHA-512:	5C4DBFA4E4AE0A8A658311712CFDFB71DB78DF4B4B04CAE59AA505190CD2CB040521CE5FC286A147DAC3F78B527D8245BF1C78671F9DE485EC50F850BF8A4A91
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(......./:....IDATX...{X.U........c...x.-o....&...%..(%^"..I.Z.$%...y.k$..>.4.....G+..\|....cl.6.}o..'.w7..._;....s.y.......8...n...l..@H.=..c2.Ayp....J.VV^.kY.)Y5.......`s:...a`..O.6u....\N.`......\|..@Vz7L.d.... .....f..h.h..W,.s..)cF.....\..y.....d...hr8......I(J..dEQ..Y....g{6.....G.RS.....Q...3z..e.TV^Q]RV-.G.L.I!ad.."8....T.r.Xv...A.Lfkc.NvV:{.A.W..<]R...u.8...Nif......jU6.Z..Z.........J"D...K..p..q\...!).....G..Z..ox?.[..^..Vrv...^....R..~....f....Z..C.LB.<v.. ./...9o`.=..)..\.w..%U..2.#....D$..##3'@v.......?`.pZ.J"....._........%f..F_......~...........Z... ...ff}...?.u....;6.V[.....d5qT`.C./?x........z} `....7~..q.P....{......-........?.............l6... }.W.k...6.J<$tQ.fu{._K..U~..+.....8N^.......a....Y}..b...o....4......X.V..}N......*.<..3..,+..k...W....Wn+...t....j..>....{>.....m..;(....Ts_..`..DQ<V..0.Xmv..'..+....0L.u.=4v..`~.FY...B.............d...P......Z+7.')...&KP......5Ng.)..F.HK1.\[4.5y...t..t.t:.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59530)
Category:	dropped
Size (bytes):	59531
Entropy (8bit):	5.416908367760983
Encrypted:	false
SSDEEP:	768:bemBuCcWzxP2UozEk3bU0Frg0G6vHWLdDrJVDQEPXqHC/uPNYXXCALmpyGdUwUnJ:zurO3GDrgIQDCAL1sUwul
MD5:	C12136CBA2FE1C0FE21D1ED2111E327C
SHA1:	B19F45E611ED088A922038815AB769166BE10830
SHA-256:	AE7B6A565832E2F85E1D88E4A01794B6614E1F44D076BC2E63326367F0B4B40F
SHA-512:	76AE101D47AD16DF08C94F948A5241FC4DD998003435794F94A8012737B925B118E7490D28463B0FDFA730688988A5F970074EE9293C34CE3EFAC16519AF7CF2
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e,t,n,s){return new(n\|\|(n=Promise))((function(r,i){function o(e){try{c(s.next(e))}catch(e){i(e)}}function a(e){try{c(s.throw(e))}catch(e){i(e)}}function c(e){var t;e.done?r(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,a)}c((s=s.apply(e,t\|\|[])).next())}))}function n(e,t){var n,s,r,i,o={label:0,sent:function(){if(1&r[0])throw r[1];return r[1]},trys:[],ops:[]};return i={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function a(i){return function(a){return function(i){if(n)throw new TypeError("Generator is already executing.");for(;o;)try{if(n=1,s&&(r=2&i[0]?s.return:i[0]?s.throw\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (13179)
Category:	downloaded
Size (bytes):	28750
Entropy (8bit):	5.378557853755531
Encrypted:	false
SSDEEP:	192:2E12iMpggAoBr8ror1TweOc66hpCRK6KsIsdbTfN6sJxAb5AbmjwFAbFsHyHEdTs:2ni0J+C1TweR6YpCh5dbJmgm004wB8Ot
MD5:	59CF4580785C249D71D38FFDB14F9CF2
SHA1:	2265975BFA9D46D2D8397C9ED38526824638BBD5
SHA-256:	FE3F359CAA4559AA665CC5EF146532DDB06CD2CE012B3AC38523BE2EB19504C7
SHA-512:	7C700134D64FE9F9FE3D11987BDAE6691FADA356D211E31AF2E1C8355924E2D10F05AAC8D94601E9529159A9FD9A3A640FE0205A06FCBD89B829FB912F04AFA8
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=infoguard-switzerland.com&client=dp-godaddy1_xml&r=m&sct=ID%3D57aed5ead6c1e5c0%3AT%3D1727736433%3ART%3D1727736433%3AS%3DALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A&sc_status=6&rpbu=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DDisplay%2BBoard%2BSoftware%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&type=0&uiopt=true&swp=as-drid-oo-1885714186540894&q=Display%20Board%20Software&afdt=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=7431727736463258&num=0&output=afd_ads&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727736463259&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=907&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DDisplay%2BBoard%2BSoftware%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	4.734751697115265
Encrypted:	false
SSDEEP:	6:t6FNmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6FNFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	6751E07E0F93BD43AB90822F4B2EB62A
SHA1:	D1D0C6F0B4697B0A4E61FFBF171E8C60EAC7C832
SHA-256:	FF563F41765DA081FE9FD40E8BB33A623DF033B10050A8AE8C1B46E15107D8F1
SHA-512:	A00080E16354A0193A31CB848CBBD81AFEBF9253BECE0B81003027FD9435A060AF56C520D0C003D91086105616CF0511F54C12CFBDA261FE917D054AEF8B0C79
Malicious:	false
Reputation:	low
Preview:	<svg fill='#1967D2' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 140x78, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	3566
Entropy (8bit):	7.947650251477354
Encrypted:	false
SSDEEP:	96:lBUoRdTk4BYfBgFkM/XdANI0aXqqQdNFHwoCXVtSlWK4q:lBUoRdA4BYfQXdn7aqQvGHVK4q
MD5:	C84308916166AB840004203E9968A5F6
SHA1:	01C4D899F2CA73875F8F2122060FEB88326F5E6D
SHA-256:	53C8F72CB44518EA69A657EB463B07AA1EBAE3AEE3D30AD804700B73ABECDEC2
SHA-512:	23DE9386792DF88FBAAEC1B6F46EC7486C00BA7E8627A888E15405C14B7A8A0D1637804CE8E86B3788E851EC0DAE9F16DEC2AE2939D32145AD1E8B5817F4BE5E
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....2.....N.>q..N$.$..0...l...9.l.....[..}I...?...3...'....P...B..]....?..L....A{..{...u..G..yk../.....~9......w.h?.}.=..o....Q;......M..@....=X..........................3.u......{....\=(3\|..?...K...(.ef..(>o.@.....WO.uB.0.k........k."V7X..R..Z\..!F.#8..X;b....0w.).!1.6....fj'.....i.>...v.....&..u...2..b.$f.D.7F.l..nZ0....U..n...#..L{..2.:cB..3.0....&U.f.2...x..o..y]M...:.6..0T.z...Du.J.v\|)S?.20......?.m5...ps..O.;.4c.v....CZ-]..$.L.......c........c.f./......cE..d1...e.4ST.~.......A.../.I..._...T.i.w..z%M....f.q>.0=E6....r.J..m5...Y....k3.X....cr....s..5.}p.0....p+.........s.n.7..R3n.#S.....(..}c......t...;".$.v..P..D...^..'..Tl.P...Z....V.......8].Ez.....F.`..(..!......f.....n.cS..Z...p.....s..k..{.L..Wa..}r...q..}...pc..-.( .C..d.6.._./.be.SV....b+)..._T..Yo...i...;..r..[...q..".......[.0......-n..EK..4......4\.=...j.x..Z{..I@...q...o.=.+.&.O.......\|..5.rTy..w...9.o[[.<....s..D..L."........QSp....p...)%....j.jd(....z.(..

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (619)
Category:	downloaded
Size (bytes):	620
Entropy (8bit):	5.151818445302556
Encrypted:	false
SSDEEP:	12:qTE0L26zFtAiSTFzU1UgYTJ5HSQQ9WSPD3LLpVe2KPD3LqDsTbk:0E0LRzKTFjpn49WSVVpKSY/k
MD5:	E8F82F528FDC2C4C8623D403036C0DE6
SHA1:	6CCCCEED5D1E2C6BCB395C01919262A386620C7F
SHA-256:	7AD3AC99D3887B29AF20C4EAB1BB8BA4933499F063C1AEA50F88D1D250AB271C
SHA-512:	38079D190312C56E0902496452C004287B758F8A0F86043D72D0D79F80F86856925B5D7034C7F4BE95539E6B3A3DEE2DAEFF65A7A7F162010AAD661A1994D94D
Malicious:	false
Reputation:	low
URL:	https://infoguard-switzerland.com/lander
Preview:	<!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="data:,"/><script src="https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true"></script><script src="https://btloader.com/tag?o=5097926782615552&upapi=true" async></script><script>window.LANDER_SYSTEM="PW"</script><script defer="defer" src="https://img1.wsimg.com/parking-lander/static/js/main.36e19f48.js"></script><link href="https://img1.wsimg.com/parking-lander/static/css/main.ef90a627.css" rel="stylesheet"></head><body><div id="root"></div></body></html>.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	downloaded
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 139x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	5300
Entropy (8bit):	7.963015958427043
Encrypted:	false
SSDEEP:	96:4isbaRCA5Y1BAZsYNrEiRKpX3vzbhOWUTj8psvT0QnR85szH/LjQ:caRR52KBwX3vzlEjNvTzRzzTjQ
MD5:	C686F778483D5AEA1A492EDD8548F88C
SHA1:	203A3E6D79AE2703FEFE770433CE17512CAE34B1
SHA-256:	83972221EF053C99F6F8F531E7A3D54568BAE8060E8B7C342D6A1FE1BFCB093F
SHA-512:	178A43D84B6E91A9332894F22D2FF947EF23773C90BF5D71E821C4E38C3F8CFB1BABDC7CE3408B5B802785AADB60073A0A93486BC54AF1B79BAB74032158DACB
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....PN.......>a&.F$!.!-tM....el......#.Z;.....oI.`....}\...W...A.....7R..o......^.7.?.......=....=...}..+............?..A.+.y.W...'.N..{.G...w.?F.Y...k.g.?................?..o.w......"...._...........~L...U.U....?..">...d.}.'.K.[.W..g.;.c."gc..W...s.....)....K?......^]..i7...X_.;\|FC......}.u...V.2......?j......{......7.....>.:f.8:r..u].z........uM.%...=q..q.I.{.H....'..9.......x)..).xWk.w'.....V2{ .bQ.c6q...........j.6$S.....yj....)[Sw.?........u..6. .;.N..iw..f...8..\|..o1..S.B.....\|...'..!.v3.}.,..Q:_k..:h.t.e.p......p....^x...U..}....&...^` .V\|..7..........%~.T5#.`:...\|-..pp.8^=.ad#.[,.Z..........( ;...<.J:..t...Z..Ro.=.#........fL.<..P...,D..L.q+v.9.w..._..CPK.....c......,.m0....cJf..L....!7..).z5W...3G...4j.\|.T....p......2...o....#F..5.9.E....&.....7dm.....U...H...jK........zO..5..0..i.{.$.....Z..B..j..mC..X^xg.....@6=......\.b.u.d]-.y...........c.3J...N...M0N..}"T%....S....\|=...VW.K....eZ.0.p.u..y\Y..

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 81x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1962
Entropy (8bit):	7.904375435319802
Encrypted:	false
SSDEEP:	24:bWAKTuL1ani4dVpXy0pmfSYsyVWYjIxxtCAI06evvmzNixK9zMBWHF+khxM3V+NA:bWR6EnhLmWvxxtCdgsNQKDlNhE+6ZTl
MD5:	EC4FB5D1FD5961313FE9DEC8A6169704
SHA1:	CA54D894992569481D77746F2D305DA80F5EA46C
SHA-256:	045667966E0501606C364E60B1FF78A3A4C0F04E0E2340B081B83D1669FB5078
SHA-512:	E739D789BBC858C252BD26FB20C97DA3E04722D9A4958453DE846B2B2312335B2D75124E8519CE83D111BD5EBFC3220EC93C54DBACA480A774DEBCD83418ADDA
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn3.gstatic.com/shopping?q=tbn:ANd9GcS4gYJi9mKNHJ-2UIneZuZKKZt_msV3imHGo6yWKPYBKzeVEZdh-vcexdwS8fsxu4W_1qTewRddBZhRERAuELExJFdsFN79PIlD_DLbF9-IBP3VOfCfTlY&usqp=CAs
Preview:	RIFF....WEBPVP8 ....."...Q...>E..H..QI.(.D....?n.U.....2-.....6.......]w.3...s>W.c?.}e?......>...>../T.`.n..rW......L.x.G.3....wo.$T.U.g.Y%..'$z..{../.h.y....A..Q.BO...Z.E.w...:{.....m..Dg.uE.)_S...;.],?... ......j.........q...Bd.....a....T.u....kH}..D...KX3..qn..r..];..{..Kk.J.....F.+p.....g{.y7.G.fZ.\....m..;.)...b/.z...?.).)Rg.$-.R..(+.7va.U..#..<.[...J.{...L..(....g.]..4Hp^..L....A.M.L%.%p.{..?..f....f... ..(K...Oe.:..S\|..1.dl..hU$..\.@H....Q.Gy.\R........@.,..~..... F.s..0..i......4.....d.).a$.B...;9.g....#........~O.I_...Bk...7?.{ir+5.'.h7.9..N9..C.....v.N..3.?yM9....A...9x.G+.sR^N.M.....9\O.=..>......9k.......l....."... .....Y...S.>2...i..7...H;.$.cC....x.XV..ja..=...9..h....%o..rd..u.'S../(.U....l..,,1...=X%......1..}V{L...PE.S%.L..R.T..`......N+.M.-.....C.j......S......N#......]<.....z.Y...#..4&,..t..;.L..A t5..HT.].Q{i.........0....U....1...].a.E...g...)b...S.......hwM..@..R.....-6.....jt;.6.g.x...B.-.SKU..F...8Pz.^I.?..:^#.hl3

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7751
Category:	downloaded
Size (bytes):	2114
Entropy (8bit):	7.905881336427597
Encrypted:	false
SSDEEP:	24:XzI6AOrIeZrjeWHi+fNS3QhLncJeZn92iNF4sG0I8lrOVGIY6kAm5RlBJHZMAr9J:XU2Eeljkq7JNF4d0n5OsI+b97wDPq
MD5:	BBD26C541B063878DDDB6095C1F82221
SHA1:	AD7402097C8A410E880016BF77B037E2DEF9A09F
SHA-256:	D7CC9429D7DDDE82E2F3D9390E483CA72489B153A4356A401456411D5B40FA9A
SHA-512:	B2A65FC9D7F020231290BE91F49A05C4C41225DB23BD22D9C1CFD88BDCA2D855DA165216DB65F520832848A54747C6245B5D7327FDA3561B529D715B6EA95DA3
Malicious:	false
Reputation:	low
URL:	https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919
Preview:	...........Ymo..........Jl'vr.w..z...h....J.,n(R!)'>...C..,....-.YQ.r...3..........Qfr...z ..(Il....N?..Jm..A?AK.._,YQ.........(M.Qi..~..}. 9.0R2.F.P,......DB_....X....d...[c]..IQpj..>..`......8...-.f8...G\.O.4...b.I.)Lb%.&.$I...Gl.c.cb.P.P..T`.c..0..?F.~..k..X.s..b..>.Xa]F.W`c.(...3..ZT.....$Xr\r..N......R..$r.."..D.p..0).qj.TJ....6...$.(.b.J4K...&.......M@.........d.+%.sNE..YcY..4X...k0....<'.00.0..1).&....m$.0.....2.Q.{.4.........Z1....7.+h..EOx@8[.0".r&.T...@..I=j...M.`gM..R...Uf...9..4...... ..y.....0..;....ZLO-.......F....9_.6.b.9)4...&@...j...)...._(_SkI.7Z...w@.O...OM..4x&...../.....se...xwe...-.@....r.......wh.p.....!.{\|......t.ck[.`.t.K..l.L.;.$....Q.C.Pl.D.'A.;....-.]+4.........""A.A.......E.....K<D!..kz....J...........?....5..u(C..*cIB....O>.nM{=)X+"....Z..E!5.+<$...4tad.(`).....'.^.@.....{.0.9+..!d..+td..n.6......Vy...[."....b..,.....=\|E. .....+JE..9..$.fu.^........X.........Y.6....[.Z..8..I...,A..-...H])......[...NR.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/afs/snowman.png
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 140x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3098
Entropy (8bit):	7.937714156145729
Encrypted:	false
SSDEEP:	48:gYqZUEi1RaQJxJGAZXk3Fk9jGfcDl5JyiqTRnTDSkoNJgACgL5/f+0hy:BWS1R/TGAZXom+cDlKiqdqJgAT2N
MD5:	04ED3CBB441A7240AA6BA2D65FE798ED
SHA1:	F6A514524DC19A179F58F3F0C790EFBD2A591245
SHA-256:	8DE596E4D86BC2E40C435ECEB7E56CBB2BF2993317FF344A5AE6B3BDC7BC6F58
SHA-512:	D75B0A76EDEDE8C91F13F86529EC5180DF9F0FD246F1424FC7FD1C9D18E26FC6E22639199C6F003CCA1C9A34E7C909ED2C6541EF0EE223357F1D18325988156B
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn1.gstatic.com/shopping?q=tbn:ANd9GcSFaPVl6VmNPazIB-Vd5yvtv_rmxo-FiYy6NeKV5eu3ZkypKzLIReRS7njvtLRkMP1tl84qG_Zr5SLjUjB_7OVR2RBA5MMrB0rQbkqV0KbR&usqp=CAs
Preview:	RIFF....WEBPVP8 .....5.......>M .D".!.Z.p(...gu)..N?G.W.S....x........w.g.w.W..e...yg/=ov......`_..ng..w....2...?j.$.....k......`.,.B..h..N....Au(.W.[Y0.C4...l............`.h.5..T.I....O.~..'kAA.o....k.\..y....7....X...........?..i1P..A...{...}....F....Gh.5.ts...B.6tL....K5.s..J.=.D....=nv..w...C.e.s......i..i.>.\|.>.D-.}D. ...9..3..k.6...A.....\|.X..H...yA...e...Y0.......8.../.`.p1..O...+..]...C.ikZAK.r......s.<.z..l^.....l.-..T`.$.U^]R......^.....x....0..k{.....hk..F.>.Z.>0..e....V..Rl,+..28dB.&....+#.._.>.....oj..h...$.N.D.L.y...o..==>p...........z.z4{....Z...i......7Q.J....}K...{S.u6t.....W 4.....c......]?...2...9.....[.....k..<u(.j.ku=(G.L..c...c=..../.uo.1...^apy~$......W.M-O@...~`.d....dT....m.....Hu.e.n....a.....[.U.ZP[X..Z..Z...B.h5.........~]..g,.D.6...N...n.s..n)..._.v.........U..^P.B.\..T..t.k...xz_.....@...<\|.g..T^GK.7....(:..R......0.l.@.....!..~...j..x........9..u}S.0...P....i..`..C.c.P..+.q.6..f..Idn.*......:..l.'~^..9.V....p.U./L{'

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (619)
Category:	downloaded
Size (bytes):	620
Entropy (8bit):	5.151818445302556
Encrypted:	false
SSDEEP:	12:qTE0L26zFtAiSTFzU1UgYTJ5HSQQ9WSPD3LLpVe2KPD3LqDsTbk:0E0LRzKTFjpn49WSVVpKSY/k
MD5:	E8F82F528FDC2C4C8623D403036C0DE6
SHA1:	6CCCCEED5D1E2C6BCB395C01919262A386620C7F
SHA-256:	7AD3AC99D3887B29AF20C4EAB1BB8BA4933499F063C1AEA50F88D1D250AB271C
SHA-512:	38079D190312C56E0902496452C004287B758F8A0F86043D72D0D79F80F86856925B5D7034C7F4BE95539E6B3A3DEE2DAEFF65A7A7F162010AAD661A1994D94D
Malicious:	false
Reputation:	low
URL:	https://infoguard-switzerland.com/lander?query=Display+Board+Software&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1
Preview:	<!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="data:,"/><script src="https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true"></script><script src="https://btloader.com/tag?o=5097926782615552&upapi=true" async></script><script>window.LANDER_SYSTEM="PW"</script><script defer="defer" src="https://img1.wsimg.com/parking-lander/static/js/main.36e19f48.js"></script><link href="https://img1.wsimg.com/parking-lander/static/css/main.ef90a627.css" rel="stylesheet"></head><body><div id="root"></div></body></html>.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1879)
Category:	dropped
Size (bytes):	153214
Entropy (8bit):	5.543630481633971
Encrypted:	false
SSDEEP:	1536:sni6+zNKofjr9PyfpK7fDH+7pSU6GZvu85pistHWvR3+2xwHzgmcfpUWgQABuucP:gqM7vptHWpu22H9dBuDj3dmChm9Abj
MD5:	40530F1DED793B59E0D928D18CF39569
SHA1:	A0F3E2E77B57996C4AAFA678188064EFC979AA0C
SHA-256:	3FF8C01FF32ACE1D0DBD7F4DE73CB1C027E30FCC0A68CE8698193092C2A5E6E8
SHA-512:	E9164FE5D3A4692591F0AFF6B7560CF719301A0B3106CDA0DEFC47FF5D66CFAB5F95293B68BB8E131C066BDE77AE98D2F953CC6F5EB4D6CF79819DC879DDB0EB
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_gpp_api":0}}};var n;function ba(a){var b=0;return functi

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.49639305765025
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3809)
Category:	downloaded
Size (bytes):	3854
Entropy (8bit):	5.080165020112225
Encrypted:	false
SSDEEP:	96:Jw8mbMy5F7ZBibyxb6LmPSL5wpD8LtPHAC:OF7ZrSZoAPH9
MD5:	3F821ADA778691E677AEF2CEA8C4B4F6
SHA1:	643E7B729B25C2F800469623191DC837798E9D50
SHA-256:	7510035D553A99FBF93EB67737B2DF057CE096FA1ED7AAD83CFD559E11F2320D
SHA-512:	8993A8AD28ED4035A022D1B7274C77A97B8235B2DDCD5E6D29F7230D375851539900D4ACE652C94C4BE8A8284FFD86501DF420385A6E680DF4222C162DEFF4D5
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/parking-lander/static/css/main.ef90a627.css
Preview:	.Banner_banner__G1ca3{margin-bottom:5%}.trustArc_parkingTrustArcBanner__Ijwo0 .trustarc-banner-wrapper{box-shadow:none;box-sizing:border-box;height:100%;margin:0;max-width:100%;padding-top:1rem}.trustArc_parkingTrustArcBanner__Ijwo0 .trustarc-banner-wrapper>*{margin:auto;max-width:40rem}.trustArc_parkingTrustArcBanner__Ijwo0 .trustarc-banner-background{background-color:#0000!important}.trustArc_parkingTrustArcBanner__Ijwo0 .trustarc-banner-container{background-color:#fff;border-left:1px solid #e0e0e0;border-radius:15px 15px 0 0;border-right:1px solid #e0e0e0;border-top:1px solid #e0e0e0;box-sizing:border-box;display:flex;flex-direction:column;padding:1rem}.trustArc_parkingTrustArcBanner__Ijwo0 .trustarc-banner-container .banner-details-container{margin:0}.trustArc_parkingTrustArcBanner__Ijwo0 .trustarc-banner-container .banner-details-container .description-group{display:flex;flex-direction:row;gap:1rem}@media screen and (max-width:640px){.trustArc_parkingTrustArcBanner__Ijwo0 .trustar

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.10775175719051644
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 140x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	3098
Entropy (8bit):	7.937714156145729
Encrypted:	false
SSDEEP:	48:gYqZUEi1RaQJxJGAZXk3Fk9jGfcDl5JyiqTRnTDSkoNJgACgL5/f+0hy:BWS1R/TGAZXom+cDlKiqdqJgAT2N
MD5:	04ED3CBB441A7240AA6BA2D65FE798ED
SHA1:	F6A514524DC19A179F58F3F0C790EFBD2A591245
SHA-256:	8DE596E4D86BC2E40C435ECEB7E56CBB2BF2993317FF344A5AE6B3BDC7BC6F58
SHA-512:	D75B0A76EDEDE8C91F13F86529EC5180DF9F0FD246F1424FC7FD1C9D18E26FC6E22639199C6F003CCA1C9A34E7C909ED2C6541EF0EE223357F1D18325988156B
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....5.......>M .D".!.Z.p(...gu)..N?G.W.S....x........w.g.w.W..e...yg/=ov......`_..ng..w....2...?j.$.....k......`.,.B..h..N....Au(.W.[Y0.C4...l............`.h.5..T.I....O.~..'kAA.o....k.\..y....7....X...........?..i1P..A...{...}....F....Gh.5.ts...B.6tL....K5.s..J.=.D....=nv..w...C.e.s......i..i.>.\|.>.D-.}D. ...9..3..k.6...A.....\|.X..H...yA...e...Y0.......8.../.`.p1..O...+..]...C.ikZAK.r......s.<.z..l^.....l.-..T`.$.U^]R......^.....x....0..k{.....hk..F.>.Z.>0..e....V..Rl,+..28dB.&....+#.._.>.....oj..h...$.N.D.L.y...o..==>p...........z.z4{....Z...i......7Q.J....}K...{S.u6t.....W 4.....c......]?...2...9.....[.....k..<u(.j.ku=(G.L..c...c=..../.uo.1...^apy~$......W.M-O@...~`.d....dT....m.....Hu.e.n....a.....[.U.ZP[X..Z..Z...B.h5.........~]..g,.D.6...N...n.s..n)..._.v.........U..^P.B.\..T..t.k...xz_.....@...<\|.g..T^GK.7....(:..R......0.l.@.....!..~...j..x........9..u}S.0...P....i..`..C.c.P..+.q.6..f..Idn.*......:..l.'~^..9.V....p.U./L{'

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 140x140, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	1624
Entropy (8bit):	7.865370736475816
Encrypted:	false
SSDEEP:	48:UD5tUz1wBdU8ARBrRb86LvF3b492IL4ClVwa+tr5:UltURw1AbG6LR492JClwV
MD5:	5E0D4950920F43037B3C70E4B8EFA4CA
SHA1:	D3AC5CB011B2946C627A9125A76B779A2FB2377A
SHA-256:	6D440800FFDA11B90FEBE87A7784C804CF58517EF5DE4D0BD9D596EE7B0A1C8D
SHA-512:	08B10ED75BD122A6597CED55F01E9A7C30A082F19845C788C6B09186BF30773E2F8DBE292B00CC259DE8155C197C30CCD85999E4EBF7F280A00D6EE27C355B5D
Malicious:	false
Reputation:	low
Preview:	RIFFP...WEBPVP8 D...p'.......>=..D"!...N. ...8.y..,@$\|....)]...).4L.lM7`..k.OH.%k...]x.?..C...j...`.}q...80$...p..Qu`W..B....G]1g.."\|lN.(s.r.K.R..;Zd.z...y..M.S._..Dz._.WBj..]... ..s.F....4.r@...5.\|...&.`...1.....~..."/...?jG....S9.Eo.>P..}.$...........L1")...r....P.0h.;V.5..........cL.A.T`...%^9...!.................D...g.\'[.!e.e ......;w?......Q..5.}_$`.f3..WG....E......#.;.-...,i3..K....6.zM......#2....[......47%mO.(......=Z..../.&..d..%...V.2.g.Q.b....B....H.;..7..7<...v.4....Z.l..3p_...."..z..+.b..-Pq... R.....N.c...~`.f$.GI.=.).Vw....p%.$M1_..........$=...R.5..T.o./...=q...S.1..Qc...Z...m...j..cssg%..)............6.?.j..f..W.c.........1... .:Z..y..!..]9]..O?..8..^y.....V.>.......}.{.;x.../.H]..\c.,......'USP];..<;..w..>.....s9.u4j.g...A.Q.."..!.u.f...1.P...F...)...pA...<..!....5..a....o.6.rV...+..O.sN..A.....;\|k.E~..po.........wE.`.i.....L..............=...4Hmn.3?.....<.....5..........oER....u...c...Dg.S.bS@.v.[v ...75]...H.m

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 00:46:37.333340883 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 1, 2024 00:46:37.333374977 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 1, 2024 00:46:37.583369970 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 1, 2024 00:46:44.440368891 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:44.440382004 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:44.440452099 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:44.441138983 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:44.441148043 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:45.318593979 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:45.318656921 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:45.328558922 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:45.328568935 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:45.328846931 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:45.395776033 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:45.688899040 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:45.688987017 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:45.688997984 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:45.689460993 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:45.735409975 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:45.859792948 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:45.859886885 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:45.859939098 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:45.861058950 CEST	49710	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:45.861084938 CEST	443	49710	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:46.967396021 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 1, 2024 00:46:46.986876011 CEST	49716	80	192.168.2.6	3.33.130.190
Oct 1, 2024 00:46:46.987517118 CEST	49717	80	192.168.2.6	3.33.130.190
Oct 1, 2024 00:46:46.993244886 CEST	80	49716	3.33.130.190	192.168.2.6
Oct 1, 2024 00:46:46.993328094 CEST	49716	80	192.168.2.6	3.33.130.190
Oct 1, 2024 00:46:46.993680954 CEST	49716	80	192.168.2.6	3.33.130.190
Oct 1, 2024 00:46:46.993781090 CEST	80	49717	3.33.130.190	192.168.2.6
Oct 1, 2024 00:46:46.993845940 CEST	49717	80	192.168.2.6	3.33.130.190
Oct 1, 2024 00:46:46.998517990 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 1, 2024 00:46:47.000137091 CEST	80	49716	3.33.130.190	192.168.2.6
Oct 1, 2024 00:46:47.278928041 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 1, 2024 00:46:48.866379976 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 1, 2024 00:46:48.866470098 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 1, 2024 00:46:49.883363962 CEST	49720	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:46:49.883388042 CEST	443	49720	142.250.185.100	192.168.2.6
Oct 1, 2024 00:46:49.883589029 CEST	49720	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:46:49.884059906 CEST	49720	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:46:49.884071112 CEST	443	49720	142.250.185.100	192.168.2.6
Oct 1, 2024 00:46:50.448975086 CEST	80	49716	3.33.130.190	192.168.2.6
Oct 1, 2024 00:46:50.495639086 CEST	49716	80	192.168.2.6	3.33.130.190
Oct 1, 2024 00:46:50.517564058 CEST	443	49720	142.250.185.100	192.168.2.6
Oct 1, 2024 00:46:50.536906958 CEST	49720	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:46:50.536916018 CEST	443	49720	142.250.185.100	192.168.2.6
Oct 1, 2024 00:46:50.538059950 CEST	443	49720	142.250.185.100	192.168.2.6
Oct 1, 2024 00:46:50.538115025 CEST	49720	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:46:50.554142952 CEST	49720	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:46:50.554266930 CEST	443	49720	142.250.185.100	192.168.2.6
Oct 1, 2024 00:46:50.574119091 CEST	49716	80	192.168.2.6	3.33.130.190
Oct 1, 2024 00:46:50.580270052 CEST	80	49716	3.33.130.190	192.168.2.6
Oct 1, 2024 00:46:50.598086119 CEST	49720	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:46:50.598102093 CEST	443	49720	142.250.185.100	192.168.2.6
Oct 1, 2024 00:46:50.645267963 CEST	49720	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:46:50.865283966 CEST	80	49716	3.33.130.190	192.168.2.6
Oct 1, 2024 00:46:50.916330099 CEST	49716	80	192.168.2.6	3.33.130.190
Oct 1, 2024 00:46:51.055497885 CEST	49721	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:46:51.055537939 CEST	443	49721	3.33.130.190	192.168.2.6
Oct 1, 2024 00:46:51.055597067 CEST	49721	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:46:51.056648970 CEST	49721	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:46:51.056668043 CEST	443	49721	3.33.130.190	192.168.2.6
Oct 1, 2024 00:46:51.133752108 CEST	49722	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:51.133781910 CEST	443	49722	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:51.133838892 CEST	49722	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:51.138911009 CEST	49722	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:51.138923883 CEST	443	49722	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:52.743897915 CEST	443	49722	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:52.743971109 CEST	49722	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:52.756383896 CEST	49722	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:52.756397009 CEST	443	49722	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:52.756665945 CEST	443	49722	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:52.799856901 CEST	49722	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:52.883343935 CEST	49722	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:52.927403927 CEST	443	49722	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:53.069685936 CEST	443	49722	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:53.069761038 CEST	443	49722	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:53.069855928 CEST	49722	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:53.069943905 CEST	49722	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:53.069962978 CEST	443	49722	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:53.069981098 CEST	49722	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:53.069987059 CEST	443	49722	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:53.104286909 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:53.104341984 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:53.104422092 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:53.104744911 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:53.104759932 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:53.743810892 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:53.743913889 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:53.816638947 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:53.816670895 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:53.817166090 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:53.818974972 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:53.863399029 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:54.019684076 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:54.019762039 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:54.019828081 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:54.023902893 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:54.023921013 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:54.023931980 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 1, 2024 00:46:54.023936987 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 1, 2024 00:46:54.246257067 CEST	49724	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:54.246313095 CEST	443	49724	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:54.246376991 CEST	49724	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:54.247371912 CEST	49724	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:54.247390032 CEST	443	49724	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:55.129723072 CEST	443	49724	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:55.129791975 CEST	49724	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:55.132889986 CEST	49724	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:55.132896900 CEST	443	49724	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:55.133254051 CEST	443	49724	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:55.134919882 CEST	49724	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:55.134991884 CEST	49724	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:55.134995937 CEST	443	49724	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:55.135159969 CEST	49724	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:55.175414085 CEST	443	49724	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:55.306262016 CEST	443	49724	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:55.306482077 CEST	443	49724	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:55.306636095 CEST	49724	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:55.311980009 CEST	49724	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:55.311992884 CEST	443	49724	40.113.110.67	192.168.2.6
Oct 1, 2024 00:46:55.312004089 CEST	49724	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:46:59.973031998 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 1, 2024 00:46:59.973114014 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 1, 2024 00:46:59.974051952 CEST	49728	443	192.168.2.6	173.222.162.64
Oct 1, 2024 00:46:59.974113941 CEST	443	49728	173.222.162.64	192.168.2.6
Oct 1, 2024 00:46:59.974373102 CEST	49728	443	192.168.2.6	173.222.162.64
Oct 1, 2024 00:46:59.977982044 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 1, 2024 00:46:59.978002071 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 1, 2024 00:47:00.005043030 CEST	49728	443	192.168.2.6	173.222.162.64
Oct 1, 2024 00:47:00.005067110 CEST	443	49728	173.222.162.64	192.168.2.6
Oct 1, 2024 00:47:00.474649906 CEST	443	49720	142.250.185.100	192.168.2.6
Oct 1, 2024 00:47:00.474714994 CEST	443	49720	142.250.185.100	192.168.2.6
Oct 1, 2024 00:47:00.474829912 CEST	49720	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:47:00.598548889 CEST	443	49728	173.222.162.64	192.168.2.6
Oct 1, 2024 00:47:00.598613024 CEST	49728	443	192.168.2.6	173.222.162.64
Oct 1, 2024 00:47:02.132884979 CEST	49720	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:47:02.132914066 CEST	443	49720	142.250.185.100	192.168.2.6
Oct 1, 2024 00:47:06.901314020 CEST	443	49721	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:06.902343035 CEST	49721	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:06.902368069 CEST	443	49721	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:06.903625011 CEST	443	49721	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:06.903686047 CEST	49721	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:06.905586004 CEST	49721	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:06.905663013 CEST	443	49721	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:06.906212091 CEST	49721	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:06.906220913 CEST	443	49721	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:06.958146095 CEST	49721	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:07.014034033 CEST	443	49721	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:07.014378071 CEST	443	49721	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:07.014484882 CEST	49721	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:07.018241882 CEST	49721	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:07.018256903 CEST	443	49721	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:07.187827110 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:07.187870026 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:07.188139915 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:07.188453913 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.188503027 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.188596964 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.188904047 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:07.188915014 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:07.189214945 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.189224005 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.656084061 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.657236099 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.657246113 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.658390045 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.658615112 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.664424896 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.664504051 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.664838076 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.664845943 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.709916115 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.800745010 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.800787926 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.800815105 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.800844908 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.800863028 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.800870895 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.800899982 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.801606894 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.801681042 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.801686049 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.802824974 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.802876949 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.802881002 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.802949905 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.803417921 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.803421974 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.828705072 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:07.830739975 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:07.830761909 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:07.831888914 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:07.831955910 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:07.835282087 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:07.835408926 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:07.836529016 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:07.836539984 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:07.846849918 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.846868038 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.880656958 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:07.888349056 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.888380051 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.888470888 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.888478041 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.888518095 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.888541937 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.888778925 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.888802052 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.888892889 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.888899088 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.888988018 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.889036894 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.889050961 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.889147043 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.889502048 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.889651060 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.889771938 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.889775991 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.890170097 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.890242100 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.890247107 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.890333891 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.890391111 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.890403986 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.890980005 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.891007900 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.891045094 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.891048908 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.891122103 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.891177893 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.891854048 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.891881943 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.891944885 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.891949892 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.892000914 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:07.892034054 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:07.940773010 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.182126999 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.182487965 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.182516098 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.182543039 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.182566881 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.182586908 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.182596922 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.182615042 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.182686090 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.183090925 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.183156013 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.183161020 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.183199883 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.183207989 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.183252096 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.185467958 CEST	49731	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.185483932 CEST	443	49731	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.187143087 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.187774897 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.187808037 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.187834024 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.187839031 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.187861919 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.187897921 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.187901974 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.187911987 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.187938929 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.187954903 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.188076019 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.188083887 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.188714981 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.188790083 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.188796043 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.195028067 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.195076942 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.195091009 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.198045969 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.198105097 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.198132992 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.198828936 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.198904991 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.198930025 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.204941988 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.205019951 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.205048084 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.212151051 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.212203026 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.212213039 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.223493099 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.223546028 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.223572016 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.227648973 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.227699995 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.227710009 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.230396032 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.230467081 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.230474949 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.235975981 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.236020088 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.236047983 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.241681099 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.241733074 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.241761923 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.247953892 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.248008013 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.248035908 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.255049944 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.255125999 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.255156994 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.264673948 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.264702082 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.264725924 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.264754057 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.264841080 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.273763895 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.286518097 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.286576033 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.286607981 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.287235022 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.287288904 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.287298918 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.289880991 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.289937019 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.289941072 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.289963007 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.290182114 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.295815945 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.301760912 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.301788092 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.301842928 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.301877022 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.301997900 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.307445049 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.313150883 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.313221931 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.313263893 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.318617105 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.318649054 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.318672895 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.318696022 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.318797112 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.323793888 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.329113960 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.329171896 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.329183102 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.329195976 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.329238892 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.334311962 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.339163065 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.339196920 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.339240074 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.339265108 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.339313030 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.343924999 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.348226070 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.348248959 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.348301888 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.348341942 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.348388910 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.352564096 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.356894970 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.356918097 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.356964111 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.357008934 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.357106924 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.360939026 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.365046024 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.365097046 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.365101099 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.365129948 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.365253925 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.369390965 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.373235941 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.373321056 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.373332977 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.373348951 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.373399973 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.377350092 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.379760981 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.379815102 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.379828930 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.379857063 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.379897118 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.379910946 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.382139921 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.382199049 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.382221937 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.384531021 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.384638071 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.384666920 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.386800051 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.386856079 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.386882067 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.389101028 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.389161110 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.389179945 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.391423941 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.391544104 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.391561985 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.393899918 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.393968105 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.393990993 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.396128893 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.397268057 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.397294998 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.398273945 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.398343086 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.398359060 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.400794029 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.400868893 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.400892973 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.403009892 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.403074980 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.403086901 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.405369043 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.405416012 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.405442953 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.407588005 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.407659054 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.407686949 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.409914970 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.409984112 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.410012007 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.412147045 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.412218094 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.412245035 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.414962053 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.415016890 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.415039062 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.415051937 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.415106058 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.415555954 CEST	49730	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:08.415580034 CEST	443	49730	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:08.482290030 CEST	49735	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.482332945 CEST	443	49735	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.482414961 CEST	49735	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.482717991 CEST	49735	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.482731104 CEST	443	49735	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.489849091 CEST	49736	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:08.489880085 CEST	443	49736	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:08.489949942 CEST	49736	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:08.490226030 CEST	49737	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:08.490252972 CEST	443	49737	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:08.490313053 CEST	49737	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:08.491029024 CEST	49737	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:08.491040945 CEST	443	49737	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:08.491503000 CEST	49736	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:08.491518021 CEST	443	49736	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:08.491796970 CEST	49738	443	192.168.2.6	142.250.184.230
Oct 1, 2024 00:47:08.491827965 CEST	443	49738	142.250.184.230	192.168.2.6
Oct 1, 2024 00:47:08.492255926 CEST	49738	443	192.168.2.6	142.250.184.230
Oct 1, 2024 00:47:08.492486000 CEST	49738	443	192.168.2.6	142.250.184.230
Oct 1, 2024 00:47:08.492497921 CEST	443	49738	142.250.184.230	192.168.2.6
Oct 1, 2024 00:47:08.524246931 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.524280071 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.524525881 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.524787903 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.524811983 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.538064957 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:08.538095951 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:08.538239956 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:08.538705111 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:08.538712978 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:08.943357944 CEST	443	49735	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.943658113 CEST	49735	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.943684101 CEST	443	49735	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.944006920 CEST	443	49735	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.944333076 CEST	49735	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.944380999 CEST	443	49735	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.944475889 CEST	49735	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.962771893 CEST	443	49737	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:08.962977886 CEST	49737	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:08.963004112 CEST	443	49737	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:08.964287043 CEST	443	49737	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:08.964343071 CEST	49737	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:08.966680050 CEST	443	49736	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:08.966922998 CEST	49736	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:08.966929913 CEST	443	49736	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:08.968173981 CEST	443	49736	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:08.968235016 CEST	49736	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:08.981758118 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.982031107 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.982043028 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.983397961 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.983458996 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.983903885 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.983933926 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:08.983982086 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.987404108 CEST	443	49735	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:08.992698908 CEST	49735	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.024718046 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.024724960 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.072725058 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.074048042 CEST	443	49735	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.074116945 CEST	443	49735	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.074176073 CEST	49735	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.074507952 CEST	49735	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.074537992 CEST	443	49735	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.074549913 CEST	49735	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.074649096 CEST	49735	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.132390976 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.132433891 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.132456064 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.132503986 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.132524967 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.132780075 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.132834911 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.132884979 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.133093119 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.133100033 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.133347034 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.133372068 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.133537054 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.133543968 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.133611917 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.139292002 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.139336109 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.139405012 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.139414072 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.139767885 CEST	443	49738	142.250.184.230	192.168.2.6
Oct 1, 2024 00:47:09.140311003 CEST	49738	443	192.168.2.6	142.250.184.230
Oct 1, 2024 00:47:09.140321970 CEST	443	49738	142.250.184.230	192.168.2.6
Oct 1, 2024 00:47:09.141347885 CEST	443	49738	142.250.184.230	192.168.2.6
Oct 1, 2024 00:47:09.141419888 CEST	49738	443	192.168.2.6	142.250.184.230
Oct 1, 2024 00:47:09.148415089 CEST	49737	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.148574114 CEST	443	49737	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.148639917 CEST	49737	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.148649931 CEST	443	49737	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.148863077 CEST	49736	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.148920059 CEST	49738	443	192.168.2.6	142.250.184.230
Oct 1, 2024 00:47:09.148977041 CEST	443	49736	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.149039984 CEST	443	49738	142.250.184.230	192.168.2.6
Oct 1, 2024 00:47:09.149050951 CEST	49736	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.149228096 CEST	49738	443	192.168.2.6	142.250.184.230
Oct 1, 2024 00:47:09.149245977 CEST	443	49738	142.250.184.230	192.168.2.6
Oct 1, 2024 00:47:09.152442932 CEST	49741	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.152476072 CEST	443	49741	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.152544022 CEST	49741	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.152718067 CEST	49741	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.152724981 CEST	443	49741	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.178992033 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.179991961 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.180363894 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.180380106 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.181555986 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.181643009 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.182239056 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.182293892 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.182580948 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.182585001 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.191402912 CEST	443	49736	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.195007086 CEST	49737	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.195008993 CEST	49738	443	192.168.2.6	142.250.184.230
Oct 1, 2024 00:47:09.195053101 CEST	49736	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.195065022 CEST	443	49736	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.218941927 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.219209909 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.219233990 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.219288111 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.219331980 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.219331980 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.219347954 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.219532013 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.220151901 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.220237017 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.220261097 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.220276117 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.220276117 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.220287085 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.220433950 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.220451117 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.221236944 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.221260071 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.221383095 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.221421003 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.221421003 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.221424103 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.221440077 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.221745968 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.222120047 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.222317934 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.222348928 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.222364902 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.222382069 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.222501040 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.223107100 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.223145008 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.223249912 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.223258972 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.228666067 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.238701105 CEST	49736	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.255412102 CEST	443	49737	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.255748987 CEST	443	49737	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.255840063 CEST	49737	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.257349968 CEST	443	49736	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.257402897 CEST	443	49736	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.257637978 CEST	49736	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.271203995 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.271219015 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.306101084 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.306130886 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.306157112 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.306181908 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.306199074 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.306212902 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.306226015 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.306292057 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.306736946 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.306742907 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.306790113 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.306909084 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.306951046 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.407654047 CEST	443	49738	142.250.184.230	192.168.2.6
Oct 1, 2024 00:47:09.407764912 CEST	443	49738	142.250.184.230	192.168.2.6
Oct 1, 2024 00:47:09.408075094 CEST	49738	443	192.168.2.6	142.250.184.230
Oct 1, 2024 00:47:09.463581085 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.463620901 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.463669062 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.463695049 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.463695049 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.463704109 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.463733912 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.469433069 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.469497919 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.469558954 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.469563961 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.469613075 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.469696045 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.475867987 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.478420973 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.478425026 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.482079029 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.487440109 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.487443924 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.528424978 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.551794052 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.552804947 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.552849054 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.552854061 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.559091091 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.559139013 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.559144974 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.565547943 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.565597057 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.565654039 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.565660000 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.565700054 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.571916103 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.578109980 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.578165054 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.578217030 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.578222990 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.578264952 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.584445953 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.590727091 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.590807915 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.590840101 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.590845108 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.593966007 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.597069025 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.603277922 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.603310108 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.603360891 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.603372097 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.603410006 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.609471083 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.610183001 CEST	443	49741	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.616029024 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.616055012 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.616100073 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.616106987 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.616147995 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.616261005 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.640301943 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.640360117 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.640367031 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.640513897 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.640607119 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.640650034 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.640654087 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.640707016 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.641242027 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.645596981 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.646909952 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.646919966 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.652122021 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.652277946 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.652286053 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.657082081 CEST	49741	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.657110929 CEST	443	49741	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.657572985 CEST	49739	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.657587051 CEST	443	49741	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.657598972 CEST	443	49739	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.660765886 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.660794020 CEST	49741	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.660825014 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.660832882 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.660877943 CEST	443	49741	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.661142111 CEST	49741	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.664072037 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.664314032 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.664330959 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.669426918 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.669471979 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.669487000 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.675477982 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.675539017 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.675549984 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.677795887 CEST	49737	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.677828074 CEST	443	49737	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.679049969 CEST	49736	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.679081917 CEST	443	49736	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.679955959 CEST	49738	443	192.168.2.6	142.250.184.230
Oct 1, 2024 00:47:09.679977894 CEST	443	49738	142.250.184.230	192.168.2.6
Oct 1, 2024 00:47:09.680161953 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.680219889 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.680227995 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.685549974 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.685606003 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.685632944 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.690391064 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.690474987 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.690484047 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.695323944 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.695406914 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.695411921 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.699655056 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.699851990 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.699857950 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.703608036 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.703665018 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.703675985 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.707406044 CEST	443	49741	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.707761049 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.707820892 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.707828045 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.711863041 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.711986065 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.711992025 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.716264009 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.716316938 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.716324091 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.720712900 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.720771074 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.720777035 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.723505020 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.723608017 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.723613977 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.727380037 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.727535963 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.727545023 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.731431961 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.731483936 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.731491089 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.733860016 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.733885050 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.733936071 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.733941078 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.733980894 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.736440897 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.738459110 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.738486052 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.738518000 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.738524914 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.738564968 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.740827084 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.743175983 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.743220091 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.743268967 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.743275881 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.743320942 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.745413065 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.748219967 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.748256922 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.748279095 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.748284101 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.748334885 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.751362085 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.753043890 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.753104925 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.753109932 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.755448103 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.755479097 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.755521059 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.755527973 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.755570889 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.758428097 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.764147043 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.764206886 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.764219999 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.764228106 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.764269114 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.769758940 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.773648024 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.773674965 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.773694038 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.773700953 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.773785114 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.773956060 CEST	443	49741	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.774023056 CEST	443	49741	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.774064064 CEST	49741	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.774236917 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.774847984 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.774873972 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.774915934 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.774920940 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.774960041 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.774964094 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.775003910 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.775149107 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.775971889 CEST	49741	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:09.775989056 CEST	443	49741	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:09.777503967 CEST	49740	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:09.777519941 CEST	443	49740	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:09.870443106 CEST	49742	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.870470047 CEST	443	49742	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.870551109 CEST	49742	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.871201992 CEST	49743	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.871241093 CEST	443	49743	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.871654987 CEST	49743	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.872046947 CEST	49742	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.872061968 CEST	443	49742	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.872510910 CEST	49743	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:09.872524023 CEST	443	49743	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:09.884305000 CEST	49744	443	192.168.2.6	142.250.185.198
Oct 1, 2024 00:47:09.884337902 CEST	443	49744	142.250.185.198	192.168.2.6
Oct 1, 2024 00:47:09.884452105 CEST	49744	443	192.168.2.6	142.250.185.198
Oct 1, 2024 00:47:09.884932995 CEST	49744	443	192.168.2.6	142.250.185.198
Oct 1, 2024 00:47:09.884948015 CEST	443	49744	142.250.185.198	192.168.2.6
Oct 1, 2024 00:47:09.995712042 CEST	49746	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:09.995729923 CEST	443	49746	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:09.995994091 CEST	49746	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:09.996947050 CEST	49746	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:09.996954918 CEST	443	49746	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:10.328614950 CEST	443	49742	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.329101086 CEST	49742	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:10.329111099 CEST	443	49742	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.330121040 CEST	443	49742	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.330192089 CEST	49742	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:10.330954075 CEST	49742	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:10.331016064 CEST	443	49742	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.331475019 CEST	49742	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:10.331481934 CEST	443	49742	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.338191032 CEST	443	49743	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.338481903 CEST	49743	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:10.338509083 CEST	443	49743	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.339670897 CEST	443	49743	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.339746952 CEST	49743	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:10.340429068 CEST	49743	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:10.340492010 CEST	443	49743	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.340852976 CEST	49743	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:10.340858936 CEST	443	49743	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.378819942 CEST	49742	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:10.394789934 CEST	49743	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:10.462749958 CEST	443	49742	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.462819099 CEST	443	49742	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.462882996 CEST	49742	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:10.464440107 CEST	49742	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:10.464449883 CEST	443	49742	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.465221882 CEST	443	49743	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.465286016 CEST	443	49743	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.465396881 CEST	49743	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:10.467679977 CEST	49743	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:10.467690945 CEST	443	49743	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:10.513365030 CEST	443	49744	142.250.185.198	192.168.2.6
Oct 1, 2024 00:47:10.513605118 CEST	49744	443	192.168.2.6	142.250.185.198
Oct 1, 2024 00:47:10.513636112 CEST	443	49744	142.250.185.198	192.168.2.6
Oct 1, 2024 00:47:10.514760971 CEST	443	49744	142.250.185.198	192.168.2.6
Oct 1, 2024 00:47:10.514823914 CEST	49744	443	192.168.2.6	142.250.185.198
Oct 1, 2024 00:47:10.515218973 CEST	49744	443	192.168.2.6	142.250.185.198
Oct 1, 2024 00:47:10.515292883 CEST	443	49744	142.250.185.198	192.168.2.6
Oct 1, 2024 00:47:10.515367985 CEST	49744	443	192.168.2.6	142.250.185.198
Oct 1, 2024 00:47:10.515374899 CEST	443	49744	142.250.185.198	192.168.2.6
Oct 1, 2024 00:47:10.565984964 CEST	49744	443	192.168.2.6	142.250.185.198
Oct 1, 2024 00:47:10.770473957 CEST	443	49746	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:10.771809101 CEST	49746	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:10.771820068 CEST	443	49746	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:10.774213076 CEST	443	49746	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:10.774271011 CEST	49746	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:10.782576084 CEST	443	49744	142.250.185.198	192.168.2.6
Oct 1, 2024 00:47:10.782773018 CEST	443	49744	142.250.185.198	192.168.2.6
Oct 1, 2024 00:47:10.782913923 CEST	49744	443	192.168.2.6	142.250.185.198
Oct 1, 2024 00:47:10.783613920 CEST	49744	443	192.168.2.6	142.250.185.198
Oct 1, 2024 00:47:10.783628941 CEST	443	49744	142.250.185.198	192.168.2.6
Oct 1, 2024 00:47:10.813908100 CEST	49749	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:10.813949108 CEST	443	49749	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:10.814032078 CEST	49749	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:10.814620018 CEST	49749	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:10.814630985 CEST	443	49749	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:10.918917894 CEST	49746	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:10.919101000 CEST	443	49746	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:10.919910908 CEST	49746	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:10.919933081 CEST	443	49746	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:10.962560892 CEST	49746	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:11.090296030 CEST	443	49746	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:11.090392113 CEST	443	49746	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:11.090461016 CEST	49746	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:11.121828079 CEST	49746	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:11.121844053 CEST	443	49746	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:11.127006054 CEST	49751	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:11.127036095 CEST	443	49751	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:11.127137899 CEST	49751	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:11.128268003 CEST	49751	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:11.128281116 CEST	443	49751	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:11.617841959 CEST	443	49749	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:11.617927074 CEST	49749	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:11.704488993 CEST	49749	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:11.704505920 CEST	443	49749	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:11.704793930 CEST	443	49749	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:11.706793070 CEST	49749	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:11.706793070 CEST	49749	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:11.706809998 CEST	443	49749	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:11.706856966 CEST	49749	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:11.722199917 CEST	443	49751	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:11.722522020 CEST	49751	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:11.722556114 CEST	443	49751	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:11.723685980 CEST	443	49751	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:11.723748922 CEST	49751	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:11.724469900 CEST	49751	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:11.724551916 CEST	443	49751	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:11.724864960 CEST	49751	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:11.724873066 CEST	443	49751	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:11.751394987 CEST	443	49749	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:11.769475937 CEST	49751	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:11.883583069 CEST	443	49749	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:11.883794069 CEST	443	49749	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:11.883872986 CEST	49749	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:11.963248968 CEST	443	49751	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:11.963355064 CEST	443	49751	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:11.963466883 CEST	49751	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:12.028127909 CEST	49749	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:12.028153896 CEST	443	49749	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:12.106789112 CEST	49751	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:12.106852055 CEST	443	49751	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:12.515018940 CEST	49755	443	192.168.2.6	52.222.236.94
Oct 1, 2024 00:47:12.515043974 CEST	443	49755	52.222.236.94	192.168.2.6
Oct 1, 2024 00:47:12.515089989 CEST	49755	443	192.168.2.6	52.222.236.94
Oct 1, 2024 00:47:12.515219927 CEST	49756	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:12.515228033 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:12.515274048 CEST	49756	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:12.515727997 CEST	49755	443	192.168.2.6	52.222.236.94
Oct 1, 2024 00:47:12.515742064 CEST	443	49755	52.222.236.94	192.168.2.6
Oct 1, 2024 00:47:12.516125917 CEST	49756	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:12.516134977 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:12.527601957 CEST	49757	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:12.527631998 CEST	443	49757	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:12.527705908 CEST	49757	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:12.527935982 CEST	49757	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:12.527951002 CEST	443	49757	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:13.118865013 CEST	443	49757	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:13.119308949 CEST	49757	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:13.119322062 CEST	443	49757	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:13.120230913 CEST	443	49757	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:13.120301008 CEST	49757	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:13.120786905 CEST	49757	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:13.120840073 CEST	443	49757	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:13.121032000 CEST	49757	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:13.121037960 CEST	443	49757	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:13.151982069 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.152194977 CEST	49756	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:13.152201891 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.153345108 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.153410912 CEST	49756	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:13.153786898 CEST	49756	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:13.153886080 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.153985023 CEST	49756	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:13.153990030 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.175663948 CEST	49757	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:13.206895113 CEST	49756	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:13.246109009 CEST	443	49755	52.222.236.94	192.168.2.6
Oct 1, 2024 00:47:13.246387959 CEST	49755	443	192.168.2.6	52.222.236.94
Oct 1, 2024 00:47:13.246401072 CEST	443	49755	52.222.236.94	192.168.2.6
Oct 1, 2024 00:47:13.247840881 CEST	443	49755	52.222.236.94	192.168.2.6
Oct 1, 2024 00:47:13.247905970 CEST	49755	443	192.168.2.6	52.222.236.94
Oct 1, 2024 00:47:13.249176025 CEST	49755	443	192.168.2.6	52.222.236.94
Oct 1, 2024 00:47:13.249339104 CEST	443	49755	52.222.236.94	192.168.2.6
Oct 1, 2024 00:47:13.249435902 CEST	49755	443	192.168.2.6	52.222.236.94
Oct 1, 2024 00:47:13.249448061 CEST	443	49755	52.222.236.94	192.168.2.6
Oct 1, 2024 00:47:13.300674915 CEST	49755	443	192.168.2.6	52.222.236.94
Oct 1, 2024 00:47:13.359580994 CEST	443	49757	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:13.359679937 CEST	443	49757	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:13.361449957 CEST	49757	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:13.362926960 CEST	49757	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:13.362943888 CEST	443	49757	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:13.529174089 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.529231071 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.529268026 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.529301882 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.529350996 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.529397011 CEST	49756	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:13.529417992 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.529547930 CEST	49756	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:13.535109997 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.535288095 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.535588026 CEST	49756	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:13.535597086 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.542047977 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.542292118 CEST	49756	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:13.542299986 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.547935009 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.548304081 CEST	49756	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:13.548443079 CEST	49756	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:13.548454046 CEST	443	49756	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.571415901 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:13.571459055 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.571623087 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:13.572027922 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:13.572038889 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:13.650446892 CEST	443	49755	52.222.236.94	192.168.2.6
Oct 1, 2024 00:47:13.650473118 CEST	443	49755	52.222.236.94	192.168.2.6
Oct 1, 2024 00:47:13.650485992 CEST	443	49755	52.222.236.94	192.168.2.6
Oct 1, 2024 00:47:13.650615931 CEST	49755	443	192.168.2.6	52.222.236.94
Oct 1, 2024 00:47:13.650629044 CEST	443	49755	52.222.236.94	192.168.2.6
Oct 1, 2024 00:47:13.651721954 CEST	443	49755	52.222.236.94	192.168.2.6
Oct 1, 2024 00:47:13.651756048 CEST	49755	443	192.168.2.6	52.222.236.94
Oct 1, 2024 00:47:13.651765108 CEST	443	49755	52.222.236.94	192.168.2.6
Oct 1, 2024 00:47:13.651796103 CEST	49755	443	192.168.2.6	52.222.236.94
Oct 1, 2024 00:47:13.651896954 CEST	49755	443	192.168.2.6	52.222.236.94
Oct 1, 2024 00:47:13.666462898 CEST	49760	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:13.666495085 CEST	443	49760	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:13.666626930 CEST	49760	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:13.669202089 CEST	49760	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:13.669226885 CEST	443	49760	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:13.677791119 CEST	49761	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:13.677826881 CEST	443	49761	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:13.677957058 CEST	49761	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:13.681550026 CEST	49761	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:13.681561947 CEST	443	49761	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.203847885 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.204258919 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.204278946 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.204596996 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.205229044 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.205229044 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.205287933 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.253285885 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.394599915 CEST	443	49760	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.395529032 CEST	49760	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.395550013 CEST	443	49760	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.395951986 CEST	443	49761	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.396509886 CEST	49761	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.396522999 CEST	443	49761	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.397015095 CEST	443	49760	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.397073030 CEST	49760	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.397551060 CEST	49760	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.397667885 CEST	443	49760	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.397883892 CEST	49760	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.397891045 CEST	443	49760	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.397905111 CEST	443	49761	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.397964954 CEST	49761	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.398263931 CEST	49761	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.398366928 CEST	443	49761	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.398513079 CEST	49761	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.398519039 CEST	443	49761	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.440610886 CEST	49761	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.440645933 CEST	49760	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.483644962 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.483692884 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.483768940 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.483781099 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.483814001 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.483846903 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.483895063 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.483901024 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.483956099 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.489783049 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.489919901 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.489974022 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.489981890 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.496161938 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.496212006 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.496222973 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.502357960 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.502413034 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.502422094 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.550041914 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.570960045 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.572988987 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.573095083 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.573146105 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.573177099 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.573456049 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.579232931 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.585491896 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.585629940 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.585722923 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.585748911 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.589629889 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.591872931 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.598330021 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.598359108 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.598392963 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.598407030 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.598490000 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.604513884 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.610666037 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.610723019 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.610739946 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.616303921 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.616333008 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.616370916 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.616395950 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.616449118 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.622193098 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.628082991 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.628154039 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.628230095 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.628242970 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.629445076 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.633913994 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.633984089 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.634035110 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.634043932 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.658319950 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.658370972 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.658488035 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.658497095 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.658515930 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.658551931 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.660414934 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.662441015 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.662462950 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.665117979 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.665179968 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.665188074 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.670686960 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.670849085 CEST	443	49760	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.670890093 CEST	443	49760	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.670898914 CEST	443	49760	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.670919895 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.670929909 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.670959949 CEST	49760	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.670979977 CEST	443	49760	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.670998096 CEST	443	49760	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.671045065 CEST	49760	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.676064968 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.676120043 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.676129103 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.681524038 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.685687065 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.685699940 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.686976910 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.687036037 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.687042952 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.692291021 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.693813086 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.693841934 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.697717905 CEST	49760	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.697742939 CEST	443	49760	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.697755098 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.697824001 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.697832108 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.703129053 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.707426071 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.707437992 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.708271980 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.708328009 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.708334923 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.713129044 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.713471889 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.713479996 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.717812061 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.721894979 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.721904039 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.722476959 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.722533941 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.722541094 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.726888895 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.729480028 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.729487896 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.731029034 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.731085062 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.731091976 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.734930038 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.736804962 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.736821890 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.738825083 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.741925001 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.741933107 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.742671967 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.742727041 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.742733955 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.746484041 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.749679089 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.749686956 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.750374079 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.750420094 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.750425100 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.754255056 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.754293919 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.754355907 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.754367113 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.756594896 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.756652117 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.756659031 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.756721973 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.759021044 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.761183977 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.761231899 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.761293888 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.761301994 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.761430025 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.763501883 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.765877962 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.765929937 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.765983105 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.765990973 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.766083002 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.768172026 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.770389080 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.770482063 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.770539999 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.770550013 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.772859097 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.772927046 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.772934914 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.773003101 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.775032997 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.777359009 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.777439117 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.777441025 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.777451992 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.777493954 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.779757977 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.782026052 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.782103062 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.782164097 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.782176971 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.784437895 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.784504890 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.784512997 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.784585953 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.786643982 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.789071083 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.789150000 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.789159060 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.789169073 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.789211035 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.789216995 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.789257050 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.789427042 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.792948961 CEST	443	49761	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.792977095 CEST	443	49761	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.793078899 CEST	49761	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.793096066 CEST	443	49761	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.793123960 CEST	443	49761	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.793759108 CEST	49761	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.820965052 CEST	49759	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:14.820990086 CEST	443	49759	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:14.874669075 CEST	49761	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.874697924 CEST	443	49761	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.906979084 CEST	49762	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.907026052 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.907102108 CEST	49762	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.907381058 CEST	49762	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:14.907401085 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:14.945677996 CEST	49763	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:14.945722103 CEST	443	49763	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:14.945980072 CEST	49763	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:14.946341038 CEST	49763	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:14.946351051 CEST	443	49763	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:14.980344057 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:14.980372906 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:14.980602026 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:15.010230064 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:15.010245085 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.024740934 CEST	49765	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.024791956 CEST	443	49765	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.024859905 CEST	49765	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.025213003 CEST	49766	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.025218964 CEST	443	49766	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.025271893 CEST	49766	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.025485992 CEST	49765	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.025497913 CEST	443	49765	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.025778055 CEST	49766	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.025789022 CEST	443	49766	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.541784048 CEST	443	49763	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:15.595901012 CEST	49763	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:15.642791033 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:15.645744085 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.697386980 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:15.697465897 CEST	49762	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:15.707664967 CEST	49763	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:15.707683086 CEST	443	49763	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:15.708019972 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:15.708038092 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.708214045 CEST	49762	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:15.708226919 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:15.708241940 CEST	443	49763	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:15.708642006 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:15.709486961 CEST	49763	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:15.709513903 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.709527016 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.709552050 CEST	443	49763	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:15.709577084 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:15.710457087 CEST	49762	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:15.710522890 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:15.711067915 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:15.711194038 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.711636066 CEST	49763	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:15.711772919 CEST	49762	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:15.711821079 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:15.711827993 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.753025055 CEST	443	49765	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.755397081 CEST	443	49763	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:15.755397081 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:15.761061907 CEST	443	49766	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.761691093 CEST	49765	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.761714935 CEST	443	49765	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.761852026 CEST	49766	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.761862040 CEST	443	49766	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.762195110 CEST	443	49765	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.762202024 CEST	443	49766	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.762207985 CEST	443	49765	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.762217045 CEST	443	49766	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.762273073 CEST	49765	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.762279034 CEST	443	49765	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.762304068 CEST	49766	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.762310982 CEST	443	49766	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.762320042 CEST	49765	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.762357950 CEST	49766	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.762835026 CEST	443	49766	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.762947083 CEST	443	49765	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.766365051 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:15.767595053 CEST	49766	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.767710924 CEST	443	49766	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.768529892 CEST	49765	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.768619061 CEST	443	49765	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.768819094 CEST	49766	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.768826008 CEST	443	49766	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.768996954 CEST	49765	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.769001961 CEST	443	49765	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:15.815821886 CEST	49766	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.815838099 CEST	49765	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:15.882596016 CEST	443	49763	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:15.882672071 CEST	443	49763	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:15.882749081 CEST	49763	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:15.883853912 CEST	49763	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:15.883867979 CEST	443	49763	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:15.885606050 CEST	49767	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:15.885649920 CEST	443	49767	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:15.885752916 CEST	49767	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:15.886219978 CEST	49767	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:15.886236906 CEST	443	49767	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:15.924211979 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.924257994 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.924350977 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:15.924354076 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.924380064 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.924438000 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:15.924447060 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.930247068 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.930319071 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:15.930325985 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.930458069 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.930509090 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:15.930515051 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.936682940 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.936750889 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:15.936758041 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.943125963 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.943187952 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:15.943195105 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:15.987706900 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.010874033 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.013664961 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.013709068 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.013730049 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.013746977 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.013838053 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.017997980 CEST	443	49765	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:16.018122911 CEST	443	49765	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:16.018176079 CEST	49765	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:16.019984961 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.026370049 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.026411057 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.026441097 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.026451111 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.026501894 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.032521963 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.041945934 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.041990995 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.042054892 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.042062044 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.042165041 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.042583942 CEST	443	49766	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:16.042761087 CEST	443	49766	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:16.042826891 CEST	49766	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:16.045684099 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.047954082 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.047972918 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.047979116 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.048100948 CEST	49762	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.048116922 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.051079035 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.051141977 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.051150084 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.051660061 CEST	49765	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:16.051681995 CEST	443	49765	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:16.055227041 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.055274010 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.055300951 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.055313110 CEST	49762	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.055356026 CEST	49762	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.057004929 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.057055950 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.057063103 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.062962055 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.063004971 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.063154936 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.063162088 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.063285112 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.068857908 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.072913885 CEST	49766	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:16.072927952 CEST	443	49766	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:16.074871063 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.074913979 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.074922085 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.074928999 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.075009108 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.075020075 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.087933064 CEST	49762	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.087949038 CEST	443	49762	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.097506046 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.097552061 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.097580910 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.097588062 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.097636938 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.097642899 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.100353956 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.100399017 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.100406885 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.105967045 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.106031895 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.106039047 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.111934900 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.111996889 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.112004042 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.117855072 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.117914915 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.117922068 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.123651981 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.123780966 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.123789072 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.125804901 CEST	49768	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.125838995 CEST	443	49768	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.125910044 CEST	49768	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.126286030 CEST	49769	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.126313925 CEST	443	49769	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.126374006 CEST	49769	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.126590014 CEST	49768	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.126601934 CEST	443	49768	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.127057076 CEST	49769	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.127070904 CEST	443	49769	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.127816916 CEST	49770	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.127824068 CEST	443	49770	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.127882957 CEST	49770	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.128205061 CEST	49770	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.128216028 CEST	443	49770	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.129782915 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.129848003 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.129853964 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.134802103 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.134907007 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.134912968 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.140028954 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.140098095 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.140105009 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.145476103 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.145546913 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.145554066 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.151179075 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.151240110 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.151246071 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.156614065 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.156692028 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.156697989 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.158596992 CEST	49772	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.158647060 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.158725023 CEST	49772	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.159156084 CEST	49772	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.159178019 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.160237074 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.160307884 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.160312891 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.161528111 CEST	49773	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.161546946 CEST	443	49773	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.161622047 CEST	49773	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.161878109 CEST	49774	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.161885023 CEST	443	49774	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.161943913 CEST	49774	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.162592888 CEST	49774	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.162602901 CEST	443	49774	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.162705898 CEST	49773	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.162714958 CEST	443	49773	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.164655924 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.164710045 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.164721966 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.168796062 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.168842077 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.168849945 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.173551083 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.173645020 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.173656940 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.177398920 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.177480936 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.177488089 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.181000948 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.181061983 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.181066990 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.184654951 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.184710979 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.184716940 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.188455105 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.188504934 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.188512087 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.195075989 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.195106983 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.195135117 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.195152998 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.195178986 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.195190907 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.197135925 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.197208881 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.197216034 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.199398994 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.199420929 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.199450970 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.199457884 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.199526072 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.201692104 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.204222918 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.204246998 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.204277039 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.204286098 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.204336882 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.206619978 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.208683014 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.208744049 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.208749056 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.211097956 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.211158037 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.211163044 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.213223934 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.213277102 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.213282108 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.215610981 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.215691090 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.215696096 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.217914104 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.217976093 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.217981100 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.220293999 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.220350981 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.220356941 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.220361948 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.220403910 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.222594023 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.224992990 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.225045919 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.225050926 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.227288008 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.227339029 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.227341890 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.227348089 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.227408886 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.229628086 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.229793072 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.229849100 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.230228901 CEST	49764	443	192.168.2.6	142.250.184.238
Oct 1, 2024 00:47:16.230241060 CEST	443	49764	142.250.184.238	192.168.2.6
Oct 1, 2024 00:47:16.477565050 CEST	443	49767	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:16.478818893 CEST	49767	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:16.478837013 CEST	443	49767	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:16.479198933 CEST	443	49767	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:16.479827881 CEST	49767	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:16.479890108 CEST	443	49767	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:16.480149031 CEST	49767	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:16.480257988 CEST	49767	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:16.480268002 CEST	443	49767	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:16.714785099 CEST	443	49767	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:16.714886904 CEST	443	49767	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:16.715037107 CEST	49767	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:16.724796057 CEST	49767	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:16.724829912 CEST	443	49767	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:16.734647036 CEST	49777	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:16.734688997 CEST	443	49777	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:16.734879017 CEST	49777	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:16.735117912 CEST	49777	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:16.735136032 CEST	443	49777	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:16.790335894 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.791325092 CEST	49772	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.791342974 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.791785955 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.792136908 CEST	49772	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.792205095 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.792453051 CEST	49772	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.792651892 CEST	443	49774	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.792864084 CEST	49774	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.792889118 CEST	443	49774	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.793268919 CEST	443	49774	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.793282986 CEST	443	49774	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.793342113 CEST	49774	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.793349981 CEST	443	49774	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.793415070 CEST	49774	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.794373035 CEST	443	49774	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.794682026 CEST	49774	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.794748068 CEST	443	49774	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.794955969 CEST	49774	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.794961929 CEST	443	49774	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.839406967 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.845235109 CEST	443	49770	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.845828056 CEST	49770	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.845844984 CEST	443	49770	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.846744061 CEST	443	49770	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.846806049 CEST	49770	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.847279072 CEST	49774	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.850883961 CEST	443	49768	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.852010012 CEST	443	49769	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.871539116 CEST	49770	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.871624947 CEST	443	49770	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.872184992 CEST	49769	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.872194052 CEST	443	49769	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.872327089 CEST	49768	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.872343063 CEST	443	49768	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.872502089 CEST	49770	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.872513056 CEST	443	49770	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.872832060 CEST	443	49768	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.872906923 CEST	443	49769	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.878979921 CEST	443	49773	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.909487963 CEST	49769	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.909739017 CEST	443	49769	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.910135031 CEST	49768	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.910257101 CEST	443	49768	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.910295963 CEST	49773	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.910305023 CEST	443	49773	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.910732985 CEST	49769	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.910808086 CEST	49768	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.910974979 CEST	443	49773	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.910995007 CEST	443	49773	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.911040068 CEST	49773	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.911046028 CEST	443	49773	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.911103964 CEST	49773	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.912081957 CEST	443	49773	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.915402889 CEST	49773	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.915576935 CEST	443	49773	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.915846109 CEST	49773	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:16.915855885 CEST	443	49773	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:16.925515890 CEST	49770	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:16.951402903 CEST	443	49769	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.951407909 CEST	443	49768	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:16.956669092 CEST	49773	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:17.063437939 CEST	443	49774	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:17.063523054 CEST	443	49774	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:17.063611984 CEST	49774	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:17.074316978 CEST	49774	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:17.074341059 CEST	443	49774	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:17.106141090 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.106184959 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.106287003 CEST	49772	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.106311083 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.113926888 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.113974094 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.114007950 CEST	49772	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.114028931 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.114046097 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.114090919 CEST	49772	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.114101887 CEST	49772	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.116672039 CEST	443	49770	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.117146015 CEST	443	49770	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.117436886 CEST	49770	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.149120092 CEST	443	49773	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:17.149229050 CEST	443	49773	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:17.149390936 CEST	49773	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:17.150552034 CEST	443	49768	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.150612116 CEST	443	49768	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.150616884 CEST	443	49769	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.150696039 CEST	49768	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.150779963 CEST	443	49769	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.153613091 CEST	49769	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.259921074 CEST	49769	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.259948969 CEST	443	49769	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.260521889 CEST	49768	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.260560036 CEST	443	49768	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.264738083 CEST	49772	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.264764071 CEST	443	49772	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.268630981 CEST	49773	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:17.268655062 CEST	443	49773	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:17.269017935 CEST	49770	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.269030094 CEST	443	49770	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.334122896 CEST	443	49777	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:17.338109970 CEST	49777	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:17.338128090 CEST	443	49777	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:17.338607073 CEST	443	49777	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:17.338784933 CEST	49779	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.338835955 CEST	443	49779	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.339123964 CEST	49777	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:17.339174032 CEST	49779	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.339215040 CEST	443	49777	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:17.339289904 CEST	49777	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:17.339494944 CEST	49779	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.339509964 CEST	443	49779	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.343864918 CEST	49781	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.343910933 CEST	443	49781	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.343981981 CEST	49781	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.344511986 CEST	49781	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:17.344527960 CEST	443	49781	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:17.383414030 CEST	443	49777	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:17.579063892 CEST	443	49777	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:17.579148054 CEST	443	49777	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:17.579236031 CEST	49777	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:17.580454111 CEST	49777	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:17.580477953 CEST	443	49777	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:18.053230047 CEST	443	49779	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.053579092 CEST	49779	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.053613901 CEST	443	49779	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.053971052 CEST	443	49779	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.054347992 CEST	49779	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.054410934 CEST	443	49779	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.054550886 CEST	49779	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.088860989 CEST	443	49781	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.089195967 CEST	49781	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.089214087 CEST	443	49781	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.089555025 CEST	443	49781	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.090375900 CEST	49781	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.090435028 CEST	443	49781	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.090614080 CEST	49781	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.095407009 CEST	443	49779	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.135402918 CEST	443	49781	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.323869944 CEST	443	49779	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.323909044 CEST	443	49779	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.323966026 CEST	49779	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.323978901 CEST	443	49779	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.325635910 CEST	49779	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.325645924 CEST	443	49779	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.325692892 CEST	443	49779	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.325696945 CEST	49779	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.325746059 CEST	49779	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.333389997 CEST	49782	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.333431959 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.333502054 CEST	49782	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.334059000 CEST	49783	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.334100962 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.334183931 CEST	49783	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.334471941 CEST	49782	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.334489107 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.334749937 CEST	49783	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.334775925 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.389821053 CEST	443	49781	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.389929056 CEST	443	49781	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:18.389995098 CEST	49781	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.390942097 CEST	49781	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:18.390959978 CEST	443	49781	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.047616959 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.047938108 CEST	49783	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.047951937 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.048347950 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.048752069 CEST	49783	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.048835993 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.049032927 CEST	49783	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.060992956 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.061311960 CEST	49782	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.061337948 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.061700106 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.062289953 CEST	49782	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.062345028 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.062448025 CEST	49782	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.095407963 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.107403040 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.113980055 CEST	49782	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.332221031 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.332243919 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.332391977 CEST	49783	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.332408905 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.332845926 CEST	49783	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.347826958 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.347856998 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.347863913 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.347894907 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.347908020 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.347918034 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.347949028 CEST	49782	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.347965956 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.347976923 CEST	49782	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.348030090 CEST	49782	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.413175106 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.413203955 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.413269997 CEST	49783	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.413285017 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.413342953 CEST	49783	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.413650036 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.413717985 CEST	49783	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.413722992 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.413748026 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.413798094 CEST	49783	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.429852009 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.429902077 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.429948092 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.429965973 CEST	49782	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.430031061 CEST	49782	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.501310110 CEST	49782	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.501343966 CEST	443	49782	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.501935959 CEST	49783	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:19.501960993 CEST	443	49783	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:19.757189989 CEST	443	49728	173.222.162.64	192.168.2.6
Oct 1, 2024 00:47:19.758754015 CEST	49728	443	192.168.2.6	173.222.162.64
Oct 1, 2024 00:47:31.406008959 CEST	49786	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:31.406054020 CEST	443	49786	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:31.406147003 CEST	49786	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:31.406754971 CEST	49786	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:31.406764984 CEST	443	49786	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:32.003192902 CEST	49717	80	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:32.008176088 CEST	80	49717	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:32.183963060 CEST	443	49786	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:32.184041977 CEST	49786	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:32.204693079 CEST	49787	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:32.204747915 CEST	443	49787	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:32.204833984 CEST	49787	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:32.205351114 CEST	49788	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:32.205385923 CEST	443	49788	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:32.205463886 CEST	49788	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:32.207621098 CEST	49790	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:32.207628965 CEST	443	49790	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:32.207714081 CEST	49790	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:32.207947016 CEST	49786	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:32.207966089 CEST	443	49786	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:32.208201885 CEST	443	49786	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:32.211740971 CEST	49790	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:32.211756945 CEST	443	49790	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:32.240727901 CEST	49788	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:32.240742922 CEST	443	49788	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:32.242003918 CEST	49787	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:32.242018938 CEST	443	49787	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:32.243864059 CEST	49786	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:32.244018078 CEST	49786	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:32.244028091 CEST	443	49786	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:32.244292974 CEST	49786	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:32.287399054 CEST	443	49786	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:32.419580936 CEST	443	49786	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:32.419733047 CEST	443	49786	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:32.419881105 CEST	49786	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:32.420118093 CEST	49786	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:32.420133114 CEST	443	49786	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:32.839319944 CEST	443	49790	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:32.839843988 CEST	49790	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:32.839894056 CEST	443	49790	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:32.840225935 CEST	443	49790	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:32.841339111 CEST	49790	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:32.841414928 CEST	443	49790	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:32.895400047 CEST	49790	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:35.777091026 CEST	443	49788	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:35.777483940 CEST	49788	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:35.777497053 CEST	443	49788	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:35.777877092 CEST	443	49788	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:35.778455973 CEST	49788	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:35.778513908 CEST	49788	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:35.778517962 CEST	443	49788	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:35.778532028 CEST	443	49788	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:35.831785917 CEST	49788	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:35.868572950 CEST	49716	80	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:35.873517990 CEST	80	49716	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:35.932281017 CEST	443	49788	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:35.932420969 CEST	443	49788	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:35.934433937 CEST	49788	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:35.936042070 CEST	49788	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:35.936065912 CEST	443	49788	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:36.093097925 CEST	49792	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:36.093147039 CEST	443	49792	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:36.093416929 CEST	49792	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:36.094713926 CEST	49792	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:36.094726086 CEST	443	49792	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:36.553348064 CEST	443	49792	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:36.599340916 CEST	49792	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:36.608987093 CEST	49792	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:36.609009027 CEST	443	49792	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:36.609555006 CEST	443	49792	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:36.610918999 CEST	49792	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:36.610989094 CEST	443	49792	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:36.611747026 CEST	49792	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:36.655741930 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:36.655776024 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:36.655843973 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:36.658174038 CEST	49794	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:36.658181906 CEST	443	49794	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:36.658245087 CEST	49794	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:36.658698082 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:36.658714056 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:36.659406900 CEST	443	49792	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:36.662926912 CEST	49794	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:36.662936926 CEST	443	49794	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:36.719461918 CEST	443	49792	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:36.719528913 CEST	443	49792	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:36.719594955 CEST	49792	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:36.811001062 CEST	49792	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:36.811042070 CEST	443	49792	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:36.813368082 CEST	443	49787	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:36.828438997 CEST	49787	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:36.828469038 CEST	443	49787	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:36.828959942 CEST	443	49787	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:36.854439020 CEST	49787	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:36.854562044 CEST	443	49787	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:36.899075031 CEST	49795	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:36.899118900 CEST	443	49795	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:36.899142981 CEST	49787	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:36.899307013 CEST	49795	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:36.933542013 CEST	49795	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:36.933573961 CEST	443	49795	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:36.946758032 CEST	49796	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:36.946799040 CEST	443	49796	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:36.946858883 CEST	49796	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:36.947812080 CEST	49797	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:36.947863102 CEST	443	49797	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:36.947930098 CEST	49797	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:36.948832989 CEST	49798	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:36.948851109 CEST	443	49798	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:36.948915958 CEST	49798	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:36.950053930 CEST	49796	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:36.950067043 CEST	443	49796	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:36.951397896 CEST	49797	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:36.951416969 CEST	443	49797	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:36.952107906 CEST	49798	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:36.952121019 CEST	443	49798	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.295265913 CEST	443	49794	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.296228886 CEST	49794	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.296242952 CEST	443	49794	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.296616077 CEST	443	49794	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.296780109 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.299504042 CEST	49794	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.299588919 CEST	443	49794	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.301477909 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.301489115 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.301817894 CEST	49794	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.302001953 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.305876970 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.306025028 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.306814909 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.306849957 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.347397089 CEST	443	49794	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.398679972 CEST	443	49795	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.404968023 CEST	49795	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:37.404989004 CEST	443	49795	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.405433893 CEST	443	49795	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.407531023 CEST	49795	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:37.407655001 CEST	443	49795	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.408607960 CEST	49795	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:37.422719002 CEST	443	49796	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.424088001 CEST	49796	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:37.424099922 CEST	443	49796	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.424426079 CEST	443	49796	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.453761101 CEST	49796	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:37.453761101 CEST	49796	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:37.453780890 CEST	443	49796	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.453984976 CEST	443	49796	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.455405951 CEST	443	49795	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.498328924 CEST	49796	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:37.541851997 CEST	443	49795	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.541929007 CEST	443	49795	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.542068005 CEST	49795	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:37.543215036 CEST	49795	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:37.543236017 CEST	443	49795	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.558578968 CEST	443	49796	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.558765888 CEST	443	49796	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.559046030 CEST	49796	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:37.559745073 CEST	49796	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:37.559765100 CEST	443	49796	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:37.559892893 CEST	49796	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:37.560250998 CEST	49796	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:37.590807915 CEST	443	49794	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.590878963 CEST	443	49794	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.590971947 CEST	443	49794	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.591135025 CEST	49794	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.592489004 CEST	49794	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.592513084 CEST	443	49794	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.593445063 CEST	49800	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.593487978 CEST	443	49800	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.599594116 CEST	49800	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.599921942 CEST	49800	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.599939108 CEST	443	49800	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.674803972 CEST	443	49797	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.675173998 CEST	49797	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:37.675199032 CEST	443	49797	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.675662041 CEST	443	49797	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.676229000 CEST	49797	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:37.676502943 CEST	49797	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:37.676574945 CEST	443	49797	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.676644087 CEST	443	49797	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.689079046 CEST	443	49798	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.689630985 CEST	49798	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:37.689649105 CEST	443	49798	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.689980030 CEST	443	49798	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.690623999 CEST	49798	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:37.690623999 CEST	49798	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:37.690651894 CEST	443	49798	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.690711975 CEST	443	49798	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.726320028 CEST	49797	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:37.741235971 CEST	49798	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:37.792510986 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.792568922 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.792602062 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.792735100 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.792767048 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.792790890 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.792793036 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.792793989 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.792810917 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.793070078 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.802432060 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.802762032 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.802769899 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.810884953 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.810998917 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.811005116 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.817641020 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.818053961 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.818061113 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.866513968 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.880836964 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.881656885 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.881688118 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.881730080 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.881742954 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.881880045 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.887866974 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.894313097 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.894361019 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.894434929 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.894443035 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.899851084 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.900414944 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.900530100 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.900624037 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.900634050 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.901463985 CEST	443	49797	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.901531935 CEST	443	49797	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.901638031 CEST	49797	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:37.905447960 CEST	49797	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:37.905472040 CEST	443	49797	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.907100916 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.907776117 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.907785892 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.913314104 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.913502932 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.913512945 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.919632912 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.919774055 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.919783115 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.925694942 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.926397085 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.926405907 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.931123018 CEST	443	49798	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.931304932 CEST	443	49798	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.931448936 CEST	49798	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:37.932400942 CEST	49798	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:37.932420015 CEST	443	49798	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:37.933722019 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.935786963 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.935796022 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.939493895 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.939770937 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.939778090 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.944529057 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.944840908 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.944849014 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.969383001 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.969415903 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.969439030 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.969506979 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.969533920 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.969533920 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.969552994 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.971795082 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.971803904 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.974406958 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.974636078 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.974649906 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.980853081 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.981009960 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.981024027 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.986545086 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.986736059 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.986743927 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.991966963 CEST	49803	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:37.992001057 CEST	443	49803	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:37.992132902 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.992158890 CEST	49803	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:37.992196083 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.992203951 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.992494106 CEST	49803	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:37.992505074 CEST	443	49803	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:37.997703075 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:37.998615980 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:37.998625040 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:38.003077030 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:38.003273010 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:38.003284931 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:38.009111881 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:38.009195089 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:38.009218931 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:38.014873028 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:38.014961004 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:38.014986038 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:38.015193939 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:38.016360044 CEST	49793	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:38.016379118 CEST	443	49793	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:38.241904020 CEST	443	49800	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:38.295485973 CEST	49800	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:38.639405966 CEST	443	49803	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:38.680540085 CEST	49803	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:38.970916986 CEST	49803	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:38.970937967 CEST	443	49803	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:38.971167088 CEST	49800	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:38.971191883 CEST	443	49800	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:38.972443104 CEST	443	49803	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:38.972497940 CEST	49803	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:38.972821951 CEST	443	49800	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:38.974087954 CEST	49800	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:38.974188089 CEST	443	49800	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:38.975267887 CEST	49803	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:38.975351095 CEST	443	49803	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:38.976011992 CEST	49800	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:38.976116896 CEST	49803	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:38.976125002 CEST	443	49803	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:39.016602993 CEST	49803	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:39.023401976 CEST	443	49800	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:39.166054010 CEST	443	49800	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:39.166147947 CEST	443	49800	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:39.166207075 CEST	49800	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:39.167846918 CEST	443	49803	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:39.167924881 CEST	443	49803	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:39.167990923 CEST	49803	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:39.375514984 CEST	49803	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:39.375555992 CEST	443	49803	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:39.667207956 CEST	49809	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:39.667243004 CEST	443	49809	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:39.667310953 CEST	49809	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:39.667771101 CEST	49809	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:39.667783976 CEST	443	49809	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:39.732876062 CEST	49800	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:39.732891083 CEST	443	49800	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:39.756366968 CEST	49811	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:39.756392956 CEST	443	49811	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:39.756452084 CEST	49811	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:39.756779909 CEST	49812	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:39.756803989 CEST	443	49812	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:39.756855011 CEST	49812	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:39.757266045 CEST	49813	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:39.757291079 CEST	443	49813	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:39.757344961 CEST	49813	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:39.759532928 CEST	49811	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:39.759543896 CEST	443	49811	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:39.760319948 CEST	49812	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:39.760335922 CEST	443	49812	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:39.760636091 CEST	49813	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:39.760646105 CEST	443	49813	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:39.860224962 CEST	49814	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:39.860264063 CEST	443	49814	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:39.860327005 CEST	49814	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:39.860647917 CEST	49814	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:39.860662937 CEST	443	49814	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:39.938882113 CEST	49815	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:39.938930035 CEST	443	49815	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:39.938993931 CEST	49815	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:39.939229012 CEST	49815	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:39.939238071 CEST	443	49815	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:39.945527077 CEST	49816	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:39.945555925 CEST	443	49816	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:39.945622921 CEST	49816	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:39.946662903 CEST	49816	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:39.946676970 CEST	443	49816	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.270049095 CEST	443	49809	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:40.270307064 CEST	49809	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:40.270330906 CEST	443	49809	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:40.270807028 CEST	443	49809	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:40.271171093 CEST	49809	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:40.271306992 CEST	443	49809	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:40.271500111 CEST	49809	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:40.316263914 CEST	443	49814	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:40.317486048 CEST	49814	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:40.317512035 CEST	443	49814	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:40.317910910 CEST	443	49814	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:40.319133043 CEST	49814	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:40.319217920 CEST	443	49814	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:40.319401979 CEST	443	49809	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:40.319565058 CEST	49814	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:40.363405943 CEST	443	49814	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:40.391077995 CEST	443	49811	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:40.391379118 CEST	49811	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:40.391412020 CEST	443	49811	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:40.391748905 CEST	443	49811	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:40.392220020 CEST	49811	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:40.392281055 CEST	443	49811	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:40.392410040 CEST	49811	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:40.405533075 CEST	443	49815	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.405783892 CEST	49815	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:40.405808926 CEST	443	49815	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.406156063 CEST	443	49815	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.406637907 CEST	49815	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:40.406723022 CEST	443	49815	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.406862974 CEST	49815	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:40.411340952 CEST	443	49816	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.414572954 CEST	49816	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:40.414587021 CEST	443	49816	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.414998055 CEST	443	49816	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.416611910 CEST	49816	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:40.416687012 CEST	443	49816	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.416788101 CEST	49816	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:40.435415030 CEST	443	49811	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:40.447407961 CEST	443	49815	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.463402987 CEST	443	49816	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.463447094 CEST	443	49814	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:40.463525057 CEST	443	49814	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:40.463809013 CEST	49814	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:40.464322090 CEST	49814	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:40.464339972 CEST	443	49814	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:40.487864971 CEST	443	49813	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.488584995 CEST	49813	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:40.488605976 CEST	443	49813	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.489080906 CEST	443	49813	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.489514112 CEST	443	49812	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.490348101 CEST	49813	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:40.490425110 CEST	443	49813	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.490757942 CEST	49813	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:40.494728088 CEST	49812	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:40.494755983 CEST	443	49812	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.495153904 CEST	443	49812	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.496260881 CEST	49812	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:40.496260881 CEST	49812	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:40.496279001 CEST	443	49812	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.496329069 CEST	443	49812	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.516231060 CEST	443	49809	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:40.516302109 CEST	443	49809	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:40.516748905 CEST	49809	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:40.516782045 CEST	443	49809	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:40.516798019 CEST	49809	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:40.516798019 CEST	49809	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:40.516979933 CEST	49809	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:40.518233061 CEST	49823	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:40.518271923 CEST	443	49823	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:40.518343925 CEST	49823	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:40.518734932 CEST	49823	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:40.518749952 CEST	443	49823	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:40.531407118 CEST	443	49813	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.546407938 CEST	443	49816	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.546475887 CEST	443	49816	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.546612024 CEST	49816	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:40.550271034 CEST	49816	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:40.550285101 CEST	443	49816	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.553589106 CEST	443	49815	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.553657055 CEST	443	49815	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.553981066 CEST	49815	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:40.557445049 CEST	49815	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:40.557473898 CEST	443	49815	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:40.585294962 CEST	49812	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:40.670758963 CEST	443	49811	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:40.670840025 CEST	443	49811	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:40.671060085 CEST	49811	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:40.673676968 CEST	49811	443	192.168.2.6	142.250.184.228
Oct 1, 2024 00:47:40.673707008 CEST	443	49811	142.250.184.228	192.168.2.6
Oct 1, 2024 00:47:40.682615042 CEST	49825	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:40.682647943 CEST	443	49825	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:40.682868004 CEST	49825	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:40.683093071 CEST	49825	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:40.683106899 CEST	443	49825	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:40.695405960 CEST	443	49813	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.695884943 CEST	49813	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:40.759247065 CEST	443	49813	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.759315014 CEST	443	49813	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.759462118 CEST	49813	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:40.761132002 CEST	49813	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:40.761148930 CEST	443	49813	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.761692047 CEST	443	49812	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.761917114 CEST	443	49812	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.762298107 CEST	49812	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:40.767433882 CEST	49812	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:40.767452002 CEST	443	49812	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:40.801139116 CEST	49827	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:40.801194906 CEST	443	49827	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:40.801285982 CEST	49827	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:40.801762104 CEST	49828	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:40.801801920 CEST	443	49828	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:40.801908970 CEST	49828	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:40.802048922 CEST	49827	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:40.802064896 CEST	443	49827	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:40.802350044 CEST	49828	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:40.802361965 CEST	443	49828	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.124636889 CEST	443	49823	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:41.150779009 CEST	49823	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:41.150808096 CEST	443	49823	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:41.151242971 CEST	443	49823	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:41.153134108 CEST	49823	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:41.153211117 CEST	443	49823	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:41.153333902 CEST	49823	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:41.153333902 CEST	49823	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:41.153361082 CEST	443	49823	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:41.322031021 CEST	443	49825	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:41.332395077 CEST	443	49823	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:41.332741976 CEST	443	49823	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:41.337578058 CEST	49823	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:41.369749069 CEST	49823	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:41.369781017 CEST	443	49823	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:41.373634100 CEST	49825	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:41.373657942 CEST	443	49825	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:41.374169111 CEST	443	49825	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:41.403244972 CEST	49825	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:41.403417110 CEST	443	49825	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:41.403652906 CEST	49825	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:41.451404095 CEST	443	49825	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:41.516777992 CEST	49831	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:41.516823053 CEST	443	49831	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:41.516891956 CEST	49831	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:41.517184019 CEST	49831	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:41.517196894 CEST	443	49831	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:41.521744013 CEST	443	49828	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.521996975 CEST	49828	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:41.522022963 CEST	443	49828	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.522412062 CEST	443	49828	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.522699118 CEST	443	49827	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.522763968 CEST	49828	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:41.522841930 CEST	443	49828	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.523116112 CEST	49828	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:41.523353100 CEST	49827	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:41.523377895 CEST	443	49827	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.523778915 CEST	443	49827	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.524291992 CEST	49827	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:41.524358988 CEST	443	49827	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.524456978 CEST	49827	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:41.567404032 CEST	443	49828	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.567409992 CEST	443	49827	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.603187084 CEST	443	49825	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:41.603266001 CEST	443	49825	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:41.603327036 CEST	49825	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:41.605515957 CEST	49825	443	192.168.2.6	142.250.186.164
Oct 1, 2024 00:47:41.605535030 CEST	443	49825	142.250.186.164	192.168.2.6
Oct 1, 2024 00:47:41.793279886 CEST	443	49828	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.793370962 CEST	443	49828	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.793432951 CEST	49828	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:41.794368029 CEST	443	49827	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.794616938 CEST	443	49827	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.794666052 CEST	49827	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:41.797535896 CEST	49828	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:41.797561884 CEST	443	49828	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:41.799025059 CEST	49827	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:41.799046040 CEST	443	49827	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:42.113500118 CEST	443	49831	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:42.113929987 CEST	49831	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:42.113955021 CEST	443	49831	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:42.114290953 CEST	443	49831	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:42.114633083 CEST	49831	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:42.114681959 CEST	443	49831	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:42.114952087 CEST	49831	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:42.159415007 CEST	443	49831	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:42.352663994 CEST	443	49831	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:42.352747917 CEST	443	49831	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:42.352802038 CEST	49831	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:42.353900909 CEST	49831	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:42.353919029 CEST	443	49831	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:42.759743929 CEST	443	49790	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:42.759819031 CEST	443	49790	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:42.760025024 CEST	49790	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:43.001491070 CEST	49790	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:43.001521111 CEST	443	49790	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:44.265196085 CEST	49835	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:44.265254974 CEST	443	49835	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:44.265315056 CEST	49835	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:44.265746117 CEST	49835	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:44.265760899 CEST	443	49835	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:44.266252041 CEST	49836	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:44.266309977 CEST	443	49836	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:44.266383886 CEST	49836	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:44.266834021 CEST	49836	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:44.266846895 CEST	443	49836	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:44.277610064 CEST	49787	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:44.323404074 CEST	443	49787	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:44.398019075 CEST	443	49787	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:44.398140907 CEST	443	49787	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:44.398189068 CEST	49787	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:44.420213938 CEST	49787	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:44.420242071 CEST	443	49787	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:44.429111004 CEST	49837	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:44.429163933 CEST	443	49837	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:44.429234028 CEST	49837	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:44.429533958 CEST	49837	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:44.429546118 CEST	443	49837	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:44.651024103 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:44.651078939 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:44.651139975 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:44.651699066 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:44.651715040 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:44.652308941 CEST	49840	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:44.652371883 CEST	443	49840	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:44.652451992 CEST	49840	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:44.652757883 CEST	49840	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:44.652771950 CEST	443	49840	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:44.709614992 CEST	49841	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:44.709666014 CEST	443	49841	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:44.709738970 CEST	49841	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:44.710637093 CEST	49842	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:44.710644960 CEST	443	49842	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:44.710710049 CEST	49842	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:44.712137938 CEST	49842	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:44.712155104 CEST	443	49842	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:44.712606907 CEST	49841	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:44.712620020 CEST	443	49841	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:44.890542984 CEST	443	49837	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:44.890805960 CEST	49837	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:44.890837908 CEST	443	49837	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:44.891163111 CEST	443	49837	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:44.891597033 CEST	49837	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:44.891660929 CEST	443	49837	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:44.891937971 CEST	49837	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:44.898154020 CEST	443	49836	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:44.898586035 CEST	49836	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:44.898613930 CEST	443	49836	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:44.898957014 CEST	443	49836	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:44.899245977 CEST	49836	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:44.899343967 CEST	443	49836	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:44.939399958 CEST	443	49837	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:44.996275902 CEST	49836	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:45.209667921 CEST	443	49837	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:45.209846973 CEST	443	49837	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:45.210000038 CEST	49837	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:45.283371925 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.291305065 CEST	443	49840	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.401974916 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.402002096 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.402329922 CEST	49840	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.402364016 CEST	443	49840	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.402549982 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.402827024 CEST	443	49840	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.405294895 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.405404091 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.406022072 CEST	49840	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.406100035 CEST	443	49840	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.406416893 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.406438112 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.407708883 CEST	49840	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.415019989 CEST	49837	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:45.415059090 CEST	443	49837	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:45.440421104 CEST	443	49841	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.440535069 CEST	443	49842	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.443526030 CEST	49842	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:45.443542957 CEST	443	49842	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.443937063 CEST	443	49842	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.444452047 CEST	49841	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:45.444462061 CEST	443	49841	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.444854975 CEST	443	49841	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.445177078 CEST	49842	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:45.445251942 CEST	443	49842	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.445732117 CEST	49842	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:45.445745945 CEST	443	49842	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.446438074 CEST	49841	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:45.446502924 CEST	443	49841	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.446846962 CEST	49841	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:45.446857929 CEST	443	49841	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.449723959 CEST	49844	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:45.449771881 CEST	443	49844	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:45.449867010 CEST	49844	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:45.451066971 CEST	49845	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:45.451109886 CEST	443	49845	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:45.451168060 CEST	49845	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:45.451359987 CEST	49844	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:45.451375008 CEST	443	49844	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:45.452045918 CEST	49845	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:45.452069998 CEST	443	49845	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:45.455404997 CEST	443	49840	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.467288017 CEST	49846	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:45.467381001 CEST	443	49846	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:45.467468023 CEST	49846	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:45.467689037 CEST	49846	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:45.467719078 CEST	443	49846	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:45.602631092 CEST	443	49840	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.602710962 CEST	443	49840	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.602763891 CEST	49840	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.624854088 CEST	49840	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.624878883 CEST	443	49840	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.664437056 CEST	443	49842	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.664519072 CEST	443	49842	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.664604902 CEST	49842	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:45.665503979 CEST	443	49841	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.665582895 CEST	443	49841	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.665740967 CEST	49841	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:45.671279907 CEST	49841	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:45.671299934 CEST	443	49841	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.678205013 CEST	49842	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:45.678214073 CEST	443	49842	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:45.688957930 CEST	49847	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.688986063 CEST	443	49847	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.689047098 CEST	49847	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.689429998 CEST	49847	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.689444065 CEST	443	49847	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.900712967 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.900755882 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.900829077 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.900829077 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.900846004 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.900871038 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.900907040 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.900912046 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.900952101 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.902472019 CEST	443	49844	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:45.906826019 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.906936884 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.907011032 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.907020092 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.913328886 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.914231062 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.914241076 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.917243004 CEST	443	49845	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:45.917809963 CEST	49844	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:45.917841911 CEST	443	49844	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:45.918255091 CEST	443	49844	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:45.919409037 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.921749115 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.921755075 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.924395084 CEST	49845	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:45.924420118 CEST	443	49845	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:45.924884081 CEST	443	49845	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:45.937114954 CEST	443	49846	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:45.944171906 CEST	49846	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:45.944252968 CEST	443	49846	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:45.944518089 CEST	49845	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:45.944669008 CEST	443	49845	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:45.944766998 CEST	443	49846	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:45.947304964 CEST	49844	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:45.947443008 CEST	443	49844	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:45.951342106 CEST	49846	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:45.951482058 CEST	443	49846	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:45.956870079 CEST	49845	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:45.959824085 CEST	49844	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:45.959877014 CEST	49846	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:45.987021923 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.987481117 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.987498999 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.989727020 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.989785910 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.989792109 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.996016979 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:45.999468088 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:45.999476910 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:46.002316952 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:46.003401041 CEST	443	49845	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.003410101 CEST	443	49844	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.003413916 CEST	443	49846	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:46.003458023 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:46.003463030 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:46.008976936 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:46.009139061 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:46.009201050 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:46.063106060 CEST	443	49844	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.063183069 CEST	443	49844	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.063241959 CEST	49844	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.072201014 CEST	49844	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.072227001 CEST	443	49844	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.075815916 CEST	443	49845	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.075885057 CEST	443	49845	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.076044083 CEST	49845	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.077709913 CEST	49839	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:46.077739954 CEST	443	49839	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:46.083579063 CEST	443	49846	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:46.083647966 CEST	443	49846	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:46.083734989 CEST	49846	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:46.089495897 CEST	49848	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:46.089561939 CEST	443	49848	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:46.089689970 CEST	49848	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:46.090178967 CEST	49848	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:46.090195894 CEST	443	49848	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:46.108932018 CEST	49846	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:46.108958960 CEST	443	49846	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:46.110619068 CEST	49845	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.110641003 CEST	443	49845	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.147243977 CEST	49849	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.147270918 CEST	443	49849	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.147443056 CEST	49849	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.147655010 CEST	49849	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.147666931 CEST	443	49849	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.149656057 CEST	49850	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.149662971 CEST	443	49850	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.149725914 CEST	49850	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.149919987 CEST	49850	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.149929047 CEST	443	49850	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.326786995 CEST	443	49847	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:46.327070951 CEST	49847	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:46.327090979 CEST	443	49847	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:46.327423096 CEST	443	49847	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:46.327882051 CEST	49847	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:46.327943087 CEST	443	49847	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:46.328025103 CEST	49847	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:46.371423006 CEST	443	49847	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:46.602905035 CEST	443	49850	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.603198051 CEST	49850	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.603231907 CEST	443	49850	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.603600025 CEST	443	49850	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.604350090 CEST	49850	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.604413033 CEST	443	49850	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.604733944 CEST	49850	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.609539032 CEST	443	49849	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.609910011 CEST	49849	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.609924078 CEST	443	49849	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.610245943 CEST	443	49849	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.610905886 CEST	49849	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.610970974 CEST	443	49849	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.611046076 CEST	49849	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.617116928 CEST	443	49847	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:46.617249012 CEST	443	49847	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:46.617299080 CEST	49847	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:46.617422104 CEST	49847	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:46.617440939 CEST	443	49847	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:46.617451906 CEST	49847	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:46.617499113 CEST	49847	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:46.647434950 CEST	443	49850	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.651413918 CEST	443	49849	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.696312904 CEST	443	49848	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:46.696559906 CEST	49848	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:46.696604013 CEST	443	49848	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:46.696950912 CEST	443	49848	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:46.697381973 CEST	49848	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:46.697449923 CEST	443	49848	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:46.697561979 CEST	49848	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:46.743413925 CEST	443	49848	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:46.745394945 CEST	443	49850	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.745476961 CEST	443	49850	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.745526075 CEST	49850	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.746022940 CEST	49850	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.746045113 CEST	443	49850	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.761789083 CEST	443	49849	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.761867046 CEST	443	49849	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.761907101 CEST	49849	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.762782097 CEST	49849	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:46.762793064 CEST	443	49849	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:46.942727089 CEST	443	49848	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:46.942827940 CEST	443	49848	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:46.942888975 CEST	49848	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:46.943627119 CEST	49848	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:46.943650961 CEST	443	49848	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:46.945112944 CEST	49851	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:46.945141077 CEST	443	49851	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:46.945219040 CEST	49851	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:46.945804119 CEST	49851	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:46.945813894 CEST	443	49851	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:47.241218090 CEST	49717	80	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:47.247714043 CEST	80	49717	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:47.247776031 CEST	49717	80	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:47.549422979 CEST	443	49851	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:47.549743891 CEST	49851	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:47.549762011 CEST	443	49851	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:47.550096989 CEST	443	49851	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:47.550621033 CEST	49851	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:47.550621033 CEST	49851	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:47.550635099 CEST	443	49851	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:47.550647020 CEST	49851	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:47.550693989 CEST	443	49851	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:47.599440098 CEST	49851	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:47.723373890 CEST	443	49851	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:47.724147081 CEST	443	49851	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:47.724183083 CEST	49851	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:47.724195004 CEST	443	49851	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:47.724219084 CEST	49851	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:47.724246025 CEST	49851	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:47.727132082 CEST	49852	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:47.727180958 CEST	443	49852	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:47.727643013 CEST	49852	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:47.727643013 CEST	49852	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:47.727677107 CEST	443	49852	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:47.753982067 CEST	443	49835	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:47.754548073 CEST	49835	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:47.754566908 CEST	443	49835	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:47.754944086 CEST	443	49835	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:47.755430937 CEST	49835	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:47.755500078 CEST	443	49835	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:47.800307989 CEST	49835	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:48.334461927 CEST	443	49852	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:48.381140947 CEST	49852	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:48.625689030 CEST	49852	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:48.625726938 CEST	443	49852	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:48.626260996 CEST	443	49852	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:48.629713058 CEST	49852	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:48.629817963 CEST	443	49852	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:48.630143881 CEST	49852	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:48.671421051 CEST	443	49852	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:48.802526951 CEST	443	49852	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:48.802612066 CEST	443	49852	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:48.802670956 CEST	49852	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:48.807353973 CEST	49852	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:48.807377100 CEST	443	49852	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:49.926249981 CEST	49854	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:47:49.926314116 CEST	443	49854	142.250.185.100	192.168.2.6
Oct 1, 2024 00:47:49.926445007 CEST	49854	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:47:49.926722050 CEST	49854	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:47:49.926738024 CEST	443	49854	142.250.185.100	192.168.2.6
Oct 1, 2024 00:47:50.159907103 CEST	49855	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:50.159965992 CEST	443	49855	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:50.160027027 CEST	49855	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:50.160521984 CEST	49855	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:50.160537004 CEST	443	49855	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:50.171036005 CEST	49835	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:50.211406946 CEST	443	49835	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:50.283185005 CEST	443	49835	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:50.283301115 CEST	443	49835	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:50.283345938 CEST	49835	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:50.285866976 CEST	49835	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:50.285887003 CEST	443	49835	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:50.317956924 CEST	49856	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:50.317996979 CEST	443	49856	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:50.318252087 CEST	49856	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:50.319787979 CEST	49856	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:50.319798946 CEST	443	49856	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:50.519081116 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:50.519129992 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:50.519268036 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:50.523627996 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:50.523646116 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:50.524936914 CEST	49859	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:50.524987936 CEST	443	49859	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:50.525065899 CEST	49859	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:50.525512934 CEST	49859	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:50.525527000 CEST	443	49859	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:50.565802097 CEST	49860	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:50.565815926 CEST	443	49860	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:50.565880060 CEST	49860	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:50.566210032 CEST	49860	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:50.566220999 CEST	443	49860	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:50.566487074 CEST	443	49854	142.250.185.100	192.168.2.6
Oct 1, 2024 00:47:50.567682981 CEST	49854	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:47:50.567711115 CEST	443	49854	142.250.185.100	192.168.2.6
Oct 1, 2024 00:47:50.568113089 CEST	443	49854	142.250.185.100	192.168.2.6
Oct 1, 2024 00:47:50.568782091 CEST	49861	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:50.568804026 CEST	443	49861	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:50.569057941 CEST	49861	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:50.569096088 CEST	49854	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:47:50.569180965 CEST	443	49854	142.250.185.100	192.168.2.6
Oct 1, 2024 00:47:50.569328070 CEST	49861	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:50.569338083 CEST	443	49861	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:50.614420891 CEST	49854	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:47:50.657079935 CEST	443	49855	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:50.657438993 CEST	49855	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:50.657470942 CEST	443	49855	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:50.657855988 CEST	443	49855	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:50.658442020 CEST	49855	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:50.658535957 CEST	443	49855	3.33.130.190	192.168.2.6
Oct 1, 2024 00:47:50.708961964 CEST	49855	443	192.168.2.6	3.33.130.190
Oct 1, 2024 00:47:50.806313038 CEST	443	49856	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:50.848233938 CEST	49856	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.099941969 CEST	49856	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.099967003 CEST	443	49856	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.100495100 CEST	443	49856	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.101567030 CEST	49856	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.101679087 CEST	443	49856	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.102375031 CEST	49856	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.147408962 CEST	443	49856	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.179075003 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.179507971 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.179523945 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.179841995 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.180455923 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.180519104 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.180710077 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.180733919 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.183350086 CEST	443	49859	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.183564901 CEST	49859	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.183584929 CEST	443	49859	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.183914900 CEST	443	49859	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.184365988 CEST	49859	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.184437037 CEST	443	49859	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.184492111 CEST	49859	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.205856085 CEST	443	49856	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.205935955 CEST	443	49856	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.205987930 CEST	49856	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.206434965 CEST	49856	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.206454992 CEST	443	49856	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.224817991 CEST	49859	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.224862099 CEST	443	49859	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.226646900 CEST	49862	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.226696014 CEST	443	49862	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.226763964 CEST	49862	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.227022886 CEST	49862	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.227035046 CEST	443	49862	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.227668047 CEST	49863	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.227715015 CEST	443	49863	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.228046894 CEST	49863	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.228282928 CEST	49863	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.228296995 CEST	443	49863	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.233078957 CEST	49864	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.233112097 CEST	443	49864	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.233165026 CEST	49864	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.233335972 CEST	49864	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.233350992 CEST	443	49864	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.299223900 CEST	443	49860	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.299521923 CEST	49860	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:51.299535036 CEST	443	49860	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.299905062 CEST	443	49860	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.300321102 CEST	49860	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:51.300436974 CEST	443	49860	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.300542116 CEST	49860	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:51.300559044 CEST	443	49860	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.309161901 CEST	443	49861	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.309416056 CEST	49861	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:51.309449911 CEST	443	49861	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.309808016 CEST	443	49861	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.310122013 CEST	49861	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:51.310192108 CEST	443	49861	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.310265064 CEST	49861	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:51.310296059 CEST	443	49861	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.364676952 CEST	49861	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:51.468497038 CEST	443	49859	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.468574047 CEST	443	49859	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.468619108 CEST	49859	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.468929052 CEST	49859	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.468947887 CEST	443	49859	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.470110893 CEST	49865	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.470155001 CEST	443	49865	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.470211983 CEST	49865	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.484004021 CEST	49865	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.484040022 CEST	443	49865	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.514988899 CEST	443	49860	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.515064955 CEST	443	49860	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.515160084 CEST	49860	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:51.515441895 CEST	49860	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:51.515460014 CEST	443	49860	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.526397943 CEST	443	49861	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.526501894 CEST	443	49861	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.526542902 CEST	49861	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:51.526818037 CEST	49861	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:51.526829958 CEST	443	49861	52.222.236.107	192.168.2.6
Oct 1, 2024 00:47:51.526880980 CEST	49861	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:51.526880980 CEST	49861	443	192.168.2.6	52.222.236.107
Oct 1, 2024 00:47:51.583295107 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.583340883 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.583369970 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.583419085 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.583424091 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.583435059 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.583478928 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.583605051 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.583656073 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.589407921 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.589669943 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.589721918 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.589734077 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.595853090 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.595915079 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.595922947 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.602092028 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.602178097 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.602185011 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.644083023 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.668879032 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.671969891 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.672029018 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.672033072 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.672040939 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.672096014 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.677752018 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.684241056 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.684267998 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.684293985 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.684298992 CEST	443	49862	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.684312105 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.684360027 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.684576035 CEST	49862	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.684600115 CEST	443	49862	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.684938908 CEST	443	49862	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.685308933 CEST	49862	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.685373068 CEST	443	49862	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.685465097 CEST	49862	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.690365076 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.691133976 CEST	443	49863	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.691658020 CEST	49863	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.691669941 CEST	443	49863	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.692666054 CEST	443	49863	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.692996979 CEST	49863	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.693120956 CEST	49863	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.693129063 CEST	443	49863	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.693357944 CEST	443	49863	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.696626902 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.696667910 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.696692944 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.696703911 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.696741104 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.702126026 CEST	443	49864	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.702430964 CEST	49864	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.702454090 CEST	443	49864	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.702853918 CEST	443	49864	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.703156948 CEST	49864	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.703176022 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.703377008 CEST	49864	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.703425884 CEST	443	49864	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.708664894 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.708703995 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.708715916 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.708726883 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.708767891 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.715492964 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.722466946 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.722523928 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.722565889 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.722578049 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.722611904 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:51.722619057 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.722959995 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.722959995 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:51.731408119 CEST	443	49862	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.737895966 CEST	49866	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:51.737957001 CEST	443	49866	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:51.738106012 CEST	49866	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:51.739061117 CEST	49863	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.739770889 CEST	49866	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:51.739787102 CEST	443	49866	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:51.752722979 CEST	49864	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.771456003 CEST	49867	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:51.771514893 CEST	443	49867	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:51.771583080 CEST	49867	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:51.771836996 CEST	49867	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:51.771852970 CEST	443	49867	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:51.835674047 CEST	443	49862	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.835761070 CEST	443	49862	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.835829973 CEST	49862	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.837516069 CEST	443	49863	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.837585926 CEST	443	49863	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.837640047 CEST	49863	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.842739105 CEST	443	49864	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.842803001 CEST	443	49864	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.842870951 CEST	49864	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.854994059 CEST	49864	443	192.168.2.6	104.22.75.216
Oct 1, 2024 00:47:51.855010986 CEST	443	49864	104.22.75.216	192.168.2.6
Oct 1, 2024 00:47:51.855063915 CEST	49863	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.855083942 CEST	443	49863	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.855894089 CEST	49862	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.855925083 CEST	443	49862	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.868304968 CEST	49870	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.868343115 CEST	443	49870	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.868411064 CEST	49870	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.868637085 CEST	49870	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.868648052 CEST	443	49870	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.870129108 CEST	49871	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.870173931 CEST	443	49871	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:51.870297909 CEST	49871	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.870475054 CEST	49871	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:51.870491028 CEST	443	49871	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.027972937 CEST	49858	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:52.028002977 CEST	443	49858	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:52.121901989 CEST	443	49865	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:52.122497082 CEST	49865	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:52.122518063 CEST	443	49865	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:52.122818947 CEST	443	49865	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:52.123264074 CEST	49865	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:52.123327971 CEST	443	49865	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:52.123692036 CEST	49865	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:52.171422005 CEST	443	49865	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:52.331351995 CEST	443	49870	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.332010031 CEST	49870	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:52.332026958 CEST	443	49870	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.332365990 CEST	443	49870	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.333003998 CEST	49870	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:52.333065033 CEST	443	49870	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.334073067 CEST	49870	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:52.335897923 CEST	443	49871	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.336455107 CEST	49871	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:52.336500883 CEST	443	49871	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.336838007 CEST	443	49871	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.337409973 CEST	49871	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:52.337524891 CEST	443	49871	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.337846994 CEST	49871	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:52.342223883 CEST	443	49866	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:52.342694998 CEST	49866	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:52.342742920 CEST	443	49866	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:52.343111038 CEST	443	49866	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:52.343884945 CEST	49866	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:52.343952894 CEST	443	49866	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:52.344403982 CEST	49866	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:52.344432116 CEST	49866	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:52.344444036 CEST	443	49866	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:52.379412889 CEST	443	49870	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.383421898 CEST	443	49871	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.413059950 CEST	443	49865	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:52.413809061 CEST	443	49865	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:52.413866043 CEST	49865	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:52.413918972 CEST	49865	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:52.413918972 CEST	49865	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:52.413944960 CEST	443	49865	142.250.186.78	192.168.2.6
Oct 1, 2024 00:47:52.414146900 CEST	49865	443	192.168.2.6	142.250.186.78
Oct 1, 2024 00:47:52.464306116 CEST	443	49871	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.464385986 CEST	443	49871	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.464469910 CEST	49871	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:52.478760004 CEST	49871	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:52.478791952 CEST	443	49871	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.480966091 CEST	443	49870	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.481048107 CEST	443	49870	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.481142998 CEST	49870	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:52.498703003 CEST	443	49867	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:52.499886036 CEST	49867	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:52.499917030 CEST	443	49867	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:52.500332117 CEST	443	49867	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:52.501221895 CEST	49867	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:52.501307964 CEST	443	49867	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:52.501751900 CEST	49867	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:52.503271103 CEST	49870	443	192.168.2.6	104.26.3.70
Oct 1, 2024 00:47:52.503295898 CEST	443	49870	104.26.3.70	192.168.2.6
Oct 1, 2024 00:47:52.513518095 CEST	443	49866	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:52.513941050 CEST	443	49866	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:52.514034033 CEST	49866	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:52.514529943 CEST	49866	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:52.514555931 CEST	443	49866	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:52.514565945 CEST	49866	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:52.514605045 CEST	49866	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:52.525816917 CEST	49872	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:52.525854111 CEST	443	49872	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:52.525939941 CEST	49872	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:52.526320934 CEST	49872	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:52.526339054 CEST	443	49872	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:52.543488979 CEST	443	49867	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:52.769030094 CEST	443	49867	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:52.769095898 CEST	443	49867	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:52.769218922 CEST	49867	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:52.771847963 CEST	49867	443	192.168.2.6	216.58.206.65
Oct 1, 2024 00:47:52.771889925 CEST	443	49867	216.58.206.65	192.168.2.6
Oct 1, 2024 00:47:52.783672094 CEST	49875	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:52.783704996 CEST	443	49875	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:52.783859968 CEST	49875	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:52.784064054 CEST	49875	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:52.784075975 CEST	443	49875	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:53.123430014 CEST	443	49872	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:53.123692036 CEST	49872	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:53.123719931 CEST	443	49872	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:53.124089003 CEST	443	49872	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:53.124480009 CEST	49872	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:53.124552011 CEST	443	49872	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:53.124816895 CEST	49872	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:53.167417049 CEST	443	49872	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:53.369425058 CEST	443	49872	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:53.369513035 CEST	443	49872	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:53.369580984 CEST	49872	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:53.499552965 CEST	443	49875	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:53.549968958 CEST	49875	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:53.619510889 CEST	49875	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:53.619524956 CEST	443	49875	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:53.620141983 CEST	443	49875	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:53.621063948 CEST	49875	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:53.621144056 CEST	443	49875	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:53.621473074 CEST	49875	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:53.649048090 CEST	49872	443	192.168.2.6	100.20.12.218
Oct 1, 2024 00:47:53.649077892 CEST	443	49872	100.20.12.218	192.168.2.6
Oct 1, 2024 00:47:53.667395115 CEST	443	49875	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:53.801156998 CEST	443	49875	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:53.801249981 CEST	443	49875	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:53.801301003 CEST	49875	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:53.802134037 CEST	49875	443	192.168.2.6	142.250.184.225
Oct 1, 2024 00:47:53.802145958 CEST	443	49875	142.250.184.225	192.168.2.6
Oct 1, 2024 00:47:54.811928988 CEST	443	49836	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:54.811995983 CEST	443	49836	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:54.812108994 CEST	49836	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:56.024374008 CEST	49836	443	192.168.2.6	142.250.186.100
Oct 1, 2024 00:47:56.024406910 CEST	443	49836	142.250.186.100	192.168.2.6
Oct 1, 2024 00:47:56.147114038 CEST	49877	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:56.147156000 CEST	443	49877	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:56.147231102 CEST	49877	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:56.148484945 CEST	49877	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:56.148500919 CEST	443	49877	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:57.045916080 CEST	443	49877	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:57.046006918 CEST	49877	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:57.051151991 CEST	49877	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:57.051158905 CEST	443	49877	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:57.051407099 CEST	443	49877	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:57.060107946 CEST	49877	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:57.060235023 CEST	49877	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:57.060240030 CEST	443	49877	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:57.060372114 CEST	49877	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:57.103403091 CEST	443	49877	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:57.240159035 CEST	443	49877	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:57.240236998 CEST	443	49877	40.113.110.67	192.168.2.6
Oct 1, 2024 00:47:57.240303993 CEST	49877	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:57.240518093 CEST	49877	443	192.168.2.6	40.113.110.67
Oct 1, 2024 00:47:57.240537882 CEST	443	49877	40.113.110.67	192.168.2.6
Oct 1, 2024 00:48:00.489320993 CEST	443	49854	142.250.185.100	192.168.2.6
Oct 1, 2024 00:48:00.489388943 CEST	443	49854	142.250.185.100	192.168.2.6
Oct 1, 2024 00:48:00.489432096 CEST	49854	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:48:01.815064907 CEST	49854	443	192.168.2.6	142.250.185.100
Oct 1, 2024 00:48:01.815098047 CEST	443	49854	142.250.185.100	192.168.2.6
Oct 1, 2024 00:48:05.866774082 CEST	80	49716	3.33.130.190	192.168.2.6
Oct 1, 2024 00:48:05.866832972 CEST	49716	80	192.168.2.6	3.33.130.190
Oct 1, 2024 00:48:06.131479025 CEST	49716	80	192.168.2.6	3.33.130.190
Oct 1, 2024 00:48:06.138283014 CEST	80	49716	3.33.130.190	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 00:46:45.899507999 CEST	53	56198	1.1.1.1	192.168.2.6
Oct 1, 2024 00:46:45.953258991 CEST	53	50349	1.1.1.1	192.168.2.6
Oct 1, 2024 00:46:46.948906898 CEST	59280	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:46:46.949038982 CEST	51954	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:46:46.967506886 CEST	53	56966	1.1.1.1	192.168.2.6
Oct 1, 2024 00:46:46.981662035 CEST	53	59280	1.1.1.1	192.168.2.6
Oct 1, 2024 00:46:46.986340046 CEST	53	51954	1.1.1.1	192.168.2.6
Oct 1, 2024 00:46:49.873198032 CEST	57767	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:46:49.873399973 CEST	64145	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:46:49.881419897 CEST	53	64145	1.1.1.1	192.168.2.6
Oct 1, 2024 00:46:49.881514072 CEST	53	57767	1.1.1.1	192.168.2.6
Oct 1, 2024 00:46:51.027123928 CEST	53035	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:46:51.027715921 CEST	63967	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:46:51.041232109 CEST	53	53035	1.1.1.1	192.168.2.6
Oct 1, 2024 00:46:51.063147068 CEST	53	63967	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:03.933115005 CEST	53	55663	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:07.178056002 CEST	64783	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:07.178245068 CEST	52084	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:07.178822994 CEST	55162	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:07.178998947 CEST	62444	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:07.179333925 CEST	55967	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:07.179553032 CEST	65445	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:07.186929941 CEST	53	52084	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:07.187006950 CEST	53	64783	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:07.187367916 CEST	53	62444	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:07.187524080 CEST	53	55162	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:08.197454929 CEST	53973	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:08.197885990 CEST	63100	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:08.207616091 CEST	53	53973	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:08.207618952 CEST	53	63100	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:08.479084015 CEST	64617	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:08.479404926 CEST	58455	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:08.480423927 CEST	54137	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:08.480817080 CEST	50454	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:08.488358021 CEST	53	64617	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:08.489136934 CEST	53	54137	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:08.489206076 CEST	53	58455	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:08.489814997 CEST	53	50454	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:08.514195919 CEST	54048	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:08.514542103 CEST	53981	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:08.522592068 CEST	53	54048	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:08.523591042 CEST	53	53981	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:08.526803970 CEST	64552	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:08.527189016 CEST	61707	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:08.535357952 CEST	53	61707	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:08.535372972 CEST	53	64552	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:09.859173059 CEST	58148	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:09.859520912 CEST	52481	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:09.868019104 CEST	53	58148	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:09.868472099 CEST	53	52481	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:09.873958111 CEST	64668	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:09.874301910 CEST	50341	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:09.882652044 CEST	53	64668	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:09.883770943 CEST	53	50341	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:09.976324081 CEST	63054	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:09.977103949 CEST	54879	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:09.985336065 CEST	53	63054	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:10.000286102 CEST	53	54879	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:10.073975086 CEST	56638	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:10.074477911 CEST	62643	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:12.326308966 CEST	58629	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:12.326508999 CEST	55487	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:12.358469009 CEST	54158	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:12.358660936 CEST	59723	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:12.452914953 CEST	53286	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:12.453516006 CEST	62707	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:12.513525009 CEST	53	54158	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:12.513833046 CEST	53	58629	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:12.513947964 CEST	53	55487	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:12.514444113 CEST	53	59723	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:12.525055885 CEST	53	53286	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:12.526974916 CEST	53	62707	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:13.656128883 CEST	62339	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:13.656398058 CEST	57322	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:13.662859917 CEST	53	57322	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:13.663445950 CEST	53	62339	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:13.669809103 CEST	52422	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:13.670090914 CEST	51161	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:13.676744938 CEST	53	51161	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:13.677134037 CEST	53	52422	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:14.972155094 CEST	54014	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:14.972343922 CEST	53657	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:14.978811026 CEST	53	54014	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:14.979147911 CEST	53	53657	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:15.016630888 CEST	53328	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:15.017112970 CEST	58777	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:15.023297071 CEST	53	53328	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:15.024116039 CEST	53	58777	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:16.152417898 CEST	65387	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:16.152765036 CEST	52275	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:16.159874916 CEST	53	52275	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:16.160043955 CEST	53	65387	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:22.201662064 CEST	51757	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:22.202125072 CEST	54989	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:22.733236074 CEST	53	56960	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:37.980077028 CEST	54237	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:37.980880022 CEST	61558	53	192.168.2.6	1.1.1.1
Oct 1, 2024 00:47:37.987925053 CEST	53	54237	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:37.987962961 CEST	53	61846	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:37.990130901 CEST	53	61558	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:37.991970062 CEST	53	51566	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:37.992554903 CEST	53	59239	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:38.006365061 CEST	53	56022	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:40.245486975 CEST	53	59647	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:40.252248049 CEST	53	64261	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:40.254353046 CEST	53	59807	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:40.778981924 CEST	53	64734	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:45.213057995 CEST	53	49880	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:45.867635012 CEST	53	52421	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:51.780828953 CEST	53	59691	1.1.1.1	192.168.2.6
Oct 1, 2024 00:47:52.740850925 CEST	53	63938	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 1, 2024 00:46:51.063227892 CEST	192.168.2.6	1.1.1.1	c235	(Port unreachable)	Destination Unreachable
Oct 1, 2024 00:47:10.000345945 CEST	192.168.2.6	1.1.1.1	c25f	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 1, 2024 00:46:46.948906898 CEST	192.168.2.6	1.1.1.1	0x2cc	Standard query (0)	infoguard-switzerland.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:46:46.949038982 CEST	192.168.2.6	1.1.1.1	0xa155	Standard query (0)	infoguard-switzerland.com	65	IN (0x0001)	false
Oct 1, 2024 00:46:49.873198032 CEST	192.168.2.6	1.1.1.1	0xd3f9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:46:49.873399973 CEST	192.168.2.6	1.1.1.1	0x990b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 00:46:51.027123928 CEST	192.168.2.6	1.1.1.1	0x4969	Standard query (0)	infoguard-switzerland.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:46:51.027715921 CEST	192.168.2.6	1.1.1.1	0xf9ca	Standard query (0)	infoguard-switzerland.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:07.178056002 CEST	192.168.2.6	1.1.1.1	0x608a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:07.178245068 CEST	192.168.2.6	1.1.1.1	0x6715	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:07.178822994 CEST	192.168.2.6	1.1.1.1	0x1e03	Standard query (0)	btloader.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:07.178998947 CEST	192.168.2.6	1.1.1.1	0x4997	Standard query (0)	btloader.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:07.179333925 CEST	192.168.2.6	1.1.1.1	0x7fac	Standard query (0)	img1.wsimg.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:07.179553032 CEST	192.168.2.6	1.1.1.1	0xde36	Standard query (0)	img1.wsimg.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:08.197454929 CEST	192.168.2.6	1.1.1.1	0xa4df	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:08.197885990 CEST	192.168.2.6	1.1.1.1	0xe651	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 1, 2024 00:47:08.479084015 CEST	192.168.2.6	1.1.1.1	0xf96f	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:08.479404926 CEST	192.168.2.6	1.1.1.1	0x5d2e	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
Oct 1, 2024 00:47:08.480423927 CEST	192.168.2.6	1.1.1.1	0xca8d	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:08.480817080 CEST	192.168.2.6	1.1.1.1	0xaefe	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 00:47:08.514195919 CEST	192.168.2.6	1.1.1.1	0x608	Standard query (0)	btloader.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:08.514542103 CEST	192.168.2.6	1.1.1.1	0x2368	Standard query (0)	btloader.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:08.526803970 CEST	192.168.2.6	1.1.1.1	0xa557	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:08.527189016 CEST	192.168.2.6	1.1.1.1	0xc8c7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:09.859173059 CEST	192.168.2.6	1.1.1.1	0xd1a5	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:09.859520912 CEST	192.168.2.6	1.1.1.1	0xf646	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
Oct 1, 2024 00:47:09.873958111 CEST	192.168.2.6	1.1.1.1	0x88b5	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:09.874301910 CEST	192.168.2.6	1.1.1.1	0xa0a7	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 00:47:09.976324081 CEST	192.168.2.6	1.1.1.1	0xb119	Standard query (0)	api.aws.parking.godaddy.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:09.977103949 CEST	192.168.2.6	1.1.1.1	0x5577	Standard query (0)	api.aws.parking.godaddy.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:10.073975086 CEST	192.168.2.6	1.1.1.1	0x67b7	Standard query (0)	img1.wsimg.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:10.074477911 CEST	192.168.2.6	1.1.1.1	0x3d90	Standard query (0)	img1.wsimg.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:12.326308966 CEST	192.168.2.6	1.1.1.1	0x99ba	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:12.326508999 CEST	192.168.2.6	1.1.1.1	0x7257	Standard query (0)	widget.trustpilot.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:12.358469009 CEST	192.168.2.6	1.1.1.1	0x3a13	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:12.358660936 CEST	192.168.2.6	1.1.1.1	0x7fd1	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 1, 2024 00:47:12.452914953 CEST	192.168.2.6	1.1.1.1	0xb50f	Standard query (0)	api.aws.parking.godaddy.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:12.453516006 CEST	192.168.2.6	1.1.1.1	0x2030	Standard query (0)	api.aws.parking.godaddy.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:13.656128883 CEST	192.168.2.6	1.1.1.1	0x4e7	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:13.656398058 CEST	192.168.2.6	1.1.1.1	0x15e9	Standard query (0)	widget.trustpilot.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:13.669809103 CEST	192.168.2.6	1.1.1.1	0x1b2	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:13.670090914 CEST	192.168.2.6	1.1.1.1	0x7b17	Standard query (0)	widget.trustpilot.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:14.972155094 CEST	192.168.2.6	1.1.1.1	0x63c5	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:14.972343922 CEST	192.168.2.6	1.1.1.1	0xee05	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Oct 1, 2024 00:47:15.016630888 CEST	192.168.2.6	1.1.1.1	0xaa21	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:15.017112970 CEST	192.168.2.6	1.1.1.1	0xa805	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:16.152417898 CEST	192.168.2.6	1.1.1.1	0xd3f8	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:16.152765036 CEST	192.168.2.6	1.1.1.1	0x9932	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:22.201662064 CEST	192.168.2.6	1.1.1.1	0xd14c	Standard query (0)	www.godaddy.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:22.202125072 CEST	192.168.2.6	1.1.1.1	0xabf2	Standard query (0)	www.godaddy.com	65	IN (0x0001)	false
Oct 1, 2024 00:47:37.980077028 CEST	192.168.2.6	1.1.1.1	0x3055	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:37.980880022 CEST	192.168.2.6	1.1.1.1	0x112b	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 1, 2024 00:46:46.981662035 CEST	1.1.1.1	192.168.2.6	0x2cc	No error (0)	infoguard-switzerland.com		3.33.130.190	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:46:46.981662035 CEST	1.1.1.1	192.168.2.6	0x2cc	No error (0)	infoguard-switzerland.com		15.197.148.33	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:46:49.881419897 CEST	1.1.1.1	192.168.2.6	0x990b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 00:46:49.881514072 CEST	1.1.1.1	192.168.2.6	0xd3f9	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:46:51.041232109 CEST	1.1.1.1	192.168.2.6	0x4969	No error (0)	infoguard-switzerland.com		3.33.130.190	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:46:51.041232109 CEST	1.1.1.1	192.168.2.6	0x4969	No error (0)	infoguard-switzerland.com		15.197.148.33	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:46:58.062551975 CEST	1.1.1.1	192.168.2.6	0x72a8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:46:58.062551975 CEST	1.1.1.1	192.168.2.6	0x72a8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:00.082478046 CEST	1.1.1.1	192.168.2.6	0x37d7	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:00.082478046 CEST	1.1.1.1	192.168.2.6	0x37d7	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:07.186929941 CEST	1.1.1.1	192.168.2.6	0x6715	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 00:47:07.187006950 CEST	1.1.1.1	192.168.2.6	0x608a	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:07.187367916 CEST	1.1.1.1	192.168.2.6	0x4997	No error (0)	btloader.com			65	IN (0x0001)	false
Oct 1, 2024 00:47:07.187524080 CEST	1.1.1.1	192.168.2.6	0x1e03	No error (0)	btloader.com		104.22.75.216	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:07.187524080 CEST	1.1.1.1	192.168.2.6	0x1e03	No error (0)	btloader.com		172.67.41.60	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:07.187524080 CEST	1.1.1.1	192.168.2.6	0x1e03	No error (0)	btloader.com		104.22.74.216	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:07.188545942 CEST	1.1.1.1	192.168.2.6	0xde36	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:47:07.189667940 CEST	1.1.1.1	192.168.2.6	0x7fac	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:47:08.207616091 CEST	1.1.1.1	192.168.2.6	0xa4df	No error (0)	syndicatedsearch.goog		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:08.488358021 CEST	1.1.1.1	192.168.2.6	0xf96f	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:08.488358021 CEST	1.1.1.1	192.168.2.6	0xf96f	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:08.488358021 CEST	1.1.1.1	192.168.2.6	0xf96f	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:08.489136934 CEST	1.1.1.1	192.168.2.6	0xca8d	No error (0)	ad.doubleclick.net		142.250.184.230	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:08.489206076 CEST	1.1.1.1	192.168.2.6	0x5d2e	No error (0)	ad-delivery.net			65	IN (0x0001)	false
Oct 1, 2024 00:47:08.489814997 CEST	1.1.1.1	192.168.2.6	0xaefe	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 1, 2024 00:47:08.522592068 CEST	1.1.1.1	192.168.2.6	0x608	No error (0)	btloader.com		104.22.75.216	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:08.522592068 CEST	1.1.1.1	192.168.2.6	0x608	No error (0)	btloader.com		172.67.41.60	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:08.522592068 CEST	1.1.1.1	192.168.2.6	0x608	No error (0)	btloader.com		104.22.74.216	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:08.523591042 CEST	1.1.1.1	192.168.2.6	0x2368	No error (0)	btloader.com			65	IN (0x0001)	false
Oct 1, 2024 00:47:08.535357952 CEST	1.1.1.1	192.168.2.6	0xc8c7	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 00:47:08.535372972 CEST	1.1.1.1	192.168.2.6	0xa557	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:09.868019104 CEST	1.1.1.1	192.168.2.6	0xd1a5	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:09.868019104 CEST	1.1.1.1	192.168.2.6	0xd1a5	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:09.868019104 CEST	1.1.1.1	192.168.2.6	0xd1a5	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:09.868472099 CEST	1.1.1.1	192.168.2.6	0xf646	No error (0)	ad-delivery.net			65	IN (0x0001)	false
Oct 1, 2024 00:47:09.882652044 CEST	1.1.1.1	192.168.2.6	0x88b5	No error (0)	ad.doubleclick.net		142.250.185.198	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:09.883770943 CEST	1.1.1.1	192.168.2.6	0xa0a7	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 1, 2024 00:47:09.985336065 CEST	1.1.1.1	192.168.2.6	0xb119	No error (0)	api.aws.parking.godaddy.com	gddomainparking.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:47:09.985336065 CEST	1.1.1.1	192.168.2.6	0xb119	No error (0)	gddomainparking.com		100.20.12.218	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:09.985336065 CEST	1.1.1.1	192.168.2.6	0xb119	No error (0)	gddomainparking.com		52.36.249.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:10.000286102 CEST	1.1.1.1	192.168.2.6	0x5577	No error (0)	api.aws.parking.godaddy.com	gddomainparking.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:47:10.083121061 CEST	1.1.1.1	192.168.2.6	0x67b7	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:47:10.083488941 CEST	1.1.1.1	192.168.2.6	0x3d90	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:47:12.513525009 CEST	1.1.1.1	192.168.2.6	0x3a13	No error (0)	syndicatedsearch.goog		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:12.513833046 CEST	1.1.1.1	192.168.2.6	0x99ba	No error (0)	widget.trustpilot.com		52.222.236.94	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:12.513833046 CEST	1.1.1.1	192.168.2.6	0x99ba	No error (0)	widget.trustpilot.com		52.222.236.107	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:12.513833046 CEST	1.1.1.1	192.168.2.6	0x99ba	No error (0)	widget.trustpilot.com		52.222.236.60	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:12.513833046 CEST	1.1.1.1	192.168.2.6	0x99ba	No error (0)	widget.trustpilot.com		52.222.236.71	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:12.525055885 CEST	1.1.1.1	192.168.2.6	0xb50f	No error (0)	api.aws.parking.godaddy.com	gddomainparking.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:47:12.525055885 CEST	1.1.1.1	192.168.2.6	0xb50f	No error (0)	gddomainparking.com		100.20.12.218	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:12.525055885 CEST	1.1.1.1	192.168.2.6	0xb50f	No error (0)	gddomainparking.com		52.36.249.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:12.526974916 CEST	1.1.1.1	192.168.2.6	0x2030	No error (0)	api.aws.parking.godaddy.com	gddomainparking.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:47:13.663445950 CEST	1.1.1.1	192.168.2.6	0x4e7	No error (0)	widget.trustpilot.com		52.222.236.107	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:13.663445950 CEST	1.1.1.1	192.168.2.6	0x4e7	No error (0)	widget.trustpilot.com		52.222.236.60	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:13.663445950 CEST	1.1.1.1	192.168.2.6	0x4e7	No error (0)	widget.trustpilot.com		52.222.236.71	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:13.663445950 CEST	1.1.1.1	192.168.2.6	0x4e7	No error (0)	widget.trustpilot.com		52.222.236.94	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:13.677134037 CEST	1.1.1.1	192.168.2.6	0x1b2	No error (0)	widget.trustpilot.com		52.222.236.107	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:13.677134037 CEST	1.1.1.1	192.168.2.6	0x1b2	No error (0)	widget.trustpilot.com		52.222.236.94	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:13.677134037 CEST	1.1.1.1	192.168.2.6	0x1b2	No error (0)	widget.trustpilot.com		52.222.236.60	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:13.677134037 CEST	1.1.1.1	192.168.2.6	0x1b2	No error (0)	widget.trustpilot.com		52.222.236.71	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:14.978811026 CEST	1.1.1.1	192.168.2.6	0x63c5	No error (0)	syndicatedsearch.goog		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:15.023297071 CEST	1.1.1.1	192.168.2.6	0xaa21	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:47:15.023297071 CEST	1.1.1.1	192.168.2.6	0xaa21	No error (0)	googlehosted.l.googleusercontent.com		216.58.206.65	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:15.024116039 CEST	1.1.1.1	192.168.2.6	0xa805	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:47:16.159874916 CEST	1.1.1.1	192.168.2.6	0x9932	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:47:16.160043955 CEST	1.1.1.1	192.168.2.6	0xd3f8	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:47:16.160043955 CEST	1.1.1.1	192.168.2.6	0xd3f8	No error (0)	googlehosted.l.googleusercontent.com		142.250.184.225	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:19.045027971 CEST	1.1.1.1	192.168.2.6	0x175b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:19.045027971 CEST	1.1.1.1	192.168.2.6	0x175b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:22.210180044 CEST	1.1.1.1	192.168.2.6	0xd14c	No error (0)	www.godaddy.com	wildcard-ipv6.godaddy.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:47:22.218307018 CEST	1.1.1.1	192.168.2.6	0xabf2	No error (0)	www.godaddy.com	wildcard-ipv6.godaddy.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 00:47:37.987925053 CEST	1.1.1.1	192.168.2.6	0x3055	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:37.990130901 CEST	1.1.1.1	192.168.2.6	0x112b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 00:47:59.667428017 CEST	1.1.1.1	192.168.2.6	0xcb27	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 00:47:59.667428017 CEST	1.1.1.1	192.168.2.6	0xcb27	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

infoguard-switzerland.com

https:

btloader.com

www.google.com

ad-delivery.net

ad.doubleclick.net

api.aws.parking.godaddy.com

syndicatedsearch.goog

widget.trustpilot.com

afs.googleusercontent.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49716	3.33.130.190	80	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:46:46.993680954 CEST	440	OUT	GET / HTTP/1.1 Host: infoguard-switzerland.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 00:46:50.448975086 CEST	259	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 30 Sep 2024 22:46:50 GMT Content-Type: text/html Content-Length: 114 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 2f 6c 61 6e 64 65 72 22 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html><head><script>window.onload=function(){window.location.href="/lander"}</script></head></html>
Oct 1, 2024 00:46:50.574119091 CEST	490	OUT	GET /lander HTTP/1.1 Host: infoguard-switzerland.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 00:46:50.865283966 CEST	301	IN	HTTP/1.1 301 Moved Permanently Server: openresty Date: Mon, 30 Sep 2024 22:46:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 75 Connection: keep-alive Location: https://infoguard-switzerland.com/lander Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 66 6f 67 75 61 72 64 2d 73 77 69 74 7a 65 72 6c 61 6e 64 2e 63 6f 6d 2f 6c 61 6e 64 65 72 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://infoguard-switzerland.com/lander">Moved Permanently</a>.
Oct 1, 2024 00:47:35.868572950 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49717	3.33.130.190	80	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 00:47:32.003192902 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49710	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:46:45 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6a 65 59 6a 6b 65 71 62 56 45 79 4f 7a 53 78 48 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 62 33 39 35 35 34 39 30 35 61 35 32 38 33 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: jeYjkeqbVEyOzSxH.1Context: db39554905a5283b
2024-09-30 22:46:45 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-30 22:46:45 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6a 65 59 6a 6b 65 71 62 56 45 79 4f 7a 53 78 48 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 62 33 39 35 35 34 39 30 35 61 35 32 38 33 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 31 72 49 39 30 63 48 59 4d 39 77 73 2b 47 37 62 57 6f 45 38 64 46 67 67 65 5a 46 75 4a 71 6c 6d 34 2f 49 4d 42 5a 4c 6c 6d 6f 77 30 37 71 6a 68 4a 31 64 66 67 68 38 4b 71 58 34 72 4c 47 47 56 31 5a 4c 37 6b 56 61 7a 42 4f 61 53 66 55 71 44 57 57 44 4f 68 68 38 35 34 57 34 46 61 30 54 53 6f 69 53 4a 68 57 6d 52 6f 63 67 42 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: jeYjkeqbVEyOzSxH.2Context: db39554905a5283b<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAc1rI90cHYM9ws+G7bWoE8dFggeZFuJqlm4/IMBZLlmow07qjhJ1dfgh8KqX4rLGGV1ZL7kVazBOaSfUqDWWDOhh854W4Fa0TSoiSJhWmRocgB
2024-09-30 22:46:45 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6a 65 59 6a 6b 65 71 62 56 45 79 4f 7a 53 78 48 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 62 33 39 35 35 34 39 30 35 61 35 32 38 33 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: jeYjkeqbVEyOzSxH.3Context: db39554905a5283b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-30 22:46:45 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-30 22:46:45 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 62 48 58 76 71 69 51 47 6e 30 61 49 45 2b 48 71 37 75 70 31 64 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: bHXvqiQGn0aIE+Hq7up1dQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49722	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:46:52 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 22:46:53 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=237538 Date: Mon, 30 Sep 2024 22:46:52 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49723	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:46:53 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 22:46:54 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=237481 Date: Mon, 30 Sep 2024 22:46:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-30 22:46:54 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49724	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:46:55 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4c 7a 59 47 2b 65 42 53 45 6b 79 4f 43 70 4d 51 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 30 31 36 61 62 63 32 39 37 37 39 63 37 33 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: LzYG+eBSEkyOCpMQ.1Context: 5016abc29779c730
2024-09-30 22:46:55 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-30 22:46:55 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4c 7a 59 47 2b 65 42 53 45 6b 79 4f 43 70 4d 51 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 30 31 36 61 62 63 32 39 37 37 39 63 37 33 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 31 72 49 39 30 63 48 59 4d 39 77 73 2b 47 37 62 57 6f 45 38 64 46 67 67 65 5a 46 75 4a 71 6c 6d 34 2f 49 4d 42 5a 4c 6c 6d 6f 77 30 37 71 6a 68 4a 31 64 66 67 68 38 4b 71 58 34 72 4c 47 47 56 31 5a 4c 37 6b 56 61 7a 42 4f 61 53 66 55 71 44 57 57 44 4f 68 68 38 35 34 57 34 46 61 30 54 53 6f 69 53 4a 68 57 6d 52 6f 63 67 42 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: LzYG+eBSEkyOCpMQ.2Context: 5016abc29779c730<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAc1rI90cHYM9ws+G7bWoE8dFggeZFuJqlm4/IMBZLlmow07qjhJ1dfgh8KqX4rLGGV1ZL7kVazBOaSfUqDWWDOhh854W4Fa0TSoiSJhWmRocgB
2024-09-30 22:46:55 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4c 7a 59 47 2b 65 42 53 45 6b 79 4f 43 70 4d 51 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 30 31 36 61 62 63 32 39 37 37 39 63 37 33 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: LzYG+eBSEkyOCpMQ.3Context: 5016abc29779c730<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-30 22:46:55 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-30 22:46:55 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 37 36 7a 47 30 79 78 68 69 55 71 4d 6c 6b 31 44 46 73 31 38 4e 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 76zG0yxhiUqMlk1DFs18Nw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49721	3.33.130.190	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:06 UTC	704	OUT	GET /lander HTTP/1.1 Host: infoguard-switzerland.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:07 UTC	710	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=86400 Content-Type: text/html Date: Mon, 30 Sep 2024 22:47:06 GMT Server: openresty Set-Cookie: traffic_target=gd; Path=/; Max-Age=86400 Set-Cookie: caf_ipaddr=8.46.123.33; Path=/; Max-Age=86400 Set-Cookie: country=US; Path=/; Max-Age=86400 Set-Cookie: city=New%20York; Path=/; Max-Age=86400 Set-Cookie: lander_type=parkweb; Path=/; Max-Age=86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_GH747aEdRtI82ip3wJswb1mdR05O//effpHusZPtoLiv2FVXiXdPak4WmrilQ0Ea2alEdqUjrtncqDXvpWi69Q X-Content-Type-Options: nosniff Content-Length: 620 Connection: close
2024-09-30 22:47:07 UTC	476	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 2c 22 2f 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 26 67 64 61 62 70 3d 74 72 75 65 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 Data Ascii: <!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="data:,"/><script src="https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true"></script><script s
2024-09-30 22:47:07 UTC	144	IN	Data Raw: 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 70 61 72 6b 69 6e 67 2d 6c 61 6e 64 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 6d 61 69 6e 2e 65 66 39 30 61 36 32 37 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: ink href="https://img1.wsimg.com/parking-lander/static/css/main.ef90a627.css" rel="stylesheet"></head><body><div id="root"></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49731	104.22.75.216	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:07 UTC	554	OUT	GET /tag?o=5097926782615552&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:07 UTC	480	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:07 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: W/"2588bdbfbd27eb6db5a16b2c065bb363" Last-Modified: Mon, 30 Sep 2024 22:18:41 GMT Vary: Origin X-Robots-Tag: noindex, nofollow Via: 1.1 google CF-Cache-Status: HIT Age: 1560 Server: cloudflare CF-RAY: 8cb7c0c16c20438a-EWR
2024-09-30 22:47:07 UTC	889	IN	Data Raw: 37 64 63 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 73 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 Data Ascii: 7dc0!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e
2024-09-30 22:47:07 UTC	1369	IN	Data Raw: 2c 73 26 26 28 72 3d 32 26 69 5b 30 5d 3f 73 2e 72 65 74 75 72 6e 3a 69 5b 30 5d 3f 73 2e 74 68 72 6f 77 7c 7c 28 28 72 3d 73 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 73 29 2c 30 29 3a 73 2e 6e 65 78 74 29 26 26 21 28 72 3d 72 2e 63 61 6c 6c 28 73 2c 69 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 72 3b 73 77 69 74 63 68 28 73 3d 30 2c 72 26 26 28 69 3d 5b 32 26 69 5b 30 5d 2c 72 2e 76 61 6c 75 65 5d 29 2c 69 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 72 3d 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6f 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 69 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 6f 2e 6c 61 62 65 6c 2b 2b 2c 73 3d 69 5b 31 5d 2c 69 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 Data Ascii: ,s&&(r=2&i[0]?s.return:i[0]?s.throw\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=0,r&&(i=[2&i[0],r.value]),i[0]){case 0:case 1:r=i;break;case 4:return o.label++,{value:i[1],done:!1};case 5:o.label++,s=i[1],i=[0];continu
2024-09-30 22:47:07 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 69 2c 61 2c 63 3b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 2e 74 72 79 73 2e 70 75 73 68 28 5b 30 2c 33 2c 2c 34 5d 29 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 3d 77 69 6e 64 6f 77 2e 5f 5f 62 74 7c 7c 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 41 64 42 6c 6f 63 6b 3f 5b 33 2c 32 5d 3a 5b 34 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 Data Ascii: unction a(){return t(this,void 0,void 0,(function(){var e,t,i,a,c;return n(this,(function(n){switch(n.label){case 0:return n.trys.push([0,3,,4]),window.__bt=window.__bt\|\|{},"function"!=typeof window.__bt.customDetectAdBlock?[3,2]:[4,window.__bt.customDete
2024-09-30 22:47:07 UTC	1369	IN	Data Raw: 28 65 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 5b 32 2c 21 74 2e 73 65 6e 74 28 29 5d 7d 7d 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 3b 74 72 79 7b 69 66 28 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 74 6f 70 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 66 6f 72 28 3b 65 2e 70 61 72 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 3b 29 65 3d 65 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 65 7d 28 29 Data Ascii: (e)];case 1:return[2,!t.sent()]}}))}))}function l(e){(window.document.body\|\|window.document.documentElement).removeChild(e)}var u=function(){var e=window;try{if(top.document)return top}catch(e){}try{for(;e.parent.document;)e=e.parent}catch(e){}return e}()
2024-09-30 22:47:07 UTC	1369	IN	Data Raw: 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 22 3b 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 21 65 7c 7c 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 6e 7c 7c 74 3c 3d 30 7c 7c 6e 3c 3d 30 7c 7c 74 3e 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 66 6f 72 28 76 61 72 20 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 6e 2b 31 2d 74 29 29 2b 74 2c 72 3d 22 22 2c 69 3d 30 3b 69 3c 73 3b 69 2b 2b 29 72 2b 3d 65 2e 63 68 61 72 41 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 65 2e 6c 65 6e Data Ascii: klmnopqrstuvwxyz0123456789";function A(e,t){return function(e,t,n){if(!e\|\|"number"!=typeof t\|\|"number"!=typeof n\|\|t<=0\|\|n<=0\|\|t>n)throw new TypeError;for(var s=Math.floor(Math.random()(n+1-t))+t,r="",i=0;i<s;i++)r+=e.charAt(Math.floor(Math.random()e.len
2024-09-30 22:47:07 UTC	1369	IN	Data Raw: 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 35 30 37 32 37 34 31 36 33 32 30 34 39 31 35 32 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 63 61 6c 63 69 6f 2e 63 61 22 3a 7b 22 63 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 35 30 37 32 31 36 33 38 32 34 37 33 30 31 31 32 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 63 61 73 68 62 61 63 6b 6d 6f 6e 73 74 65 72 2e 63 6f 6d 22 3a 7b 22 63 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 35 31 38 36 36 39 38 39 39 32 36 38 30 39 36 30 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 64 65 73 63 61 72 67 Data Ascii: e":false,"me":false,"w":"5072741632049152","widget":false,"a":false},"calcio.ca":{"ce":false,"me":false,"w":"5072163824730112","widget":false,"a":false},"cashbackmonster.com":{"ce":false,"me":false,"w":"5186698992680960","widget":false,"a":false},"descarg
2024-09-30 22:47:07 UTC	1369	IN	Data Raw: 72 65 6d 6f 76 65 49 74 65 6d 28 74 29 7d 29 29 3a 28 75 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 29 2c 75 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 74 29 29 7d 28 29 3b 76 61 72 20 44 3d 28 6e 75 6c 6c 3d 3d 3d 28 79 3d 75 2e 5f 5f 62 74 5f 69 6e 74 72 6e 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 79 3f 76 6f 69 64 20 30 3a 79 2e 74 72 61 63 65 49 44 29 7c 7c 67 28 22 42 54 5f 74 72 61 63 65 49 44 22 29 7c 7c 41 28 38 2c 31 30 29 3b 76 28 22 42 54 5f 74 72 61 63 65 49 44 22 2c 44 29 3b 76 61 72 20 54 3d 75 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 42 54 5f 73 69 64 22 29 3b 54 7c 7c 28 54 3d 41 28 38 2c 31 30 29 2c 75 2e 73 65 73 73 69 6f 6e 53 Data Ascii: removeItem(t)})):(u.sessionStorage.removeItem(e),u.sessionStorage.removeItem(t))}();var D=(null===(y=u.__bt_intrnl)\|\|void 0===y?void 0:y.traceID)\|\|g("BT_traceID")\|\|A(8,10);v("BT_traceID",D);var T=u.sessionStorage.getItem("BT_sid");T\|\|(T=A(8,10),u.sessionS
2024-09-30 22:47:07 UTC	1369	IN	Data Raw: 65 74 28 22 77 22 2c 67 29 2c 6e 2e 6c 61 62 65 6c 3d 31 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6e 2e 74 72 79 73 2e 70 75 73 68 28 5b 31 2c 34 2c 2c 35 5d 29 2c 5b 34 2c 66 65 74 63 68 28 6d 2e 74 6f 53 74 72 69 6e 67 28 29 29 5d 3b 63 61 73 65 20 32 3a 69 66 28 21 28 66 3d 6e 2e 73 65 6e 74 28 29 29 2e 6f 6b 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 3b 72 65 74 75 72 6e 5b 34 2c 66 2e 6a 73 6f 6e 28 29 5d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 77 3d 6e 2e 73 65 6e 74 28 29 2c 74 2e 77 65 62 73 69 74 65 49 44 3d 77 2e 74 61 67 44 61 74 61 2e 77 2c 74 2e 63 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3d 77 2e 74 61 67 44 61 74 61 2e 63 65 2c 74 2e 6d 6f 62 69 6c 65 43 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3d 77 2e 74 61 67 44 61 74 61 2e 6d Data Ascii: et("w",g),n.label=1;case 1:return n.trys.push([1,4,,5]),[4,fetch(m.toString())];case 2:if(!(f=n.sent()).ok)throw new Error;return[4,f.json()];case 3:return w=n.sent(),t.websiteID=w.tagData.w,t.contentEnabled=w.tagData.ce,t.mobileContentEnabled=w.tagData.m
2024-09-30 22:47:07 UTC	1369	IN	Data Raw: 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 44 29 29 29 2c 6b 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 50 2e 6c 65 6e 67 74 68 29 2c 4e 3d 30 3b 4e 3c 50 2e 6c 65 6e 67 74 68 3b 4e 2b 2b 29 6b 5b 4e 5d 3d 50 2e 63 68 61 72 43 6f 64 65 41 74 28 4e 29 3b 54 3d 6b 2e 62 75 66 66 65 72 7d 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 76 61 72 20 72 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 72 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 65 2c 21 30 29 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 22 45 72 72 6f 72 20 69 6e 20 67 65 74 20 72 65 71 75 65 73 Data Ascii: (encodeURIComponent(JSON.stringify(D))),k=new Uint8Array(P.length),N=0;N<P.length;N++)k[N]=P.charCodeAt(N);T=k.buffer}!function(e,t){new Promise((function(n,s){var r=new window.XMLHttpRequest;r.open("POST",e,!0),r.onerror=function(){s("Error in get reques
2024-09-30 22:47:07 UTC	1369	IN	Data Raw: 5d 2c 5b 22 66 22 2c 33 31 5d 2c 5b 22 67 22 2c 33 32 5d 2c 5b 22 68 22 2c 33 33 5d 2c 5b 22 69 22 2c 33 34 5d 2c 5b 22 6a 22 2c 33 35 5d 2c 5b 22 6b 22 2c 33 36 5d 2c 5b 22 6c 22 2c 33 37 5d 2c 5b 22 6d 22 2c 33 38 5d 2c 5b 22 6e 22 2c 33 39 5d 2c 5b 22 6f 22 2c 34 30 5d 2c 5b 22 70 22 2c 34 31 5d 2c 5b 22 71 22 2c 34 32 5d 2c 5b 22 72 22 2c 34 33 5d 2c 5b 22 73 22 2c 34 34 5d 2c 5b 22 74 22 2c 34 35 5d 2c 5b 22 75 22 2c 34 36 5d 2c 5b 22 76 22 2c 34 37 5d 2c 5b 22 77 22 2c 34 38 5d 2c 5b 22 78 22 2c 34 39 5d 2c 5b 22 79 22 2c 35 30 5d 2c 5b 22 7a 22 2c 35 31 5d 2c 5b 22 30 22 2c 35 32 5d 2c 5b 22 31 22 2c 35 33 5d 2c 5b 22 32 22 2c 35 34 5d 2c 5b 22 33 22 2c 35 35 5d 2c 5b 22 34 22 2c 35 36 5d 2c 5b 22 35 22 2c 35 37 5d 2c 5b 22 36 22 2c 35 38 5d 2c 5b Data Ascii: ],["f",31],["g",32],["h",33],["i",34],["j",35],["k",36],["l",37],["m",38],["n",39],["o",40],["p",41],["q",42],["r",43],["s",44],["t",45],["u",46],["v",47],["w",48],["x",49],["y",50],["z",51],["0",52],["1",53],["2",54],["3",55],["4",56],["5",57],["6",58],[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49730	142.250.186.100	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:07 UTC	639	OUT	GET /adsense/domains/caf.js?abp=1&gdabp=true HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:08 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153207 Date: Mon, 30 Sep 2024 22:47:08 GMT Expires: Mon, 30 Sep 2024 22:47:08 GMT Cache-Control: private, max-age=3600 ETag: "13041019384836872850" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:08 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 34 33 37 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301437,173
2024-09-30 22:47:08 UTC	1390	IN	Data Raw: 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 Data Ascii: ProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQs
2024-09-30 22:47:08 UTC	1390	IN	Data Raw: 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 Data Ascii: a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray
2024-09-30 22:47:08 UTC	1390	IN	Data Raw: 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 Data Ascii: a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.d
2024-09-30 22:47:08 UTC	1390	IN	Data Raw: 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 3d 66 75 6e 63 74 69 Data Ascii: se "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld=functi
2024-09-30 22:47:08 UTC	1390	IN	Data Raw: 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 Data Ascii: ar l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpec
2024-09-30 22:47:08 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 Data Ascii: nction"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.sea
2024-09-30 22:47:08 UTC	1390	IN	Data Raw: 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 Data Ascii: t:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Obje
2024-09-30 22:47:08 UTC	1390	IN	Data Raw: 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b Data Ascii: turn h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;
2024-09-30 22:47:08 UTC	1390	IN	Data Raw: 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 Data Ascii: )if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49735	104.22.75.216	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:08 UTC	657	OUT	GET /tag?o=5097926782615552&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363" If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
2024-09-30 22:47:09 UTC	422	IN	HTTP/1.1 304 Not Modified Date: Mon, 30 Sep 2024 22:47:09 GMT Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: "2588bdbfbd27eb6db5a16b2c065bb363" Last-Modified: Mon, 30 Sep 2024 22:18:41 GMT Vary: Origin X-Robots-Tag: noindex, nofollow Via: 1.1 google CF-Cache-Status: HIT Age: 1562 Server: cloudflare CF-RAY: 8cb7c0c96de40f63-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49739	104.22.75.216	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:08 UTC	369	OUT	GET /tag?o=5097926782615552&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:09 UTC	480	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:09 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: W/"2588bdbfbd27eb6db5a16b2c065bb363" Last-Modified: Mon, 30 Sep 2024 22:18:41 GMT Vary: Origin X-Robots-Tag: noindex, nofollow Via: 1.1 google CF-Cache-Status: HIT Age: 1562 Server: cloudflare CF-RAY: 8cb7c0c9b9dc43e0-EWR
2024-09-30 22:47:09 UTC	889	IN	Data Raw: 37 64 63 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 73 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 Data Ascii: 7dc0!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e
2024-09-30 22:47:09 UTC	1369	IN	Data Raw: 2c 73 26 26 28 72 3d 32 26 69 5b 30 5d 3f 73 2e 72 65 74 75 72 6e 3a 69 5b 30 5d 3f 73 2e 74 68 72 6f 77 7c 7c 28 28 72 3d 73 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 73 29 2c 30 29 3a 73 2e 6e 65 78 74 29 26 26 21 28 72 3d 72 2e 63 61 6c 6c 28 73 2c 69 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 72 3b 73 77 69 74 63 68 28 73 3d 30 2c 72 26 26 28 69 3d 5b 32 26 69 5b 30 5d 2c 72 2e 76 61 6c 75 65 5d 29 2c 69 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 72 3d 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6f 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 69 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 6f 2e 6c 61 62 65 6c 2b 2b 2c 73 3d 69 5b 31 5d 2c 69 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 Data Ascii: ,s&&(r=2&i[0]?s.return:i[0]?s.throw\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=0,r&&(i=[2&i[0],r.value]),i[0]){case 0:case 1:r=i;break;case 4:return o.label++,{value:i[1],done:!1};case 5:o.label++,s=i[1],i=[0];continu
2024-09-30 22:47:09 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 69 2c 61 2c 63 3b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 2e 74 72 79 73 2e 70 75 73 68 28 5b 30 2c 33 2c 2c 34 5d 29 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 3d 77 69 6e 64 6f 77 2e 5f 5f 62 74 7c 7c 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 41 64 42 6c 6f 63 6b 3f 5b 33 2c 32 5d 3a 5b 34 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 Data Ascii: unction a(){return t(this,void 0,void 0,(function(){var e,t,i,a,c;return n(this,(function(n){switch(n.label){case 0:return n.trys.push([0,3,,4]),window.__bt=window.__bt\|\|{},"function"!=typeof window.__bt.customDetectAdBlock?[3,2]:[4,window.__bt.customDete
2024-09-30 22:47:09 UTC	1369	IN	Data Raw: 28 65 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 5b 32 2c 21 74 2e 73 65 6e 74 28 29 5d 7d 7d 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 3b 74 72 79 7b 69 66 28 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 74 6f 70 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 66 6f 72 28 3b 65 2e 70 61 72 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 3b 29 65 3d 65 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 65 7d 28 29 Data Ascii: (e)];case 1:return[2,!t.sent()]}}))}))}function l(e){(window.document.body\|\|window.document.documentElement).removeChild(e)}var u=function(){var e=window;try{if(top.document)return top}catch(e){}try{for(;e.parent.document;)e=e.parent}catch(e){}return e}()
2024-09-30 22:47:09 UTC	1369	IN	Data Raw: 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 22 3b 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 21 65 7c 7c 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 6e 7c 7c 74 3c 3d 30 7c 7c 6e 3c 3d 30 7c 7c 74 3e 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 66 6f 72 28 76 61 72 20 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 6e 2b 31 2d 74 29 29 2b 74 2c 72 3d 22 22 2c 69 3d 30 3b 69 3c 73 3b 69 2b 2b 29 72 2b 3d 65 2e 63 68 61 72 41 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 65 2e 6c 65 6e Data Ascii: klmnopqrstuvwxyz0123456789";function A(e,t){return function(e,t,n){if(!e\|\|"number"!=typeof t\|\|"number"!=typeof n\|\|t<=0\|\|n<=0\|\|t>n)throw new TypeError;for(var s=Math.floor(Math.random()(n+1-t))+t,r="",i=0;i<s;i++)r+=e.charAt(Math.floor(Math.random()e.len
2024-09-30 22:47:09 UTC	1369	IN	Data Raw: 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 35 30 37 32 37 34 31 36 33 32 30 34 39 31 35 32 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 63 61 6c 63 69 6f 2e 63 61 22 3a 7b 22 63 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 35 30 37 32 31 36 33 38 32 34 37 33 30 31 31 32 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 63 61 73 68 62 61 63 6b 6d 6f 6e 73 74 65 72 2e 63 6f 6d 22 3a 7b 22 63 65 22 3a 66 61 6c 73 65 2c 22 6d 65 22 3a 66 61 6c 73 65 2c 22 77 22 3a 22 35 31 38 36 36 39 38 39 39 32 36 38 30 39 36 30 22 2c 22 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 61 22 3a 66 61 6c 73 65 7d 2c 22 64 65 73 63 61 72 67 Data Ascii: e":false,"me":false,"w":"5072741632049152","widget":false,"a":false},"calcio.ca":{"ce":false,"me":false,"w":"5072163824730112","widget":false,"a":false},"cashbackmonster.com":{"ce":false,"me":false,"w":"5186698992680960","widget":false,"a":false},"descarg
2024-09-30 22:47:09 UTC	1369	IN	Data Raw: 72 65 6d 6f 76 65 49 74 65 6d 28 74 29 7d 29 29 3a 28 75 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 29 2c 75 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 74 29 29 7d 28 29 3b 76 61 72 20 44 3d 28 6e 75 6c 6c 3d 3d 3d 28 79 3d 75 2e 5f 5f 62 74 5f 69 6e 74 72 6e 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 79 3f 76 6f 69 64 20 30 3a 79 2e 74 72 61 63 65 49 44 29 7c 7c 67 28 22 42 54 5f 74 72 61 63 65 49 44 22 29 7c 7c 41 28 38 2c 31 30 29 3b 76 28 22 42 54 5f 74 72 61 63 65 49 44 22 2c 44 29 3b 76 61 72 20 54 3d 75 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 42 54 5f 73 69 64 22 29 3b 54 7c 7c 28 54 3d 41 28 38 2c 31 30 29 2c 75 2e 73 65 73 73 69 6f 6e 53 Data Ascii: removeItem(t)})):(u.sessionStorage.removeItem(e),u.sessionStorage.removeItem(t))}();var D=(null===(y=u.__bt_intrnl)\|\|void 0===y?void 0:y.traceID)\|\|g("BT_traceID")\|\|A(8,10);v("BT_traceID",D);var T=u.sessionStorage.getItem("BT_sid");T\|\|(T=A(8,10),u.sessionS
2024-09-30 22:47:09 UTC	1369	IN	Data Raw: 65 74 28 22 77 22 2c 67 29 2c 6e 2e 6c 61 62 65 6c 3d 31 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6e 2e 74 72 79 73 2e 70 75 73 68 28 5b 31 2c 34 2c 2c 35 5d 29 2c 5b 34 2c 66 65 74 63 68 28 6d 2e 74 6f 53 74 72 69 6e 67 28 29 29 5d 3b 63 61 73 65 20 32 3a 69 66 28 21 28 66 3d 6e 2e 73 65 6e 74 28 29 29 2e 6f 6b 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 3b 72 65 74 75 72 6e 5b 34 2c 66 2e 6a 73 6f 6e 28 29 5d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 77 3d 6e 2e 73 65 6e 74 28 29 2c 74 2e 77 65 62 73 69 74 65 49 44 3d 77 2e 74 61 67 44 61 74 61 2e 77 2c 74 2e 63 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3d 77 2e 74 61 67 44 61 74 61 2e 63 65 2c 74 2e 6d 6f 62 69 6c 65 43 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3d 77 2e 74 61 67 44 61 74 61 2e 6d Data Ascii: et("w",g),n.label=1;case 1:return n.trys.push([1,4,,5]),[4,fetch(m.toString())];case 2:if(!(f=n.sent()).ok)throw new Error;return[4,f.json()];case 3:return w=n.sent(),t.websiteID=w.tagData.w,t.contentEnabled=w.tagData.ce,t.mobileContentEnabled=w.tagData.m
2024-09-30 22:47:09 UTC	1369	IN	Data Raw: 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 44 29 29 29 2c 6b 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 50 2e 6c 65 6e 67 74 68 29 2c 4e 3d 30 3b 4e 3c 50 2e 6c 65 6e 67 74 68 3b 4e 2b 2b 29 6b 5b 4e 5d 3d 50 2e 63 68 61 72 43 6f 64 65 41 74 28 4e 29 3b 54 3d 6b 2e 62 75 66 66 65 72 7d 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 76 61 72 20 72 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 72 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 65 2c 21 30 29 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 22 45 72 72 6f 72 20 69 6e 20 67 65 74 20 72 65 71 75 65 73 Data Ascii: (encodeURIComponent(JSON.stringify(D))),k=new Uint8Array(P.length),N=0;N<P.length;N++)k[N]=P.charCodeAt(N);T=k.buffer}!function(e,t){new Promise((function(n,s){var r=new window.XMLHttpRequest;r.open("POST",e,!0),r.onerror=function(){s("Error in get reques
2024-09-30 22:47:09 UTC	1369	IN	Data Raw: 5d 2c 5b 22 66 22 2c 33 31 5d 2c 5b 22 67 22 2c 33 32 5d 2c 5b 22 68 22 2c 33 33 5d 2c 5b 22 69 22 2c 33 34 5d 2c 5b 22 6a 22 2c 33 35 5d 2c 5b 22 6b 22 2c 33 36 5d 2c 5b 22 6c 22 2c 33 37 5d 2c 5b 22 6d 22 2c 33 38 5d 2c 5b 22 6e 22 2c 33 39 5d 2c 5b 22 6f 22 2c 34 30 5d 2c 5b 22 70 22 2c 34 31 5d 2c 5b 22 71 22 2c 34 32 5d 2c 5b 22 72 22 2c 34 33 5d 2c 5b 22 73 22 2c 34 34 5d 2c 5b 22 74 22 2c 34 35 5d 2c 5b 22 75 22 2c 34 36 5d 2c 5b 22 76 22 2c 34 37 5d 2c 5b 22 77 22 2c 34 38 5d 2c 5b 22 78 22 2c 34 39 5d 2c 5b 22 79 22 2c 35 30 5d 2c 5b 22 7a 22 2c 35 31 5d 2c 5b 22 30 22 2c 35 32 5d 2c 5b 22 31 22 2c 35 33 5d 2c 5b 22 32 22 2c 35 34 5d 2c 5b 22 33 22 2c 35 35 5d 2c 5b 22 34 22 2c 35 36 5d 2c 5b 22 35 22 2c 35 37 5d 2c 5b 22 36 22 2c 35 38 5d 2c 5b Data Ascii: ],["f",31],["g",32],["h",33],["i",34],["j",35],["k",36],["l",37],["m",38],["n",39],["o",40],["p",41],["q",42],["r",43],["s",44],["t",45],["u",46],["v",47],["w",48],["x",49],["y",50],["z",51],["0",52],["1",53],["2",54],["3",55],["4",56],["5",57],["6",58],[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49737	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:09 UTC	595	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:09 UTC	1223	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:09 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 17 Sep 2024 10:11:09 GMT Cache-Control: public, max-age=86400 Age: 1170329 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dnBClteFsolfSzVeOaVdPjbHqTKrIHOZkTDAzYcCCX%2B8qJ8iSAcL1fq9m7uwcPI2aYzAoVOHNyCbvmz9SA2F7SOe2VrDcHkWNoS4d%2Fk%2BhPECzwbwapdgLpVfCmoMtzy1Jg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c0ca8c2b440e-EWR
2024-09-30 22:47:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49736	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:09 UTC	614	OUT	GET /px.gif?ch=1&e=0.49639305765025 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:09 UTC	1224	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:09 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 01 Oct 2024 22:47:09 GMT Cache-Control: public, max-age=86400 Age: 778702 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5yMW7kHesfMYxrSIeQB4TGd7whjHN3wHcOHs2roFjmToGEzl8owtI0v8slha0pTrahWtHUdy5pzfSZ1TqMx%2B9X3dMqWP%2FJiEUuIr%2BbLwja9INAz8Mb7plx%2BcroMt1rTN0Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c0ca8c955e65-EWR
2024-09-30 22:47:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49738	142.250.184.230	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:09 UTC	726	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:09 UTC	746	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 14:21:33 GMT Expires: Tue, 01 Oct 2024 14:21:33 GMT Cache-Control: public, max-age=86400 Age: 30336 Last-Modified: Tue, 08 May 2012 13:08:06 GMT Content-Type: image/x-icon Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:09 UTC	644	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2024-09-30 22:47:09 UTC	434	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49740	142.250.186.164	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:09 UTC	454	OUT	GET /adsense/domains/caf.js?abp=1&gdabp=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:09 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153198 Date: Mon, 30 Sep 2024 22:47:09 GMT Expires: Mon, 30 Sep 2024 22:47:09 GMT Cache-Control: private, max-age=3600 ETag: "4454758832833526012" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:09 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 34 33 33 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,173
2024-09-30 22:47:09 UTC	1390	IN	Data Raw: 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 Data Ascii: main":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYX
2024-09-30 22:47:09 UTC	1390	IN	Data Raw: 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 Data Ascii: ;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Arra
2024-09-30 22:47:09 UTC	1390	IN	Data Raw: 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 Data Ascii: extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.definePrope
2024-09-30 22:47:09 UTC	1390	IN	Data Raw: 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 Data Ascii: on":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld=function(g){this
2024-09-30 22:47:09 UTC	1390	IN	Data Raw: 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a Data Ascii: ew b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("Unexpected state:
2024-09-30 22:47:09 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 Data Ascii: nction e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Ob
2024-09-30 22:47:09 UTC	1390	IN	Data Raw: 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 Data Ascii: h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="
2024-09-30 22:47:09 UTC	1390	IN	Data Raw: 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 65 Data Ascii: })};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;re
2024-09-30 22:47:09 UTC	1390	IN	Data Raw: 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 Data Ascii: !=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49741	104.22.75.216	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:09 UTC	472	OUT	GET /tag?o=5097926782615552&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363" If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
2024-09-30 22:47:09 UTC	422	IN	HTTP/1.1 304 Not Modified Date: Mon, 30 Sep 2024 22:47:09 GMT Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: "2588bdbfbd27eb6db5a16b2c065bb363" Last-Modified: Mon, 30 Sep 2024 22:18:41 GMT Vary: Origin X-Robots-Tag: noindex, nofollow Via: 1.1 google CF-Cache-Status: HIT Age: 1562 Server: cloudflare CF-RAY: 8cb7c0cdb86e8cbd-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49742	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:10 UTC	350	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:10 UTC	1224	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 01 Oct 2024 22:47:10 GMT Cache-Control: public, max-age=86400 Age: 777484 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N8JQMOhcMpFPnu%2FlAw%2Bw7I8z5OM1Tv59g2IqMG8Bzw18GpkQtni4%2BTCjWUdo1WXf0%2B67heKzVnLHxCOSpmhXKc7h27JeG4kPb1Qe4Rla06Cao67GXAj4WSm5eC0lUvXUXg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c0d219c241a6-EWR
2024-09-30 22:47:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49743	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:10 UTC	369	OUT	GET /px.gif?ch=1&e=0.49639305765025 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:10 UTC	1232	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 01 Oct 2024 22:47:10 GMT Cache-Control: public, max-age=86400 Age: 776865 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZDWdnBfgOOidGxKO1%2BwGn3fFO7QXNw%2BvndsuQkba2eYfMQwr%2FuRhyZeaMVHigEyimV6Ph5WvgCK%2BkN8iPc%2B25TsdCi7V%2Fx6qJf0t%2Bpmm0HQls6sbeuBTziZb%2BY3KLAbtrQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c0d21dd042bc-EWR
2024-09-30 22:47:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49744	142.250.185.198	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:10 UTC	481	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:10 UTC	746	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 14:04:04 GMT Expires: Tue, 01 Oct 2024 14:04:04 GMT Cache-Control: public, max-age=86400 Age: 31386 Last-Modified: Tue, 08 May 2012 13:08:06 GMT Content-Type: image/x-icon Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:10 UTC	644	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2024-09-30 22:47:10 UTC	434	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49746	100.20.12.218	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:10 UTC	609	OUT	OPTIONS /v1/parking/landers/infoguard-switzerland.com?trafficTarget=gd&abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-request-id Origin: https://infoguard-switzerland.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:11 UTC	756	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:11 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=o1Zhjv01pMc4ZXAzw5VHUskDfIIgsJPVvICzQSzKqUPGrA9856qwpP/89Z4grVRXcXH0PiTGhYELj1uhz6otmhDNOwJrYnl5MIhdrVx4Ueq1k2lZxtPIIu0Q0ml3; Expires=Mon, 07 Oct 2024 22:47:11 GMT; Path=/ Set-Cookie: AWSALBCORS=o1Zhjv01pMc4ZXAzw5VHUskDfIIgsJPVvICzQSzKqUPGrA9856qwpP/89Z4grVRXcXH0PiTGhYELj1uhz6otmhDNOwJrYnl5MIhdrVx4Ueq1k2lZxtPIIu0Q0ml3; Expires=Mon, 07 Oct 2024 22:47:11 GMT; Path=/; SameSite=None; Secure access-control-allow-credentials: true access-control-allow-headers: X-Request-Id access-control-allow-methods: GET, HEAD, OPTIONS access-control-allow-origin: https://infoguard-switzerland.com access-control-max-age: 600 x-request-id: bNNnOTH8

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49749	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:11 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 70 48 2b 6a 57 37 49 6c 61 6b 79 41 77 69 6a 76 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 63 62 32 32 34 66 37 61 34 63 34 31 32 34 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: pH+jW7IlakyAwijv.1Context: fcb224f7a4c41241
2024-09-30 22:47:11 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-30 22:47:11 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 70 48 2b 6a 57 37 49 6c 61 6b 79 41 77 69 6a 76 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 63 62 32 32 34 66 37 61 34 63 34 31 32 34 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 31 72 49 39 30 63 48 59 4d 39 77 73 2b 47 37 62 57 6f 45 38 64 46 67 67 65 5a 46 75 4a 71 6c 6d 34 2f 49 4d 42 5a 4c 6c 6d 6f 77 30 37 71 6a 68 4a 31 64 66 67 68 38 4b 71 58 34 72 4c 47 47 56 31 5a 4c 37 6b 56 61 7a 42 4f 61 53 66 55 71 44 57 57 44 4f 68 68 38 35 34 57 34 46 61 30 54 53 6f 69 53 4a 68 57 6d 52 6f 63 67 42 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: pH+jW7IlakyAwijv.2Context: fcb224f7a4c41241<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAc1rI90cHYM9ws+G7bWoE8dFggeZFuJqlm4/IMBZLlmow07qjhJ1dfgh8KqX4rLGGV1ZL7kVazBOaSfUqDWWDOhh854W4Fa0TSoiSJhWmRocgB
2024-09-30 22:47:11 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 70 48 2b 6a 57 37 49 6c 61 6b 79 41 77 69 6a 76 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 63 62 32 32 34 66 37 61 34 63 34 31 32 34 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: pH+jW7IlakyAwijv.3Context: fcb224f7a4c41241<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-30 22:47:11 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-30 22:47:11 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 74 62 63 5a 50 34 67 4d 70 30 57 75 77 30 4d 39 4e 78 64 34 50 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: tbcZP4gMp0Wuw0M9Nxd4PA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49751	100.20.12.218	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:11 UTC	705	OUT	GET /v1/parking/landers/infoguard-switzerland.com?trafficTarget=gd&abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Request-Id: d058dfdb-cfb0-462f-897f-0973e8616027 sec-ch-ua-platform: "Windows" Accept: / Origin: https://infoguard-switzerland.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:11 UTC	892	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:11 GMT Content-Type: application/json Content-Length: 998 Connection: close Set-Cookie: AWSALB=YMjrNjrg6LWLqGCleMSFG3SlQNwIKduu26uisaVkSt5nl4ARCvck16v5wtvbGr2Ru1L3H1NJLzxt8JQqn1XbdmHqwdCfh4Zc6kha3FeTHXANIltagk02JGwvQBW+; Expires=Mon, 07 Oct 2024 22:47:11 GMT; Path=/ Set-Cookie: AWSALBCORS=YMjrNjrg6LWLqGCleMSFG3SlQNwIKduu26uisaVkSt5nl4ARCvck16v5wtvbGr2Ru1L3H1NJLzxt8JQqn1XbdmHqwdCfh4Zc6kha3FeTHXANIltagk02JGwvQBW+; Expires=Mon, 07 Oct 2024 22:47:11 GMT; Path=/; SameSite=None; Secure access-control-allow-credentials: true access-control-allow-origin: https://infoguard-switzerland.com access-control-max-age: 600 cache-control: Private,max-age=86400 set-cookie: pwvisitor=1bdf425c-ee62-4320-9019-676b75b07b0e; Path=/; Expires=Wed, 30 Oct 2024 22:47:11 GMT; Secure; SameSite=None x-request-id: d058dfdb-cfb0-462f-897f-0973e8616027
2024-09-30 22:47:11 UTC	998	IN	Data Raw: 7b 22 75 6e 74 61 72 67 65 74 65 64 22 3a 7b 22 73 79 73 74 65 6d 22 3a 22 50 57 22 2c 22 64 69 73 70 6c 61 79 54 79 70 65 22 3a 22 41 44 53 22 2c 22 64 61 74 61 53 6f 75 72 63 65 22 3a 22 49 4e 56 45 4e 54 4f 52 59 22 2c 22 61 64 53 65 6e 73 65 22 3a 7b 22 64 72 69 64 22 3a 22 61 73 2d 64 72 69 64 2d 6f 6f 2d 31 38 38 35 37 31 34 31 38 36 35 34 30 38 39 34 22 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 6e 6f 6e 2d 65 78 70 69 72 79 22 2c 22 70 75 62 49 64 22 3a 22 64 70 2d 67 6f 64 61 64 64 79 31 5f 78 6d 6c 22 7d 2c 22 64 6f 6d 61 69 6e 22 3a 7b 22 72 6f 6f 74 44 6f 6d 61 69 6e 22 3a 22 69 6e 66 6f 67 75 61 72 64 2d 73 77 69 74 7a 65 72 6c 61 6e 64 2e 63 6f 6d 22 2c 22 72 6f 6f 74 44 6f 6d 61 69 6e 46 72 6f 6d 42 72 6f 77 73 65 72 22 3a 22 69 6e 66 6f 67 75 61 Data Ascii: {"untargeted":{"system":"PW","displayType":"ADS","dataSource":"INVENTORY","adSense":{"drid":"as-drid-oo-1885714186540894","channel":"non-expiry","pubId":"dp-godaddy1_xml"},"domain":{"rootDomain":"infoguard-switzerland.com","rootDomainFromBrowser":"infogua

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49757	100.20.12.218	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:13 UTC	622	OUT	GET /v1/parking/landers/infoguard-switzerland.com?trafficTarget=gd&abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=YMjrNjrg6LWLqGCleMSFG3SlQNwIKduu26uisaVkSt5nl4ARCvck16v5wtvbGr2Ru1L3H1NJLzxt8JQqn1XbdmHqwdCfh4Zc6kha3FeTHXANIltagk02JGwvQBW+; pwvisitor=1bdf425c-ee62-4320-9019-676b75b07b0e
2024-09-30 22:47:13 UTC	731	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:13 GMT Content-Type: application/json Content-Length: 998 Connection: close Set-Cookie: AWSALB=7ikdeK6xyud4tSOvegZ5EpbMvqv6JeCPjXp/0cJGIk8llFYGy4wHE3W63z52z7vIBdVfrr6hQ324GCD5yyThKPlaA9PswvyTtm2fzoyNYJAsruc/SibPRjzQQL3m; Expires=Mon, 07 Oct 2024 22:47:13 GMT; Path=/ Set-Cookie: AWSALBCORS=7ikdeK6xyud4tSOvegZ5EpbMvqv6JeCPjXp/0cJGIk8llFYGy4wHE3W63z52z7vIBdVfrr6hQ324GCD5yyThKPlaA9PswvyTtm2fzoyNYJAsruc/SibPRjzQQL3m; Expires=Mon, 07 Oct 2024 22:47:13 GMT; Path=/; SameSite=None; Secure cache-control: Private,max-age=86400 set-cookie: pwvisitor=1bdf425c-ee62-4320-9019-676b75b07b0e; Path=/; Expires=Wed, 30 Oct 2024 22:47:13 GMT; Secure; SameSite=None x-request-id: CooFi-mh
2024-09-30 22:47:13 UTC	998	IN	Data Raw: 7b 22 75 6e 74 61 72 67 65 74 65 64 22 3a 7b 22 73 79 73 74 65 6d 22 3a 22 50 57 22 2c 22 64 69 73 70 6c 61 79 54 79 70 65 22 3a 22 41 44 53 22 2c 22 64 61 74 61 53 6f 75 72 63 65 22 3a 22 49 4e 56 45 4e 54 4f 52 59 22 2c 22 61 64 53 65 6e 73 65 22 3a 7b 22 64 72 69 64 22 3a 22 61 73 2d 64 72 69 64 2d 6f 6f 2d 31 38 38 35 37 31 34 31 38 36 35 34 30 38 39 34 22 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 6e 6f 6e 2d 65 78 70 69 72 79 22 2c 22 70 75 62 49 64 22 3a 22 64 70 2d 67 6f 64 61 64 64 79 31 5f 78 6d 6c 22 7d 2c 22 64 6f 6d 61 69 6e 22 3a 7b 22 72 6f 6f 74 44 6f 6d 61 69 6e 22 3a 22 69 6e 66 6f 67 75 61 72 64 2d 73 77 69 74 7a 65 72 6c 61 6e 64 2e 63 6f 6d 22 2c 22 72 6f 6f 74 44 6f 6d 61 69 6e 46 72 6f 6d 42 72 6f 77 73 65 72 22 3a 22 69 6e 66 6f 67 75 61 Data Ascii: {"untargeted":{"system":"PW","displayType":"ADS","dataSource":"INVENTORY","adSense":{"drid":"as-drid-oo-1885714186540894","channel":"non-expiry","pubId":"dp-godaddy1_xml"},"domain":{"rootDomain":"infoguard-switzerland.com","rootDomainFromBrowser":"infogua

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49756	142.250.186.78	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:13 UTC	1382	OUT	GET /afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=infoguard-switzerland.com&client=dp-godaddy1_xml&r=m&rpbu=https%3A%2F%2Finfoguard-switzerland.com%2Flander&type=3&uiopt=true&swp=as-drid-oo-1885714186540894&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=r3&nocache=9201727736431066&num=0&output=afd_ads&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727736431068&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=907&frm=0&uio=-&cont=relatedLinks&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Finfoguard-switzerland.com%2Flander&referer=http%3A%2F%2Finfoguard-switzerland.com%2F HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:13 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Mon, 30 Sep 2024 22:47:13 GMT Expires: Mon, 30 Sep 2024 22:47:13 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-CWQQ1GD741vw6Bw0O_NQ8g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 22:47:13 UTC	583	IN	Data Raw: 33 35 30 61 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 350a<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-30 22:47:13 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-30 22:47:13 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-30 22:47:13 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-30 22:47:13 UTC	1390	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 31 30 32 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 36 70 78 3b 77 69 64 74 68 3a 33 32 70 78 3b 7d 2e 73 69 31 33 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 2e 73 69 31 33 35 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 31 34 33 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 32 70 78 3b 77 69 64 74 68 3a 32 34 70 78 3b 7d 2e 73 69 31 33 30 Data Ascii: -webkit-flex-shrink:1; flex-shrink:1;}.si102{border-radius:16px;width:32px;}.si133{background-color:#FFFFFF;border-radius:2px;font-size:14px;margin-bottom:5px;margin-left:10px;color:#555555;}.si135{height:100%;}.si143{border-radius:12px;width:24px;}.si130
2024-09-30 22:47:13 UTC	1390	IN	Data Raw: 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 5f 20 73 69 31 33 33 20 73 70 61 6e 22 3e 52 65 6c 61 74 65 64 20 73 65 61 72 63 68 65 73 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 31 22 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 63 6c 69 63 6b 74 72 61 63 6b 65 64 41 64 5f 6a 73 20 73 69 31 30 31 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6e Data Ascii: direction:row;"><span class="p_ si133 span">Related searches</span></div><div id="e1" class="i_ div clicktrackedAd_js si101" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a href="https://in
2024-09-30 22:47:13 UTC	1390	IN	Data Raw: 73 73 3d 22 64 69 76 20 71 5f 20 73 69 31 30 32 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 66 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 61 64 5f 69 63 6f 6e 73 2f 73 74 61 6e 64 61 72 64 2f 70 75 62 6c 69 73 68 65 72 5f 69 63 6f 6e 5f 69 6d 61 67 65 2f 73 65 61 72 63 68 2e 73 76 67 3f 63 3d 25 32 33 31 39 36 37 44 32 22 20 61 6c 74 3d 22 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 63 6c 61 73 73 3d 22 69 6d 67 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 33 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 Data Ascii: ss="div q_ si102"><img src="https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2" alt="" loading="lazy" class="img"></div></div></div><div class="i_ div si33" style="-ms-flex-direction:row; -webkit-box-orient:hor
2024-09-30 22:47:13 UTC	1390	IN	Data Raw: 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 Data Ascii: ex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;"><div class="
2024-09-30 22:47:13 UTC	1390	IN	Data Raw: 61 73 73 3d 22 64 69 76 20 71 5f 20 73 69 31 34 33 20 77 5f 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 66 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 61 64 5f 69 63 6f 6e 73 2f 73 74 61 6e 64 61 72 64 2f 70 75 62 6c 69 73 68 65 72 5f 69 63 6f 6e 5f 69 6d 61 67 65 2f 63 68 65 76 72 6f 6e 2e 73 76 67 3f 63 3d 25 32 33 66 66 66 66 66 66 22 20 61 6c 74 3d 22 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 63 6c 61 73 73 3d 22 69 6d 67 22 3e 3c 2f 64 69 76 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 32 22 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 63 6c 69 63 6b 74 72 61 63 6b 65 64 41 64 5f 6a 73 20 73 69 31 30 31 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 Data Ascii: ass="div q_ si143 w_"><img src="https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff" alt="" loading="lazy" class="img"></div></a></div><div id="e2" class="i_ div clicktrackedAd_js si101" style="-ms-flex-directi
2024-09-30 22:47:13 UTC	1390	IN	Data Raw: 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 64 69 76 20 71 5f 20 73 69 31 30 32 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 66 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 61 64 5f 69 63 6f 6e 73 2f 73 74 61 6e 64 61 72 64 2f 70 75 62 6c 69 73 68 65 72 5f 69 63 6f 6e 5f 69 6d 61 67 65 2f 73 65 61 72 63 68 2e 73 76 67 3f 63 3d 25 32 33 31 39 36 37 44 32 22 20 61 6c 74 3d 22 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 Data Ascii: ox-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div aria-hidden="true" tabindex="-1" class="div q_ si102"><img src="https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2" alt="" loading="la

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49755	52.222.236.94	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:13 UTC	569	OUT	GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:13 UTC	665	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 7514 Connection: close Date: Mon, 30 Sep 2024 22:47:14 GMT Last-Modified: Mon, 16 Sep 2024 09:19:53 GMT ETag: "149f8b397fe711244ef204823190cb86" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8a6f67a9421de326f43e9107751b580e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: Mc0-e1MRvMuqMy-GqPwjTU5C6fuE0_AOV7TOg7nqw7uOc54FMkowNw== X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-09-30 22:47:13 UTC	7514	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 3c 4d 6f e3 48 76 f7 fd 15 32 17 d1 90 71 89 96 fc 6d aa 09 6f b7 db b3 e3 5d bb dd b0 bb 67 76 d7 31 1a 94 58 b2 ab 9b 22 b5 64 d1 6e 8f ac c3 62 6f b9 24 40 2e 01 72 0b 10 2c 02 04 7b 09 b2 97 04 c9 61 7e ca 24 b9 e6 2f e4 bd fa 62 51 a2 6c f7 cc 2c 90 04 69 18 2d b2 3e 5f bd 7a df f5 8a ff f5 cf ff b6 32 2a d3 21 67 59 da 4a dd 82 64 24 f7 a6 a6 24 72 39 a1 de 94 8d dc 95 ec 82 5f ca a7 42 3c dd 44 79 8b 85 8e 6e ea 84 21 bf 9b d0 6c d4 ca e9 af 4b 96 d3 76 5b 3d f4 b1 0f bc 32 2f a7 bc cc d3 16 83 41 57 ba 1e 96 27 ba 2c 51 65 fc 3a cf 6e 5d 1a a6 f4 b6 75 98 e7 59 ee 3a 07 51 9a 66 bc 35 62 69 dc 1a 67 71 99 d0 d6 67 ce 2a 5f 75 3e 73 3c cf 1f 66 31 0d 9d 93 d3 97 6f 8f 0f df bd 3a 7d f3 ee f3 d3 b7 af 5e 3a 84 ce 58 Data Ascii: <MoHv2qmo]gv1X"dnbo$@.r,{a~$/bQl,i->_z2!gYJd$$r9_B<Dyn!lKv[=2/AW',Qe:n]uY:Qf5bigqg_u>s<f1o:}^:X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49759	142.250.186.78	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:14 UTC	555	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:14 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153223 Date: Mon, 30 Sep 2024 22:47:14 GMT Expires: Mon, 30 Sep 2024 22:47:14 GMT Cache-Control: private, max-age=3600 ETag: "4492878693876391607" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:14 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 32 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301
2024-09-30 22:47:14 UTC	1390	IN	Data Raw: 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c Data Ascii: rue,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvL
2024-09-30 22:47:14 UTC	1390	IN	Data Raw: 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 Data Ascii: 0,value:g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Ui
2024-09-30 22:47:14 UTC	1390	IN	Data Raw: 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 Data Ascii: new TypeError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b
2024-09-30 22:47:14 UTC	1390	IN	Data Raw: 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 Data Ascii: null;break a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prot
2024-09-30 22:47:14 UTC	1390	IN	Data Raw: 68 28 77 29 7b 6d 28 77 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 Data Ascii: h(w){m(w)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw
2024-09-30 22:47:14 UTC	1390	IN	Data Raw: 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 Data Ascii: ==null\|\|l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{v
2024-09-30 22:47:14 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 Data Ascii: return{id:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entri
2024-09-30 22:47:14 UTC	1390	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f Data Ascii: ,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.pro
2024-09-30 22:47:14 UTC	1390	IN	Data Raw: 65 6e 67 74 68 3b 65 3e 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 Data Ascii: ength;e>0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d inst

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49760	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:14 UTC	384	OUT	GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:14 UTC	676	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 7514 Connection: close Last-Modified: Mon, 16 Sep 2024 09:19:53 GMT x-amz-server-side-encryption: AES256 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 30 Sep 2024 15:33:09 GMT Cache-Control: max-age=86400 ETag: "149f8b397fe711244ef204823190cb86" X-Cache: Hit from cloudfront Via: 1.1 2ba7b49ec4c4de4e67297e603c89a5e4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: k-ZmNAlvOeKUtjw8r6fyk7gqRS_q8fVUc5ArkZn7WZ_0JgfhZ8Z_DQ== Age: 26046 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-09-30 22:47:14 UTC	7514	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 3c 4d 6f e3 48 76 f7 fd 15 32 17 d1 90 71 89 96 fc 6d aa 09 6f b7 db b3 e3 5d bb dd b0 bb 67 76 d7 31 1a 94 58 b2 ab 9b 22 b5 64 d1 6e 8f ac c3 62 6f b9 24 40 2e 01 72 0b 10 2c 02 04 7b 09 b2 97 04 c9 61 7e ca 24 b9 e6 2f e4 bd fa 62 51 a2 6c f7 cc 2c 90 04 69 18 2d b2 3e 5f bd 7a df f5 8a ff f5 cf ff b6 32 2a d3 21 67 59 da 4a dd 82 64 24 f7 a6 a6 24 72 39 a1 de 94 8d dc 95 ec 82 5f ca a7 42 3c dd 44 79 8b 85 8e 6e ea 84 21 bf 9b d0 6c d4 ca e9 af 4b 96 d3 76 5b 3d f4 b1 0f bc 32 2f a7 bc cc d3 16 83 41 57 ba 1e 96 27 ba 2c 51 65 fc 3a cf 6e 5d 1a a6 f4 b6 75 98 e7 59 ee 3a 07 51 9a 66 bc 35 62 69 dc 1a 67 71 99 d0 d6 67 ce 2a 5f 75 3e 73 3c cf 1f 66 31 0d 9d 93 d3 97 6f 8f 0f df bd 3a 7d f3 ee f3 d3 b7 af 5e 3a 84 ce 58 Data Ascii: <MoHv2qmo]gv1X"dnbo$@.r,{a~$/bQl,i->_z2!gYJd$$r9_B<Dyn!lKv[=2/AW',Qe:n]uY:Qf5bigqg_u>s<f1o:}^:X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49761	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:14 UTC	815	OUT	GET /trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:14 UTC	650	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2114 Connection: close Date: Mon, 30 Sep 2024 22:47:15 GMT Last-Modified: Mon, 12 Aug 2024 14:37:02 GMT ETag: "bbd26c541b063878dddb6095c1f82221" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3431ec594cac61983aae2d9ffaf23980.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: oyvDTPcw_Lm3dzsAxSpmvM7Ec6nR19kaUkcEbLKQwT8JlK9OO3fvNg== X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-09-30 22:47:14 UTC	2114	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cd 59 6d 6f e3 b8 11 fe be bf 82 e7 c5 01 c9 95 4a 6c 27 76 72 b2 77 d1 f6 7a c5 1d b0 68 0b f4 80 a2 9f 02 4a a2 2c 6e 28 52 21 29 27 3e c3 ff bd 43 ea c5 94 2c db c9 ee 16 2d bc 59 51 1c 72 e6 99 17 92 33 d4 f2 bb bf fc fd a7 df fe fd 8f 9f 51 66 72 fe f1 dd b2 7a 20 b4 cc 28 49 6c 03 9a 86 19 4e 3f fe a6 4a 6d 0a c6 a5 41 3f 41 4b e6 e8 5f 2c 59 51 b3 bc ae e8 d5 d8 9c 1a 82 e2 8c 28 4d cd 87 51 69 d2 e0 7e 84 ae 7d a2 20 39 fd 30 52 32 92 46 8f 50 2c 85 a1 02 86 0a c9 44 42 5f f6 83 b5 d9 58 ae 16 10 8e 64 b2 c1 09 5b 63 5d 10 81 49 51 70 6a b0 8c 3e d3 d8 60 96 2a e0 88 b3 09 ce a6 38 bb c1 d9 2d ce 66 38 9b e3 02 47 5c c6 8f 4f a5 34 14 17 8a 62 82 49 14 29 4c 62 25 c5 26 c7 24 49 14 d5 1a 47 6c 85 63 06 63 62 99 50 9c Data Ascii: YmoJl'vrwzhJ,n(R!)'>C,-YQr3Qfrz (IlN?JmA?AK_,YQ(MQi~} 90R2FP,DB_Xd[c]IQpj>`*8-f8G\O4bI)Lb%&$IGlccbP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49763	100.20.12.218	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:15 UTC	565	OUT	OPTIONS /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://infoguard-switzerland.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:15 UTC	643	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:15 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=bPwafmlTaq50vnhHd7iETTskx5TymoFOgLYEhBWb4aRZsO1crVJ+InBNu4lOziSugAsmfQuq+czMbtFp4OT0WfJdyr9W4U7T/GosUNgzGFV60a4l/HBVM6aq9kmV; Expires=Mon, 07 Oct 2024 22:47:15 GMT; Path=/ Set-Cookie: AWSALBCORS=bPwafmlTaq50vnhHd7iETTskx5TymoFOgLYEhBWb4aRZsO1crVJ+InBNu4lOziSugAsmfQuq+czMbtFp4OT0WfJdyr9W4U7T/GosUNgzGFV60a4l/HBVM6aq9kmV; Expires=Mon, 07 Oct 2024 22:47:15 GMT; Path=/; SameSite=None; Secure access-control-allow-methods: POST access-control-allow-headers: content-type access-control-allow-origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49762	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:15 UTC	692	OUT	GET /trustboxes/5419b637fa0340045cd0c936/main.js HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:16 UTC	666	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 17138 Connection: close Date: Mon, 30 Sep 2024 22:47:16 GMT Last-Modified: Mon, 12 Aug 2024 14:37:03 GMT ETag: "732769f238a36cb44705f2d6a18312ee" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ed91e9c9d6be32c45c1d670b7d4a6616.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: GkMzJNs-7vsz8Vftzw8LEXtua6LsexQT9wOPLpad33G2Ie1plm0DGw== X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-09-30 22:47:16 UTC	8192	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd fb 76 db 46 b6 27 fc ff 3c 05 8d 3e 63 13 2d 10 c2 fd 42 99 d1 38 ee 64 9c 33 72 92 89 9d cc 99 a8 75 bc 20 12 92 d0 21 01 1e 00 94 ac c8 5c 6b 1e 64 de e4 fb e3 7b 97 ef 05 be 57 98 df de 55 85 0b 09 29 be a5 3b b3 56 bb 7b 45 44 a1 50 b5 6b df f7 ae 0d d4 ff ff ff fc bf 8f 2e 36 f9 bc ce 8a 7c 54 8e 0b 23 33 12 fd ae 69 a9 c6 b5 91 ea 77 d9 c5 f8 51 76 5a 9f 89 5f 05 ff ba 4e ca 51 3e d3 54 57 6d 36 ab 6f d7 69 71 31 2a d3 ff d8 64 65 fa f8 b1 fc 71 44 cf e0 32 d7 cb b4 de 94 f9 28 c7 a0 8f 2c 9d da 97 aa 6d 29 db ea ab b2 b8 19 e7 b3 3c bd 19 7d 55 96 45 39 d6 9e 27 79 5e d4 a3 8b 2c 5f 8c 56 c5 62 b3 4c 47 4f b4 83 fa 40 7b a2 e9 ba 39 2f 16 e9 4c 7b f9 dd 5f 7e 3c f9 ea cd b7 df bd 7e f3 f5 77 3f 7e fb 17 cd c8 b7 Data Ascii: vF'<>c-B8d3ru !\kd{WU);V{EDPk.6\|T#3iwQvZ_NQ>TWm6oiq1*deqD2(,m)<}UE9'y^,_VbLGO@{9/L{_~<~w?~
2024-09-30 22:47:16 UTC	232	IN	Data Raw: 06 cf 59 ad 6c 31 a3 32 79 89 63 4c 58 39 37 62 3e f2 21 4c 10 30 2f 24 3c fa 36 22 1d 21 09 78 12 97 80 43 80 03 56 c5 b4 14 ab e0 d2 a5 85 87 8e 1d 7b 70 3b f0 4f 8d 83 ee 9e 0b 06 0c a1 72 a2 e6 92 46 0c b0 ec eb 49 80 95 82 01 e2 16 39 c4 11 10 1c 37 f8 75 e5 11 a3 ba 84 4a 68 8a 20 f4 a5 d6 91 8c 2a 16 40 38 73 5c 8c 11 c0 c6 b9 8e 4f 5c e1 bb 98 1a 1a 0f 38 45 37 d6 3a 84 27 78 f1 7e 68 92 fc 5a 3e 61 1a 6c 1b 05 f2 9a 18 c4 b5 9d 46 3d 78 13 a5 11 42 5c c2 e4 4a 79 16 0a aa 11 57 62 17 80 3a 31 59 97 00 04 2c 2f 20 99 00 12 68 50 f0 8a 47 b2 4e 54 8e 05 a2 30 b2 10 59 e0 d6 f7 48 72 3d 1f ca d2 93 62 36 61 1d 0c 38 85 58 c9 bb ae 84 0f 88 24 62 92 7a 20 49 02 96 a1 75 49 c0 c1 34 Data Ascii: Yl12ycLX97b>!L0/$<6"!xCV{p;OrFI97uJh *@8s\O\8E7:'x~hZ>alF=xB\JyWb:1Y,/ hPGNT0YHr=b6a8X$bz IuI4
2024-09-30 22:47:16 UTC	8714	IN	Data Raw: ae 63 2b cd d8 6a 21 81 f7 49 4b 41 02 2c 50 22 df b0 79 03 38 a4 82 75 80 d0 76 18 97 74 00 fa 61 56 27 20 e1 77 1d 92 05 88 5b 28 27 27 10 f1 8f 38 9f 35 13 80 00 4e 22 52 d3 30 19 11 11 1b 83 b9 04 8c d0 ff 93 c6 00 08 b4 4c 04 43 47 6a 70 97 5c 11 47 32 d0 44 d8 12 4f 2a 79 a5 04 27 ad 64 03 6d 7e 60 4b 66 74 5b c8 05 97 83 83 f1 40 10 48 6b d3 3e 1f fb 96 d0 66 d2 36 81 f7 03 42 80 d0 34 e8 17 d8 a1 1d 34 d7 d0 11 6e 00 ee 26 3d 2c 05 cd 06 8a 3d c6 86 13 10 1f e1 d2 66 77 09 cb 0b 1b 43 c6 0a d8 0c 80 11 87 94 86 6f c3 1d b3 49 0e 5c 52 3c 50 18 c4 b9 0a 21 cc 18 3e 6b eb 58 19 3d e2 67 8f d6 42 a6 c1 26 5b eb a3 b7 ed 2b f4 d1 68 a4 24 80 21 9e 99 14 02 68 1d fa aa 41 f2 28 58 9b 52 16 88 43 48 10 c0 f9 23 06 2b c4 f4 4c 27 a9 38 04 c5 3d d6 ad a0 Data Ascii: c+j!IKA,P"y8uvtaV' w[(''85N"R0LCGjp\G2DO*y'dm~`Kft[@Hk>f6B44n&=,=fwCoI\R<P!>kX=gB&[+h$!hA(XRCH#+L'8=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49764	142.250.184.238	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:15 UTC	373	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:15 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 153214 Date: Mon, 30 Sep 2024 22:47:15 GMT Expires: Mon, 30 Sep 2024 22:47:15 GMT Cache-Control: private, max-age=3600 ETag: "16762785716741463394" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:15 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 37 33 38 33 36 33 33 34 36 34 33 37 30 36 31 35 35 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"17383633464370615553",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301
2024-09-30 22:47:15 UTC	1390	IN	Data Raw: 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 Data Ascii: eServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpb
2024-09-30 22:47:15 UTC	1390	IN	Data Raw: 67 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 Data Ascii: g})}if(a)return a;c.prototype.toString=function(){return this.ne};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8Clamp
2024-09-30 22:47:15 UTC	1390	IN	Data Raw: 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 70 61 29 70 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f Data Ascii: eError(a+" is not extensible");return a}:null}var pa=la;function qa(a,b){a.prototype=ka(b.prototype);a.prototype.constructor=a;if(pa)pa(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&O
2024-09-30 22:47:15 UTC	1390	IN	Data Raw: 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 55 66 28 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 62 64 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 67 67 28 68 2c 67 29 3a 74 68 69 73 2e 4c 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 63 65 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 64 Data Ascii: ak a;case "function":h=!0;break a;default:h=!1}h?this.Uf(g):this.Ld(g)}};b.prototype.Uf=function(g){var h=void 0;try{h=g.then}catch(k){this.bd(k);return}typeof h=="function"?this.gg(h,g):this.Ld(g)};b.prototype.bd=function(g){this.ce(2,g)};b.prototype.Ld
2024-09-30 22:47:15 UTC	1390	IN	Data Raw: 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 69 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 58 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 Data Ascii: )}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.ib(k(g,l),k(h,m));return p};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.ib=function(g,h){function k(){switch(l.B){case 1:g(l.Xa);break;case 2:h(l.Xa);break;default:throw Error("
2024-09-30 22:47:15 UTC	1390	IN	Data Raw: 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 73 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 63 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a Data Ascii: l==="function"}function e(k){if(!sa(k,g)){var l=new c;ca(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Obj
2024-09-30 22:47:15 UTC	1390	IN	Data Raw: 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 49 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 49 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 Data Ascii: d:l,list:m,index:h,I:p}}return{id:l,list:m,index:-1,I:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|type
2024-09-30 22:47:15 UTC	1390	IN	Data Raw: 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 Data Ascii: n(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.e
2024-09-30 22:47:15 UTC	1390	IN	Data Raw: 30 26 26 63 3e 30 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 65 3c 3d 30 7d 7d 29 3b 0a 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 71 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 Data Ascii: 0&&c>0;)if(d[--c]!=b[--e])return!1;return e<=0}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c.push([d,b[d]]);return c}});q("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49766	216.58.206.65	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:15 UTC	728	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2 HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:16 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 15:23:01 GMT Expires: Tue, 01 Oct 2024 14:23:01 GMT Cache-Control: public, max-age=82800 Age: 26654 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:16 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 31 39 36 37 44 32 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#1967D2' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49765	216.58.206.65	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:15 UTC	729	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:16 UTC	798	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 22:40:47 GMT Expires: Tue, 01 Oct 2024 21:40:47 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 388 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:16 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49767	100.20.12.218	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:16 UTC	662	OUT	POST /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive Content-Length: 940 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://infoguard-switzerland.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:16 UTC	940	OUT	Data Raw: 7b 22 65 76 65 6e 74 54 79 70 65 22 3a 22 56 49 53 49 54 22 2c 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 34 2d 30 39 2d 33 30 54 32 32 3a 34 37 3a 31 33 2e 36 37 36 5a 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 69 6e 66 6f 67 75 61 72 64 2d 73 77 69 74 7a 65 72 6c 61 6e 64 2e 63 6f 6d 22 2c 22 64 6f 6d 61 69 6e 53 74 61 74 75 73 22 3a 22 41 43 54 49 56 45 22 2c 22 73 79 73 74 65 6d 22 3a 22 50 57 22 2c 22 64 61 74 61 53 6f 75 72 63 65 22 3a 22 49 4e 56 45 4e 54 4f 52 59 22 2c 22 69 73 54 75 72 6e 4b 65 79 52 65 73 65 6c 6c 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 43 6e 61 6d 65 22 3a 66 61 6c 73 65 2c 22 64 72 69 64 22 3a 22 61 73 2d 64 72 69 64 2d 6f 6f 2d 31 38 38 35 37 31 34 31 38 36 35 34 30 38 39 34 22 2c 22 70 75 62 49 64 22 3a 22 64 70 2d 67 6f 64 61 Data Ascii: {"eventType":"VISIT","createdAt":"2024-09-30T22:47:13.676Z","domain":"infoguard-switzerland.com","domainStatus":"ACTIVE","system":"PW","dataSource":"INVENTORY","isTurnKeyReseller":false,"isCname":false,"drid":"as-drid-oo-1885714186540894","pubId":"dp-goda
2024-09-30 22:47:16 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:16 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=4woV+g+74GbHX1I3ltn1FQMnKIRJEad4HcbnuAzzjWqUT1V18xPbdp2oBemuK/6gRgRKbzi555KzdN04LWwgsfnWFkNjOVLILRTr13rCf64t0JlRf4zzPvsQ+Qew; Expires=Mon, 07 Oct 2024 22:47:16 GMT; Path=/ Set-Cookie: AWSALBCORS=4woV+g+74GbHX1I3ltn1FQMnKIRJEad4HcbnuAzzjWqUT1V18xPbdp2oBemuK/6gRgRKbzi555KzdN04LWwgsfnWFkNjOVLILRTr13rCf64t0JlRf4zzPvsQ+Qew; Expires=Mon, 07 Oct 2024 22:47:16 GMT; Path=/; SameSite=None; Secure access-control-allow-origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49772	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:16 UTC	388	OUT	GET /trustboxes/5419b637fa0340045cd0c936/main.js HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:17 UTC	666	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 17138 Connection: close Date: Mon, 30 Sep 2024 22:47:17 GMT Last-Modified: Mon, 12 Aug 2024 14:37:03 GMT ETag: "732769f238a36cb44705f2d6a18312ee" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e59bea79ab5f15feda92136bc7b74158.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: nNJ6RDKN6fB3ODoV3QcCZpcTBQ6wtn2NYQCONKhVAvlPnYakSPCA1Q== X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-09-30 22:47:17 UTC	8425	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd fb 76 db 46 b6 27 fc ff 3c 05 8d 3e 63 13 2d 10 c2 fd 42 99 d1 38 ee 64 9c 33 72 92 89 9d cc 99 a8 75 bc 20 12 92 d0 21 01 1e 00 94 ac c8 5c 6b 1e 64 de e4 fb e3 7b 97 ef 05 be 57 98 df de 55 85 0b 09 29 be a5 3b b3 56 bb 7b 45 44 a1 50 b5 6b df f7 ae 0d d4 ff ff ff fc bf 8f 2e 36 f9 bc ce 8a 7c 54 8e 0b 23 33 12 fd ae 69 a9 c6 b5 91 ea 77 d9 c5 f8 51 76 5a 9f 89 5f 05 ff ba 4e ca 51 3e d3 54 57 6d 36 ab 6f d7 69 71 31 2a d3 ff d8 64 65 fa f8 b1 fc 71 44 cf e0 32 d7 cb b4 de 94 f9 28 c7 a0 8f 2c 9d da 97 aa 6d 29 db ea ab b2 b8 19 e7 b3 3c bd 19 7d 55 96 45 39 d6 9e 27 79 5e d4 a3 8b 2c 5f 8c 56 c5 62 b3 4c 47 4f b4 83 fa 40 7b a2 e9 ba 39 2f 16 e9 4c 7b f9 dd 5f 7e 3c f9 ea cd b7 df bd 7e f3 f5 77 3f 7e fb 17 cd c8 b7 Data Ascii: vF'<>c-B8d3ru !\kd{WU);V{EDPk.6\|T#3iwQvZ_NQ>TWm6oiq1*deqD2(,m)<}UE9'y^,_VbLGO@{9/L{_~<~w?~
2024-09-30 22:47:17 UTC	8713	IN	Data Raw: 63 2b cd d8 6a 21 81 f7 49 4b 41 02 2c 50 22 df b0 79 03 38 a4 82 75 80 d0 76 18 97 74 00 fa 61 56 27 20 e1 77 1d 92 05 88 5b 28 27 27 10 f1 8f 38 9f 35 13 80 00 4e 22 52 d3 30 19 11 11 1b 83 b9 04 8c d0 ff 93 c6 00 08 b4 4c 04 43 47 6a 70 97 5c 11 47 32 d0 44 d8 12 4f 2a 79 a5 04 27 ad 64 03 6d 7e 60 4b 66 74 5b c8 05 97 83 83 f1 40 10 48 6b d3 3e 1f fb 96 d0 66 d2 36 81 f7 03 42 80 d0 34 e8 17 d8 a1 1d 34 d7 d0 11 6e 00 ee 26 3d 2c 05 cd 06 8a 3d c6 86 13 10 1f e1 d2 66 77 09 cb 0b 1b 43 c6 0a d8 0c 80 11 87 94 86 6f c3 1d b3 49 0e 5c 52 3c 50 18 c4 b9 0a 21 cc 18 3e 6b eb 58 19 3d e2 67 8f d6 42 a6 c1 26 5b eb a3 b7 ed 2b f4 d1 68 a4 24 80 21 9e 99 14 02 68 1d fa aa 41 f2 28 58 9b 52 16 88 43 48 10 c0 f9 23 06 2b c4 f4 4c 27 a9 38 04 c5 3d d6 ad a0 8a Data Ascii: c+j!IKA,P"y8uvtaV' w[(''85N"R0LCGjp\G2DO*y'dm~`Kft[@Hk>f6B44n&=,=fwCoI\R<P!>kX=gB&[+h$!hA(XRCH#+L'8=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49774	142.250.184.225	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:16 UTC	488	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:17 UTC	798	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 22:40:47 GMT Expires: Tue, 01 Oct 2024 21:40:47 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 389 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:17 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49770	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:16 UTC	785	OUT	GET /trustbox-data/5419b637fa0340045cd0c936?businessUnitId=483fd2b90000640005029919&locale=en-US HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:17 UTC	579	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 1030 Connection: close Date: Mon, 30 Sep 2024 22:37:32 GMT Server: Kestrel Cache-Control: public,max-age=1800 ETag: "a70acb2d2468b00475ec7d28683f0f25" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3431ec594cac61983aae2d9ffaf23980.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: 0meg6OsL-XA7DCQ6IJqvEcrjp6ne-lFhEpaJnlSanPHW4IQJ9pXr0w== Age: 585
2024-09-30 22:47:17 UTC	1030	IN	Data Raw: 7b 22 62 75 73 69 6e 65 73 73 55 6e 69 74 22 3a 7b 22 73 74 61 72 73 22 3a 34 2e 35 2c 22 74 72 75 73 74 53 63 6f 72 65 22 3a 34 2e 36 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 47 6f 44 61 64 64 79 22 2c 22 6e 75 6d 62 65 72 4f 66 52 65 76 69 65 77 73 22 3a 7b 22 74 6f 74 61 6c 22 3a 31 30 37 39 32 31 2c 22 6f 6e 65 53 74 61 72 22 3a 38 37 38 31 2c 22 74 77 6f 53 74 61 72 73 22 3a 31 32 36 37 2c 22 74 68 72 65 65 53 74 61 72 73 22 3a 31 37 34 35 2c 22 66 6f 75 72 53 74 61 72 73 22 3a 35 31 35 37 2c 22 66 69 76 65 53 74 61 72 73 22 3a 39 30 39 37 31 7d 2c 22 77 65 62 73 69 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 64 61 64 64 79 2e 63 6f 6d 22 2c 22 69 64 65 6e 74 69 66 79 69 6e 67 4e 61 6d 65 22 3a 22 77 77 77 2e 67 6f 64 61 Data Ascii: {"businessUnit":{"stars":4.5,"trustScore":4.6,"displayName":"GoDaddy","numberOfReviews":{"total":107921,"oneStar":8781,"twoStars":1267,"threeStars":1745,"fourStars":5157,"fiveStars":90971},"websiteUrl":"https://www.godaddy.com","identifyingName":"www.goda

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49768	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:16 UTC	1174	OUT	GET /stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander&referrer=http%3A%2F%2Finfoguard-switzerland.com%2F&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:17 UTC	443	IN	HTTP/1.1 204 No Content Connection: close Cache-Control: no-store,no-cache Date: Mon, 30 Sep 2024 22:47:16 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 8a6f67a9421de326f43e9107751b580e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: dR1w_2A5mdxtjow8-4et5g0i3RmpvXOwD_75ySl2JYh049_XguFSFg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49769	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:16 UTC	1180	OUT	GET /stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander&referrer=http%3A%2F%2Finfoguard-switzerland.com%2F&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:17 UTC	443	IN	HTTP/1.1 204 No Content Connection: close Cache-Control: no-store,no-cache Date: Mon, 30 Sep 2024 22:47:16 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 7831c78db9d585e32d354900cc00dca6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: ckVQhEueHYk7w7JgakVPGd0EGAHIFreV0qayaDxUy6O9U_EU32Uhfg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49773	142.250.184.225	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:16 UTC	487	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2 HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:17 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 15:23:01 GMT Expires: Tue, 01 Oct 2024 14:23:01 GMT Cache-Control: public, max-age=82800 Age: 26656 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:17 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 31 39 36 37 44 32 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#1967D2' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49777	100.20.12.218	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:17 UTC	710	OUT	GET /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pwvisitor=1bdf425c-ee62-4320-9019-676b75b07b0e; AWSALB=7ikdeK6xyud4tSOvegZ5EpbMvqv6JeCPjXp/0cJGIk8llFYGy4wHE3W63z52z7vIBdVfrr6hQ324GCD5yyThKPlaA9PswvyTtm2fzoyNYJAsruc/SibPRjzQQL3m; AWSALBCORS=7ikdeK6xyud4tSOvegZ5EpbMvqv6JeCPjXp/0cJGIk8llFYGy4wHE3W63z52z7vIBdVfrr6hQ324GCD5yyThKPlaA9PswvyTtm2fzoyNYJAsruc/SibPRjzQQL3m
2024-09-30 22:47:17 UTC	531	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:17 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=kmkbEGGU2+8akPBR7cCHwDAmUsXQDGmDzqET54/n6FnNYq94IpTC6RsrW5IbiSd3vIvOuJX69bKVvwWn6GT/pVs+WgCaAmEXZ6ViQ1Js8ovvcdSaqbdoSOx5TV57; Expires=Mon, 07 Oct 2024 22:47:17 GMT; Path=/ Set-Cookie: AWSALBCORS=kmkbEGGU2+8akPBR7cCHwDAmUsXQDGmDzqET54/n6FnNYq94IpTC6RsrW5IbiSd3vIvOuJX69bKVvwWn6GT/pVs+WgCaAmEXZ6ViQ1Js8ovvcdSaqbdoSOx5TV57; Expires=Mon, 07 Oct 2024 22:47:17 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49779	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:18 UTC	679	OUT	GET /fonts/ubuntu.css HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:18 UTC	495	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 5197 Connection: close Last-Modified: Mon, 03 Oct 2022 14:37:44 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 30 Sep 2024 04:15:22 GMT ETag: "6aa91841b259a6c32e2f779e08c588c4" X-Cache: Hit from cloudfront Via: 1.1 89e34e3fd814f1393ef77867b93dd12e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: asUcz-HwvO8tnKc9HCGU6ltLA4VRELC2sf4G_pO_-08B59CtcHFIgw== Age: 66717
2024-09-30 22:47:18 UTC	5197	IN	Data Raw: 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 55 62 75 6e 74 75 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 2e 74 72 75 73 74 70 69 6c 6f 74 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 75 62 75 6e 74 75 2f 34 69 43 73 36 4b 56 6a 62 4e 42 59 6c 67 6f 4b 63 67 37 32 6a 30 30 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b Data Ascii: /* cyrillic-ext */@font-face { font-family: 'Ubuntu'; font-style: normal; font-weight: 400; src: url(https://widget.trustpilot.com/fonts/ubuntu/4iCs6KVjbNBYlgoKcg72j00.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49781	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:18 UTC	436	OUT	GET /trustbox-data/5419b637fa0340045cd0c936?businessUnitId=483fd2b90000640005029919&locale=en-US HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:18 UTC	579	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 1030 Connection: close Date: Mon, 30 Sep 2024 22:37:32 GMT Server: Kestrel Cache-Control: public,max-age=1800 ETag: "a70acb2d2468b00475ec7d28683f0f25" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 30e954298424aa69c035e25834574742.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: 69Q0FScs1SzarUZDidsty1tVq4KeA62dHiSpInUUrKpni7Hiuv4opA== Age: 586
2024-09-30 22:47:18 UTC	1030	IN	Data Raw: 7b 22 62 75 73 69 6e 65 73 73 55 6e 69 74 22 3a 7b 22 73 74 61 72 73 22 3a 34 2e 35 2c 22 74 72 75 73 74 53 63 6f 72 65 22 3a 34 2e 36 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 47 6f 44 61 64 64 79 22 2c 22 6e 75 6d 62 65 72 4f 66 52 65 76 69 65 77 73 22 3a 7b 22 74 6f 74 61 6c 22 3a 31 30 37 39 32 31 2c 22 6f 6e 65 53 74 61 72 22 3a 38 37 38 31 2c 22 74 77 6f 53 74 61 72 73 22 3a 31 32 36 37 2c 22 74 68 72 65 65 53 74 61 72 73 22 3a 31 37 34 35 2c 22 66 6f 75 72 53 74 61 72 73 22 3a 35 31 35 37 2c 22 66 69 76 65 53 74 61 72 73 22 3a 39 30 39 37 31 7d 2c 22 77 65 62 73 69 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 64 61 64 64 79 2e 63 6f 6d 22 2c 22 69 64 65 6e 74 69 66 79 69 6e 67 4e 61 6d 65 22 3a 22 77 77 77 2e 67 6f 64 61 Data Ascii: {"businessUnit":{"stars":4.5,"trustScore":4.6,"displayName":"GoDaddy","numberOfReviews":{"total":107921,"oneStar":8781,"twoStars":1267,"threeStars":1745,"fourStars":5157,"fiveStars":90971},"websiteUrl":"https://www.godaddy.com","identifyingName":"www.goda

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49783	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:19 UTC	616	OUT	GET /fonts/ubuntu/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://widget.trustpilot.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://widget.trustpilot.com/fonts/ubuntu.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:19 UTC	507	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 34852 Connection: close Last-Modified: Thu, 29 Sep 2022 09:41:44 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 30 Sep 2024 01:01:35 GMT ETag: "0e8eefb4549a2edf26c560cb9845952e" X-Cache: Hit from cloudfront Via: 1.1 ed91e9c9d6be32c45c1d670b7d4a6616.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: Kw8uoTGDxPtK4MlayPltxV0lW1WHDnCPWYxEpgksUEkqwiikAuEJGw== Age: 81151
2024-09-30 22:47:19 UTC	15877	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 88 24 00 12 00 00 00 01 3c d4 00 00 87 ba 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 83 72 1c 92 32 06 60 16 ad 56 00 82 00 08 84 14 09 8c 23 11 10 0a 82 c2 18 82 a7 12 0b 84 2c 00 12 bd 28 01 36 02 24 03 88 54 04 20 05 82 76 07 89 58 0c 85 71 5b e7 2b 91 01 d6 6e bb 0f 21 11 d0 6d 10 61 64 91 f2 25 c6 af 60 b7 62 83 dc 8c 86 24 d4 d3 d5 8a 71 ac 13 60 e3 c0 40 c6 6d 7e f4 ff ff ff ff e9 49 45 c6 4c 3a 48 bb 0d 04 10 d1 a1 a2 fe 90 e5 ee 08 41 39 10 28 75 40 46 c6 28 f8 45 3e 0e d3 bc 54 5a af 3e ca a8 d8 3c 4c e1 86 5d 2c fb 2e ef db 83 26 21 a3 d9 f5 28 78 b2 52 aa 51 3a 98 ed c6 bb a6 79 78 05 02 2b 72 7e 06 0a e5 db c3 72 2c 96 dc 52 b3 ab e9 d0 f1 5c 79 cb 87 de 7c 3a 17 5c e7 c0 2a c7 Data Ascii: wOF2$<r2`V#,(6$T vXq[+n!mad%`b$q`@m~IEL:HA9(u@F(E>TZ><L],.&!(xRQ:yx+r~r,R\y\|:\*
2024-09-30 22:47:19 UTC	16384	IN	Data Raw: ce 65 94 cc 71 49 2f 8c 6e 27 c2 41 a2 9d b3 0d c6 02 9d 74 73 f7 f1 03 e0 26 77 86 54 95 fb 41 f8 3b 2f 79 4b e7 1f 04 59 08 5d c8 11 a6 1a 14 35 a5 79 f9 5e e1 0a c4 00 36 a5 79 4c 4a 0d 32 bd 34 04 6c 22 d6 19 04 13 f3 1c f7 f5 b2 c4 9c cc a2 a6 94 2d f1 ae 98 60 d3 9f cf 38 98 f3 34 5b 72 b9 7c 9a a2 03 2b a0 42 1d 30 4b a1 c4 bc 9e d0 79 aa 47 61 5a 74 b0 64 3b 36 1e 4b 69 55 b2 f1 9c 0d b1 e8 80 63 1a aa e8 82 eb d1 c1 16 95 b2 87 5c c9 16 af 5c 72 a5 95 6c 9e 78 e0 26 83 63 64 3e 4b a6 10 90 39 9a d0 a3 99 95 43 7d 65 e5 b4 02 6f 6b dd f6 02 85 1d 56 c5 da df dc 9f e6 f7 bf ed 77 2a ab 4e 1b e6 e0 e8 d1 e8 9b 23 cb c0 37 7d 69 03 16 aa f8 7d 2f 5a 9c d0 39 0c c9 5f 3a ed 59 b8 a6 73 29 20 b8 a2 93 9e 91 76 dc 84 bf d3 b1 68 c5 e3 0a b5 11 65 79 94 Data Ascii: eqI/n'Ats&wTA;/yKY]5y^6yLJ24l"-`84[r\|+B0KyGaZtd;6KiUc\\rlx&cd>K9C}eokVw*N#7}i}/Z9_:Ys) vhey
2024-09-30 22:47:19 UTC	2591	IN	Data Raw: ac a4 61 2a e9 59 c9 05 9e 87 3a 99 bb ed 4c fe f7 68 ad f7 8f 4f 39 30 27 16 12 39 7d e9 e5 a4 dd e2 aa cf a5 bd 4f f5 85 84 a1 8a 98 f5 5f b1 f8 69 cd 71 d4 b2 76 23 23 bf 8e 5b bf 8d 5c f7 f9 31 6a f5 e0 ab c4 dc b8 55 68 d5 98 6c 5f b5 b5 06 0c 35 df b2 24 bf 22 e9 af f1 4b b4 5f b4 46 53 ba da d5 7e d2 b6 76 d3 ea ec 3b 48 b5 f7 e8 eb bc eb 4e 5d 02 96 57 4a e2 d2 3e 46 65 26 7d 1c 37 ad de f6 9e da 47 2e be 38 1c b6 da d0 6a ab 91 34 31 5b a9 65 23 03 79 bd 14 eb 7f b7 39 d7 fa f6 ad 46 91 22 25 95 72 fa b1 29 27 13 8e 8f fe 71 98 10 72 37 ce 60 bf f3 8c 29 af 9b f4 ed d8 d7 6d b4 cb d5 96 55 3f df 9e f3 b9 da b8 5c bf ee 63 04 0c bd 60 1d 32 3a 8e 61 6d 75 1f 63 8e 81 89 46 7b d6 92 a3 8b bd 1b fe 81 fe 87 31 cc 50 7e e0 c3 7f 35 ae d3 3c 5c c1 37 Data Ascii: a*Y:LhO90'9}O_iqv##[\1jUhl_5$"K_FS~v;HN]WJ>Fe&}7G.8j41[e#y9F"%r)'qr7`)mU?\c`2:amucF{1P~5<\7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49782	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:19 UTC	620	OUT	GET /fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://widget.trustpilot.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://widget.trustpilot.com/fonts/ubuntu.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:19 UTC	507	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 30480 Connection: close Last-Modified: Thu, 29 Sep 2022 09:41:44 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 30 Sep 2024 04:04:21 GMT ETag: "0e7e5f9d3a8ef121149827180b790b5c" X-Cache: Hit from cloudfront Via: 1.1 3431ec594cac61983aae2d9ffaf23980.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: _JqM2McIo3btbbMptsT0lWvkrkmbOTj7YdZjPxNlu_05g-d-n1GzJg== Age: 74502
2024-09-30 22:47:19 UTC	15877	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 77 10 00 12 00 00 00 01 21 ac 00 00 76 a9 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 84 54 1c 92 32 06 60 16 ad 56 00 82 00 08 84 14 09 8c 23 11 10 0a 82 8d 5c 81 f3 6e 0b 84 2c 00 12 bd 28 01 36 02 24 03 88 54 04 20 05 82 64 07 89 58 0c 83 39 5b 5b 11 71 06 6b b7 1d 57 7d 82 db 06 c0 f3 35 7b 5a 87 5f 30 dd e6 89 dc ad 16 28 c5 35 54 65 44 70 1e 40 54 f7 db 39 ce fe ff ff ff d4 a4 22 87 69 37 6d d6 19 03 f8 ef 3f cc a5 b1 80 32 2a 41 e9 23 29 1b 5c 8c b5 60 9a 03 44 15 04 89 2e c2 a7 65 a5 d8 b0 60 55 4d db 6d 70 87 09 83 e1 1c 5e d3 4f 34 79 2e 04 95 6b 2f 51 2e 04 d6 38 83 05 63 89 ba 61 be 2b 22 26 30 96 c0 0b 7c 7f ea da f0 98 a0 b8 df 82 29 7d 30 1f 31 27 30 13 b3 31 8d 7a cf c4 6c 4c Data Ascii: wOF2w!vT2`V#\n,(6$T dX9[[qkW}5{Z_0(5TeDp@T9"i7m?2*A#)\`D.e`UMmp^O4y.k/Q.8ca+"&0\|)}01'01zlL
2024-09-30 22:47:19 UTC	14603	IN	Data Raw: 54 2b 4f c6 c0 99 bd 3c 3b 3c 4a 5e 3d 5f 7a 8f fb 21 db f3 a3 d8 8a cd 34 81 1e 2f 70 be 61 c5 ae 15 c7 56 e0 3c ae c0 2a ab 8a 16 14 53 3a 2a 22 9c 24 9c 2f 49 2b 88 16 7b 1a 11 4c 56 8e 4b a9 a7 f4 22 db 34 a2 41 d1 97 7b 22 42 20 7c b4 89 70 24 22 11 f7 94 58 b1 30 c7 3a 8f 39 19 6e 50 0d c7 d8 cb cb b3 b3 43 6b 21 cd 8f c8 dd 6c 82 f8 81 ed f8 6f da 77 d7 f8 fd f6 7f 50 f8 ef 47 0c d7 f8 c7 7c 68 71 ef ae 9a 61 ae 76 32 06 75 a7 43 a1 9e 7a ff a9 82 63 29 19 9b e9 2d c5 44 dd e4 d6 6b 4c e5 16 8e d3 0c f1 7a 53 c9 c0 b2 8e cf 40 27 47 93 09 15 51 19 57 e8 b3 1a 1a 3b ec ec 8c a6 2c 9e d6 43 3d a3 35 0d 3b d3 d3 24 34 0c 0e b9 45 38 3b b5 b3 34 99 11 48 11 cf bd 11 00 ae 26 76 5d b6 7b b5 64 52 d7 5b 66 0c f7 3d 75 07 df 7f 66 0e 9e eb a4 79 ba 99 92 Data Ascii: T+O<;<J^=_z!4/paV<S:"$/I+{LVK"4A{"B \|p$"X0:9nPCk!lowPG\|hqav2uCzc)-DkLzS@'GQW;,C=5;$4E8;4H&v]{dR[f=ufy

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49786	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:32 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 36 44 2b 76 45 4f 62 43 77 45 61 7a 6d 6e 67 69 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 62 36 37 64 32 31 38 32 33 37 36 35 63 32 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 6D+vEObCwEazmngi.1Context: fb67d21823765c29
2024-09-30 22:47:32 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-30 22:47:32 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 36 44 2b 76 45 4f 62 43 77 45 61 7a 6d 6e 67 69 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 62 36 37 64 32 31 38 32 33 37 36 35 63 32 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 31 72 49 39 30 63 48 59 4d 39 77 73 2b 47 37 62 57 6f 45 38 64 46 67 67 65 5a 46 75 4a 71 6c 6d 34 2f 49 4d 42 5a 4c 6c 6d 6f 77 30 37 71 6a 68 4a 31 64 66 67 68 38 4b 71 58 34 72 4c 47 47 56 31 5a 4c 37 6b 56 61 7a 42 4f 61 53 66 55 71 44 57 57 44 4f 68 68 38 35 34 57 34 46 61 30 54 53 6f 69 53 4a 68 57 6d 52 6f 63 67 42 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 6D+vEObCwEazmngi.2Context: fb67d21823765c29<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAc1rI90cHYM9ws+G7bWoE8dFggeZFuJqlm4/IMBZLlmow07qjhJ1dfgh8KqX4rLGGV1ZL7kVazBOaSfUqDWWDOhh854W4Fa0TSoiSJhWmRocgB
2024-09-30 22:47:32 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 36 44 2b 76 45 4f 62 43 77 45 61 7a 6d 6e 67 69 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 62 36 37 64 32 31 38 32 33 37 36 35 63 32 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 6D+vEObCwEazmngi.3Context: fb67d21823765c29<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-30 22:47:32 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-30 22:47:32 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 55 52 51 6c 64 62 72 56 49 55 4f 56 30 64 57 70 2f 68 4c 6c 54 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: URQldbrVIUOV0dWp/hLlTQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49788	3.33.130.190	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:35 UTC	1173	OUT	GET /lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=2 HTTP/1.1 Host: infoguard-switzerland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: traffic_target=gd; caf_ipaddr=8.46.123.33; country=US; city=New%20York; lander_type=parkweb; __gsas=ID=57aed5ead6c1e5c0:T=1727736433:RT=1727736433:S=ALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A; pvisitor=52e1cc11-8f0b-4834-8095-9063c94ba631
2024-09-30 22:47:35 UTC	710	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=86400 Content-Type: text/html Date: Mon, 30 Sep 2024 22:47:35 GMT Server: openresty Set-Cookie: traffic_target=gd; Path=/; Max-Age=86400 Set-Cookie: caf_ipaddr=8.46.123.33; Path=/; Max-Age=86400 Set-Cookie: country=US; Path=/; Max-Age=86400 Set-Cookie: city=New%20York; Path=/; Max-Age=86400 Set-Cookie: lander_type=parkweb; Path=/; Max-Age=86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_YI7V8muussleUTMZwawGN0YQLgG4MJn9d7Hhd6JXG9vS8WjXuiB2MscXOPk0ce7uh6Xhf67GUvlSKfdp86fF5Q X-Content-Type-Options: nosniff Content-Length: 620 Connection: close
2024-09-30 22:47:35 UTC	476	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 2c 22 2f 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 26 67 64 61 62 70 3d 74 72 75 65 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 Data Ascii: <!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="data:,"/><script src="https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true"></script><script s
2024-09-30 22:47:35 UTC	144	IN	Data Raw: 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 70 61 72 6b 69 6e 67 2d 6c 61 6e 64 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 6d 61 69 6e 2e 65 66 39 30 61 36 32 37 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: ink href="https://img1.wsimg.com/parking-lander/static/css/main.ef90a627.css" rel="stylesheet"></head><body><div id="root"></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49792	104.22.75.216	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:36 UTC	657	OUT	GET /tag?o=5097926782615552&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363" If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
2024-09-30 22:47:36 UTC	422	IN	HTTP/1.1 304 Not Modified Date: Mon, 30 Sep 2024 22:47:36 GMT Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: "2588bdbfbd27eb6db5a16b2c065bb363" Last-Modified: Mon, 30 Sep 2024 22:18:41 GMT Vary: Origin X-Robots-Tag: noindex, nofollow Via: 1.1 google CF-Cache-Status: HIT Age: 1589 Server: cloudflare CF-RAY: 8cb7c1762ed98cc5-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49794	142.250.186.78	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:37 UTC	714	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:37 UTC	1037	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Content-Security-Policy: script-src 'nonce-uoY-Juza51zSM-gi7gSxgg' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none' Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 1560 Date: Mon, 30 Sep 2024 22:47:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:37 UTC	353	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 75 6f 59 2d 4a 75 7a 61 35 31 7a 53 4d 2d 67 69 37 67 53 78 67 67 22 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6e Data Ascii: <!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="uoY-Juza51zSM-gi7gSxgg">if (window.n
2024-09-30 22:47:37 UTC	1207	IN	Data Raw: 61 64 73 65 6e 73 65 2f 73 65 61 72 63 68 2f 61 64 73 2e 6a 73 22 3b 76 61 72 20 68 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 69 66 20 28 21 21 68 72 65 66 20 26 26 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 27 29 20 3e 20 30 29 29 20 7b 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 31 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 31 27 29 20 3e 20 30 29 20 7b 73 63 72 69 70 74 2e 73 72 63 20 2b 3d 20 27 3f 70 61 63 3d 31 27 3b 7d 20 65 6c 73 65 20 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 32 27 29 20 3e 20 30 20 7c 7c 20 Data Ascii: adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49793	142.250.186.78	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:37 UTC	2274	OUT	GET /afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=infoguard-switzerland.com&client=dp-godaddy1_xml&r=m&sct=ID%3D57aed5ead6c1e5c0%3AT%3D1727736433%3ART%3D1727736433%3AS%3DALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A&sc_status=6&rpbu=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DService%2BLabels%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D2&type=0&uiopt=true&swp=as-drid-oo-1885714186540894&q=Service%20Labels&afdt=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=9 [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:37 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Mon, 30 Sep 2024 22:47:37 GMT Expires: Mon, 30 Sep 2024 22:47:37 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-je_u51T3PXRpoWhfICGfBw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 22:47:37 UTC	583	IN	Data Raw: 36 62 32 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 6b2c<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-30 22:47:37 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-30 22:47:37 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-30 22:47:37 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-30 22:47:37 UTC	1390	IN	Data Raw: 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 38 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 70 78 3b 63 6f 6c 6f 72 3a 23 32 31 32 31 32 31 3b 7d 2e 73 69 32 39 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 70 61 64 Data Ascii: rink:1; flex-shrink:1;}.si28{font-family:Arial,arial,sans-serif;font-size:12px;line-height:14px;padding-left:5px;color:#212121;}.si29{font-family:Arial,arial,sans-serif;font-size:12px;line-height:20px;max-width:600px;margin-top:4px;padding-bottom:20px;pad
2024-09-30 22:47:37 UTC	1390	IN	Data Raw: 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 32 31 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 32 32 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 36 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 34 70 78 3b Data Ascii: der-radius:2px;font-family:Arial,arial,sans-serif;font-size:18px;padding-bottom:10px;padding-left:10px;padding-right:10px;padding-top:10px;color:#ffffff;}.si21:hover{text-decoration:underline;}.si22{padding-bottom:6px;padding-left:24px;padding-right:24px;
2024-09-30 22:47:37 UTC	1390	IN	Data Raw: 2e 61 64 62 61 64 67 65 43 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 3b 7d 2e 77 74 61 42 75 62 62 6c 65 54 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 63 6f 6c 6f 72 3a 23 36 36 36 36 36 36 3b 7d 2e 73 69 36 37 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 63 6f 6c 6f 72 3a 23 33 32 37 63 35 30 3b 7d 2e 73 69 32 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 7d 2e 73 72 53 70 61 63 65 43 68 61 72 7b 77 69 64 74 68 3a 33 70 78 3b 7d 2e 73 72 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 Data Ascii: .adbadgeContainer{margin-right:3px;}.wtaBubbleText{font-size:12px;color:#666666;}.si67{font-weight:400;font-family:sans-serif,arial,sans-serif;font-size:12px;line-height:12px;color:#327c50;}.si2{padding-right:3px;}.srSpaceChar{width:3px;}.srLink:hover{tex
2024-09-30 22:47:37 UTC	1390	IN	Data Raw: 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 20 64 61 74 61 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 31 22 3e 3c 64 69 76 20 69 64 3d 22 65 31 22 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 63 6c 69 63 6b 74 72 61 63 6b 65 64 41 64 5f 6a 73 20 73 69 31 30 31 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d Data Ascii: lign-items:stretch; align-items:stretch;" data-ad-container="1"><div id="e1" class="i_ div clicktrackedAd_js si101" style="-ms-flex-direction:column; -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:center; -
2024-09-30 22:47:37 UTC	1390	IN	Data Raw: 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 5f 20 73 69 32 37 20 61 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 61 63 6c 6b 3f 73 61 3d 4c 26 61 6d 70 3b 61 69 3d 44 43 68 63 53 45 77 69 4e 6d 63 58 75 33 2d 75 49 41 78 56 4a 47 4b 49 44 48 53 64 74 41 4e 51 59 41 42 41 49 47 67 4a 73 5a 51 26 61 6d 70 3b 63 6f 3d 31 26 61 6d 70 3b 61 73 65 3d 32 26 61 6d 70 3b 67 63 6c 69 64 3d 45 41 49 61 49 51 6f 62 43 68 4d 49 6a 5a 6e Data Ascii: -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;"><a class="p_ si27 a" href="https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwiNmcXu3-uIAxVJGKIDHSdtANQYABAIGgJsZQ&co=1&ase=2&gclid=EAIaIQobChMIjZn
2024-09-30 22:47:37 UTC	1390	IN	Data Raw: 41 45 67 4c 71 74 66 44 5f 42 77 45 26 61 6d 70 3b 6f 68 6f 73 74 26 61 6d 70 3b 63 69 64 3d 43 41 41 53 41 75 52 6f 26 61 6d 70 3b 73 69 67 3d 41 4f 44 36 34 5f 30 63 58 30 71 5f 78 79 68 47 67 51 4e 32 48 67 69 6c 41 56 48 6d 45 5a 30 50 6c 41 26 61 6d 70 3b 71 26 61 6d 70 3b 6e 69 73 3d 36 26 61 6d 70 3b 61 64 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 65 74 63 68 65 64 6e 70 2e 63 6f 6d 2f 69 6e 64 75 73 74 72 69 61 6c 2d 74 61 67 73 2d 70 70 63 2f 3f 67 61 64 5f 73 6f 75 72 63 65 25 33 44 35 22 20 61 74 74 72 69 62 75 74 69 6f 6e 73 72 63 3d 22 22 20 64 61 74 61 2d 73 65 74 2d 74 61 72 67 65 74 3d 22 31 22 20 74 61 72 67 65 74 3d 22 5f 74 6f 70 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 74 63 68 65 64 6e 70 2e 63 6f 6d 2f 3c 2f 61 3e 3c 64 69 76 20 63 6c Data Ascii: AEgLqtfD_BwE&ohost&cid=CAASAuRo&sig=AOD64_0cX0q_xyhGgQN2HgilAVHmEZ0PlA&q&nis=6&adurl=https://etchednp.com/industrial-tags-ppc/?gad_source%3D5" attributionsrc="" data-set-target="1" target="_top">https://www.etchednp.com/</a><div cl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49795	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:37 UTC	617	OUT	GET /px.gif?ch=1&e=0.10775175719051644 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:37 UTC	1231	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:37 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 01 Oct 2024 22:47:37 GMT Cache-Control: public, max-age=86400 Age: 1384571 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x5ATOTqFhmOix7PbktPVryaZQaYp5%2BbTuWDeurkq%2BRktxfdS%2BeLIfTofuv4ffev55zd0G3Xssd7E6wbu%2F2%2Bt2NuSwU49Q%2Bqo87jtTFXIA40wDwblCXbXwupGI%2Fg8J9eHFw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c17b5d7ac34e-EWR
2024-09-30 22:47:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49796	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:37 UTC	696	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3" If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
2024-09-30 22:47:37 UTC	1169	IN	HTTP/1.1 304 Not Modified Date: Mon, 30 Sep 2024 22:47:37 GMT Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 01 Oct 2024 22:47:37 GMT Cache-Control: public, max-age=86400 Age: 858098 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6uZxRnrdR18rkWOHnyS3YpDYycTcIw2S2ImNSKIV0eRIEx%2FR%2FfhEnFQJA53Ae2tBBWT97l%2FSXwHJ%2BzT1phC0pIS9BDhQ%2Bq183B4o1xVoxd6scWZmjKuUPbF7qWTagswxCg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c17b6db84207-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49797	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:37 UTC	1452	OUT	GET /stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DService%2BLabels%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D2&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:37 UTC	443	IN	HTTP/1.1 204 No Content Connection: close Cache-Control: no-store,no-cache Date: Mon, 30 Sep 2024 22:47:37 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 10f3c0984ab3eaba3e5720ed830a77b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: WFJVGyGZJO9y8vuuI274jJrszhoJIR-13GJ-Xw2q6bms-lGXgU3zpw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49798	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:37 UTC	1446	OUT	GET /stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DService%2BLabels%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D2&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:37 UTC	443	IN	HTTP/1.1 204 No Content Connection: close Cache-Control: no-store,no-cache Date: Mon, 30 Sep 2024 22:47:37 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 a2cac9c5f0e90f8b7fede4ac9aca75ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: 3RcNRsMkcKL4Kfz2fAScuYcS-4xOPNzxwp4bMalR0HpAVWnIHGt7HQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49800	142.250.186.78	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:38 UTC	764	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-30 22:47:39 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 30 Sep 2024 22:47:39 GMT Expires: Mon, 30 Sep 2024 22:47:39 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49803	142.250.184.228	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:38 UTC	678	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:39 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Mon, 30 Sep 2024 22:47:39 GMT Expires: Mon, 30 Sep 2024 22:47:39 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:39 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49809	100.20.12.218	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:40 UTC	565	OUT	OPTIONS /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://infoguard-switzerland.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:40 UTC	643	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:40 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=HVhydGrUiMxoIQR4F193CPUXH4YvjKhdQFhkBPM80imcVCohsEm4Drn8SkGzdRoy8uFB7cJT2JMMj2oboMoqrOyxw3zBW367hL0Wkr2pQBhwqd0e1tGh25QEK974; Expires=Mon, 07 Oct 2024 22:47:40 GMT; Path=/ Set-Cookie: AWSALBCORS=HVhydGrUiMxoIQR4F193CPUXH4YvjKhdQFhkBPM80imcVCohsEm4Drn8SkGzdRoy8uFB7cJT2JMMj2oboMoqrOyxw3zBW367hL0Wkr2pQBhwqd0e1tGh25QEK974; Expires=Mon, 07 Oct 2024 22:47:40 GMT; Path=/; SameSite=None; Secure access-control-allow-methods: POST access-control-allow-headers: content-type access-control-allow-origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49814	104.22.75.216	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:40 UTC	472	OUT	GET /tag?o=5097926782615552&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363" If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
2024-09-30 22:47:40 UTC	422	IN	HTTP/1.1 304 Not Modified Date: Mon, 30 Sep 2024 22:47:40 GMT Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: "2588bdbfbd27eb6db5a16b2c065bb363" Last-Modified: Mon, 30 Sep 2024 22:18:41 GMT Vary: Origin X-Robots-Tag: noindex, nofollow Via: 1.1 google CF-Cache-Status: HIT Age: 1593 Server: cloudflare CF-RAY: 8cb7c18d9d3443bb-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49811	142.250.184.228	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:40 UTC	678	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:40 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Mon, 30 Sep 2024 22:47:40 GMT Expires: Mon, 30 Sep 2024 22:47:40 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:40 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49815	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:40 UTC	372	OUT	GET /px.gif?ch=1&e=0.10775175719051644 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:40 UTC	1222	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:40 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 01 Oct 2024 22:47:40 GMT Cache-Control: public, max-age=86400 Age: 777794 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mWzqBzGY1DGwEk3F1qc%2FCZQYL4z5tIv6IOejFRIX1M9m0aHoUU0PaRTDGprEtwh1wR26m0NrMmr74JcYT2%2FitQVat2P6%2FukqZYAmTnSVEYBRLPaj5HKxd0ri64P8Aw82lA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c18e2dd1c352-EWR
2024-09-30 22:47:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49816	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:40 UTC	451	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3" If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
2024-09-30 22:47:40 UTC	1164	IN	HTTP/1.1 304 Not Modified Date: Mon, 30 Sep 2024 22:47:40 GMT Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 01 Oct 2024 22:47:40 GMT Cache-Control: public, max-age=86400 Age: 1427257 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZAOsL5BsCs%2B6flN71tmQo9I6zF10s4wKB6oQDekU8L5zj8VrJyQgVQvkSi5aP%2FQI1TCxqFcPgbPHj7CpIRvxREY7RB51Ic9bUhBPTqvqpsVZ6N46yrjRCZ5r1fqDIw39rg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c18e1f20195d-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49813	216.58.206.65	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:40 UTC	704	OUT	GET /svg/left_chevron_icon.svg?c=%23757575 HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:40 UTC	752	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 147 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 13:14:34 GMT Expires: Tue, 01 Oct 2024 12:14:34 GMT Cache-Control: public, max-age=82800 Age: 34386 Last-Modified: Fri, 26 May 2023 17:39:18 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:40 UTC	147	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 37 35 37 35 37 35 27 20 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 34 31 20 35 2e 34 31 4c 31 35 20 34 4c 37 20 31 32 4c 31 35 20 32 30 4c 31 36 2e 34 31 20 31 38 2e 35 39 4c 39 2e 38 33 20 31 32 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg fill='#757575' width="24" height="24" xmlns="http://www.w3.org/2000/svg"><path d="M16.41 5.41L15 4L7 12L15 20L16.41 18.59L9.83 12"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49812	216.58.206.65	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:40 UTC	705	OUT	GET /svg/right_chevron_icon.svg?c=%23757575 HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:40 UTC	752	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 163 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 13:14:34 GMT Expires: Tue, 01 Oct 2024 12:14:34 GMT Cache-Control: public, max-age=82800 Age: 34386 Last-Modified: Fri, 26 May 2023 17:37:10 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:40 UTC	163	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 37 35 37 35 37 35 27 20 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 37 2e 35 39 30 30 33 20 31 38 2e 35 39 4c 39 2e 30 30 30 30 33 20 32 30 4c 31 37 20 31 32 4c 39 2e 30 30 30 30 33 20 34 4c 37 2e 35 39 30 30 33 20 35 2e 34 31 4c 31 34 2e 31 37 20 31 32 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg fill='#757575' width="24" height="24" xmlns="http://www.w3.org/2000/svg"><path d="M7.59003 18.59L9.00003 20L17 12L9.00003 4L7.59003 5.41L14.17 12"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49823	100.20.12.218	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:41 UTC	662	OUT	POST /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive Content-Length: 909 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://infoguard-switzerland.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:41 UTC	909	OUT	Data Raw: 7b 22 65 76 65 6e 74 54 79 70 65 22 3a 22 4b 45 59 57 4f 52 44 5f 43 4c 49 43 4b 22 2c 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 34 2d 30 39 2d 33 30 54 32 32 3a 34 37 3a 33 38 2e 33 38 39 5a 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 69 6e 66 6f 67 75 61 72 64 2d 73 77 69 74 7a 65 72 6c 61 6e 64 2e 63 6f 6d 22 2c 22 64 6f 6d 61 69 6e 53 74 61 74 75 73 22 3a 22 41 43 54 49 56 45 22 2c 22 73 79 73 74 65 6d 22 3a 22 50 57 22 2c 22 64 61 74 61 53 6f 75 72 63 65 22 3a 22 49 4e 56 45 4e 54 4f 52 59 22 2c 22 69 73 54 75 72 6e 4b 65 79 52 65 73 65 6c 6c 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 43 6e 61 6d 65 22 3a 66 61 6c 73 65 2c 22 64 72 69 64 22 3a 22 61 73 2d 64 72 69 64 2d 6f 6f 2d 31 38 38 35 37 31 34 31 38 36 35 34 30 38 39 34 22 2c 22 70 75 62 49 64 22 3a Data Ascii: {"eventType":"KEYWORD_CLICK","createdAt":"2024-09-30T22:47:38.389Z","domain":"infoguard-switzerland.com","domainStatus":"ACTIVE","system":"PW","dataSource":"INVENTORY","isTurnKeyReseller":false,"isCname":false,"drid":"as-drid-oo-1885714186540894","pubId":
2024-09-30 22:47:41 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:41 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=+h05K0dlsCEwPhPeyiZUEvKu47C+clZ6GOYGxOF4TnzlDTjo/getJGVs3caiHn0/a9FKYIHQpe0IIzBf9td2v46UBcS4/src3EK1pmqazPOy7w136rJAr8bNE022; Expires=Mon, 07 Oct 2024 22:47:41 GMT; Path=/ Set-Cookie: AWSALBCORS=+h05K0dlsCEwPhPeyiZUEvKu47C+clZ6GOYGxOF4TnzlDTjo/getJGVs3caiHn0/a9FKYIHQpe0IIzBf9td2v46UBcS4/src3EK1pmqazPOy7w136rJAr8bNE022; Expires=Mon, 07 Oct 2024 22:47:41 GMT; Path=/; SameSite=None; Secure access-control-allow-origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49825	142.250.186.164	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:41 UTC	437	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:41 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Mon, 30 Sep 2024 22:47:41 GMT Expires: Mon, 30 Sep 2024 22:47:41 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:41 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49828	142.250.184.225	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:41 UTC	463	OUT	GET /svg/left_chevron_icon.svg?c=%23757575 HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:41 UTC	752	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 147 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 13:14:34 GMT Expires: Tue, 01 Oct 2024 12:14:34 GMT Cache-Control: public, max-age=82800 Age: 34387 Last-Modified: Fri, 26 May 2023 17:39:18 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:41 UTC	147	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 37 35 37 35 37 35 27 20 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 34 31 20 35 2e 34 31 4c 31 35 20 34 4c 37 20 31 32 4c 31 35 20 32 30 4c 31 36 2e 34 31 20 31 38 2e 35 39 4c 39 2e 38 33 20 31 32 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg fill='#757575' width="24" height="24" xmlns="http://www.w3.org/2000/svg"><path d="M16.41 5.41L15 4L7 12L15 20L16.41 18.59L9.83 12"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49827	142.250.184.225	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:41 UTC	464	OUT	GET /svg/right_chevron_icon.svg?c=%23757575 HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:41 UTC	752	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 163 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 13:14:34 GMT Expires: Tue, 01 Oct 2024 12:14:34 GMT Cache-Control: public, max-age=82800 Age: 34387 Last-Modified: Fri, 26 May 2023 17:37:10 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:41 UTC	163	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 37 35 37 35 37 35 27 20 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 37 2e 35 39 30 30 33 20 31 38 2e 35 39 4c 39 2e 30 30 30 30 33 20 32 30 4c 31 37 20 31 32 4c 39 2e 30 30 30 30 33 20 34 4c 37 2e 35 39 30 30 33 20 35 2e 34 31 4c 31 34 2e 31 37 20 31 32 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg fill='#757575' width="24" height="24" xmlns="http://www.w3.org/2000/svg"><path d="M7.59003 18.59L9.00003 20L17 12L9.00003 4L7.59003 5.41L14.17 12"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49831	100.20.12.218	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:42 UTC	748	OUT	GET /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pwvisitor=1bdf425c-ee62-4320-9019-676b75b07b0e; AWSALB=kmkbEGGU2+8akPBR7cCHwDAmUsXQDGmDzqET54/n6FnNYq94IpTC6RsrW5IbiSd3vIvOuJX69bKVvwWn6GT/pVs+WgCaAmEXZ6ViQ1Js8ovvcdSaqbdoSOx5TV57; AWSALBCORS=kmkbEGGU2+8akPBR7cCHwDAmUsXQDGmDzqET54/n6FnNYq94IpTC6RsrW5IbiSd3vIvOuJX69bKVvwWn6GT/pVs+WgCaAmEXZ6ViQ1Js8ovvcdSaqbdoSOx5TV57; market=en-US; currency=USD; AKA_A2=A
2024-09-30 22:47:42 UTC	531	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:42 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=y3AvUpNfWn/LpfaqThQvnuqspMxGCUZFA9zs43kmZKQ690xgrGpx2JccQQvNuC5GMGZ2MVdKnp8EvbxZMSlrgl1q5hUkYgN0RYgO8oXmfYB2qsLSkfUjUlJpNcN4; Expires=Mon, 07 Oct 2024 22:47:42 GMT; Path=/ Set-Cookie: AWSALBCORS=y3AvUpNfWn/LpfaqThQvnuqspMxGCUZFA9zs43kmZKQ690xgrGpx2JccQQvNuC5GMGZ2MVdKnp8EvbxZMSlrgl1q5hUkYgN0RYgO8oXmfYB2qsLSkfUjUlJpNcN4; Expires=Mon, 07 Oct 2024 22:47:42 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49787	3.33.130.190	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:44 UTC	1180	OUT	GET /lander?query=Display+Board+Software&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1 HTTP/1.1 Host: infoguard-switzerland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: traffic_target=gd; caf_ipaddr=8.46.123.33; country=US; city=New%20York; lander_type=parkweb; __gsas=ID=57aed5ead6c1e5c0:T=1727736433:RT=1727736433:S=ALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A; pvisitor=52e1cc11-8f0b-4834-8095-9063c94ba631
2024-09-30 22:47:44 UTC	710	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=86400 Content-Type: text/html Date: Mon, 30 Sep 2024 22:47:44 GMT Server: openresty Set-Cookie: traffic_target=gd; Path=/; Max-Age=86400 Set-Cookie: caf_ipaddr=8.46.123.33; Path=/; Max-Age=86400 Set-Cookie: country=US; Path=/; Max-Age=86400 Set-Cookie: city=New%20York; Path=/; Max-Age=86400 Set-Cookie: lander_type=parkweb; Path=/; Max-Age=86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_bDHnypumQSRK09hwF9of6xJZCK3r15KsKV3UKcuuBZobKTGohvx6bgZdujxkuUVfCi+kdKxo7oMiW9V9mjO15Q X-Content-Type-Options: nosniff Content-Length: 620 Connection: close
2024-09-30 22:47:44 UTC	476	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 2c 22 2f 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 26 67 64 61 62 70 3d 74 72 75 65 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 Data Ascii: <!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="data:,"/><script src="https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true"></script><script s
2024-09-30 22:47:44 UTC	144	IN	Data Raw: 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 70 61 72 6b 69 6e 67 2d 6c 61 6e 64 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 6d 61 69 6e 2e 65 66 39 30 61 36 32 37 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: ink href="https://img1.wsimg.com/parking-lander/static/css/main.ef90a627.css" rel="stylesheet"></head><body><div id="root"></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49837	104.22.75.216	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:44 UTC	657	OUT	GET /tag?o=5097926782615552&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363" If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
2024-09-30 22:47:45 UTC	422	IN	HTTP/1.1 304 Not Modified Date: Mon, 30 Sep 2024 22:47:45 GMT Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: "2588bdbfbd27eb6db5a16b2c065bb363" Last-Modified: Mon, 30 Sep 2024 22:18:41 GMT Vary: Origin X-Robots-Tag: noindex, nofollow Via: 1.1 google CF-Cache-Status: HIT Age: 1598 Server: cloudflare CF-RAY: 8cb7c1aa2b33c445-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49839	142.250.186.78	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:45 UTC	2301	OUT	GET /afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=infoguard-switzerland.com&client=dp-godaddy1_xml&r=m&sct=ID%3D57aed5ead6c1e5c0%3AT%3D1727736433%3ART%3D1727736433%3AS%3DALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A&sc_status=6&rpbu=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DDisplay%2BBoard%2BSoftware%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&type=0&uiopt=true&swp=as-drid-oo-1885714186540894&q=Display%20Board%20Software&afdt=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format= [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:45 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Mon, 30 Sep 2024 22:47:45 GMT Expires: Mon, 30 Sep 2024 22:47:45 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-EXMBM5aNtRMGl2iCPf5ANQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 22:47:45 UTC	583	IN	Data Raw: 37 30 34 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 704e<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-30 22:47:45 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-30 22:47:45 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-30 22:47:45 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-30 22:47:45 UTC	1390	IN	Data Raw: 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 32 38 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 70 78 3b 63 6f 6c 6f 72 3a 23 32 31 32 31 32 31 3b 7d 2e 73 69 32 39 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 70 61 64 Data Ascii: rink:1; flex-shrink:1;}.si28{font-family:Arial,arial,sans-serif;font-size:12px;line-height:14px;padding-left:5px;color:#212121;}.si29{font-family:Arial,arial,sans-serif;font-size:12px;line-height:20px;max-width:600px;margin-top:4px;padding-bottom:20px;pad
2024-09-30 22:47:45 UTC	1390	IN	Data Raw: 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 7d 2e 73 69 32 31 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 32 32 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 36 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 34 70 78 3b Data Ascii: der-radius:2px;font-family:Arial,arial,sans-serif;font-size:18px;padding-bottom:10px;padding-left:10px;padding-right:10px;padding-top:10px;color:#ffffff;}.si21:hover{text-decoration:underline;}.si22{padding-bottom:6px;padding-left:24px;padding-right:24px;
2024-09-30 22:47:45 UTC	1390	IN	Data Raw: 2e 61 64 62 61 64 67 65 43 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 3b 7d 2e 77 74 61 42 75 62 62 6c 65 54 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 63 6f 6c 6f 72 3a 23 36 36 36 36 36 36 3b 7d 2e 73 69 36 37 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 63 6f 6c 6f 72 3a 23 33 32 37 63 35 30 3b 7d 2e 73 69 32 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 7d 2e 73 72 53 70 61 63 65 43 68 61 72 7b 77 69 64 74 68 3a 33 70 78 3b 7d 2e 73 72 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 Data Ascii: .adbadgeContainer{margin-right:3px;}.wtaBubbleText{font-size:12px;color:#666666;}.si67{font-weight:400;font-family:sans-serif,arial,sans-serif;font-size:12px;line-height:12px;color:#327c50;}.si2{padding-right:3px;}.srSpaceChar{width:3px;}.srLink:hover{tex
2024-09-30 22:47:45 UTC	1390	IN	Data Raw: 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 20 64 61 74 61 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 31 22 3e 3c 64 69 76 20 69 64 3d 22 65 31 22 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 63 6c 69 63 6b 74 72 61 63 6b 65 64 41 64 5f 6a 73 20 73 69 31 30 31 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d Data Ascii: lign-items:stretch; align-items:stretch;" data-ad-container="1"><div id="e1" class="i_ div clicktrackedAd_js si101" style="-ms-flex-direction:column; -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:center; -
2024-09-30 22:47:45 UTC	1390	IN	Data Raw: 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 5f 20 73 69 32 37 20 61 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 61 63 6c 6b 3f 73 61 3d 4c 26 61 6d 70 3b 61 69 3d 44 43 68 63 53 45 77 6a 2d 30 62 50 79 33 2d 75 49 41 78 58 66 55 4a 45 46 48 56 71 77 45 42 4d 59 41 42 41 43 47 67 4a 73 63 67 26 61 6d 70 3b 63 6f 3d 31 26 61 6d 70 3b 61 73 65 3d 32 26 61 6d 70 3b 67 63 6c 69 64 3d 45 41 49 61 49 51 6f 62 43 68 4d 49 5f 74 47 Data Ascii: -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;"><a class="p_ si27 a" href="https://www.googleadservices.com/pagead/aclk?sa=L&ai=DChcSEwj-0bPy3-uIAxXfUJEFHVqwEBMYABACGgJscg&co=1&ase=2&gclid=EAIaIQobChMI_tG
2024-09-30 22:47:45 UTC	1390	IN	Data Raw: 42 41 54 45 41 41 59 41 53 41 41 45 67 49 39 52 66 44 5f 42 77 45 26 61 6d 70 3b 6f 68 6f 73 74 26 61 6d 70 3b 63 69 64 3d 43 41 41 53 41 75 52 6f 26 61 6d 70 3b 73 69 67 3d 41 4f 44 36 34 5f 33 62 4e 30 66 36 32 38 73 44 4f 63 52 51 4e 79 71 59 6d 79 74 68 38 74 57 41 69 77 26 61 6d 70 3b 71 26 61 6d 70 3b 6e 69 73 3d 36 26 61 6d 70 3b 61 64 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 64 69 73 63 6f 76 65 72 2e 69 6e 74 75 69 66 61 63 65 2e 63 6f 6d 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 25 33 44 61 64 77 6f 72 64 73 25 32 36 75 74 6d 5f 6d 65 64 69 75 6d 25 33 44 63 70 63 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 42 52 41 4e 44 5f 43 61 6d 70 61 69 67 6e 25 32 36 75 74 6d 5f 74 65 72 6d 25 33 44 49 6e 74 75 69 66 61 63 65 5f 73 6f 6c 75 74 69 6f 6e 73 Data Ascii: BATEAAYASAAEgI9RfD_BwE&ohost&cid=CAASAuRo&sig=AOD64_3bN0f628sDOcRQNyqYmyth8tWAiw&q&nis=6&adurl=https://discover.intuiface.com/?utm_source%3Dadwords%26utm_medium%3Dcpc%26utm_campaign%3DBRAND_Campaign%26utm_term%3DIntuiface_solutions

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49840	142.250.186.78	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:45 UTC	764	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-30 22:47:45 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 30 Sep 2024 22:47:45 GMT Expires: Mon, 30 Sep 2024 22:47:45 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49842	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:45 UTC	1461	OUT	GET /stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DDisplay%2BBoard%2BSoftware%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:45 UTC	443	IN	HTTP/1.1 204 No Content Connection: close Cache-Control: no-store,no-cache Date: Mon, 30 Sep 2024 22:47:44 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 944dc31277adc1021b0776fe818f07f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: eQGCGd6bCCAy9diD-UDumlzRSfA88-Ycl09NNMzKick8RYwz4VcEJQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49841	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:45 UTC	1455	OUT	GET /stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DDisplay%2BBoard%2BSoftware%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:45 UTC	443	IN	HTTP/1.1 204 No Content Connection: close Cache-Control: no-store,no-cache Date: Mon, 30 Sep 2024 22:47:44 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 30e954298424aa69c035e25834574742.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: 85GAEhEetHT8hzF3VsK--s7vPJN5XgqfnVlc4aomtAf2UxShoyUKVA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49845	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:45 UTC	617	OUT	GET /px.gif?ch=1&e=0.18254414261951002 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:46 UTC	1225	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 01 Oct 2024 22:47:46 GMT Cache-Control: public, max-age=86400 Age: 1009097 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PK9xmXBTJTx9tc2MC3AW5n%2B44ecDV6nGJGWl2FLTRxQXY%2FENu003YT%2F70uOSd2MmRs9jxmU6b7PZDWwSzqoFjml%2BkiYAHribRd8RGuVa4SgqqOs2b4ZDziPJcw6fPNBS7A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c1b099ff19db-EWR
2024-09-30 22:47:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49844	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:45 UTC	696	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3" If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
2024-09-30 22:47:46 UTC	1170	IN	HTTP/1.1 304 Not Modified Date: Mon, 30 Sep 2024 22:47:46 GMT Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 01 Oct 2024 22:47:46 GMT Cache-Control: public, max-age=86400 Age: 1381551 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fgk1e2%2BV6eSbnIoLZm2aSrQ5XeTj1DtpazT2gbzJfeMt8jxpzRkyRGf7wEJXNYBqXv%2F3%2Bpr2hUO0HIAId9%2Fj8z1DvNGFN5ejY88Gaq9zsVNL424joPbe%2BBcbE54kjPOXhQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c1b09b7ec332-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49846	104.22.75.216	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:45 UTC	472	OUT	GET /tag?o=5097926782615552&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363" If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
2024-09-30 22:47:46 UTC	422	IN	HTTP/1.1 304 Not Modified Date: Mon, 30 Sep 2024 22:47:46 GMT Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: "2588bdbfbd27eb6db5a16b2c065bb363" Last-Modified: Mon, 30 Sep 2024 22:18:41 GMT Vary: Origin X-Robots-Tag: noindex, nofollow Via: 1.1 google CF-Cache-Status: HIT Age: 1599 Server: cloudflare CF-RAY: 8cb7c1b0acff0f49-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49847	142.250.186.78	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:46 UTC	764	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-30 22:47:46 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 30 Sep 2024 22:47:46 GMT Expires: Mon, 30 Sep 2024 22:47:46 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49850	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:46 UTC	451	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3" If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
2024-09-30 22:47:46 UTC	1174	IN	HTTP/1.1 304 Not Modified Date: Mon, 30 Sep 2024 22:47:46 GMT Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 01 Oct 2024 22:47:46 GMT Cache-Control: public, max-age=86400 Age: 1383000 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fkxAtUVBcUyYSKbIo3e0E5%2BHarND2G0jn%2Bt%2BSUKruOOk23aZEBAKb8uePo2CoaDqzuo%2BhqY2jSh%2BUJAxazS3jHvlt7AfffvNzZ2vFRFf3ghFX7dlypFHeFEe%2B%2FSqBcpUNQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c1b4dbf815d7-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49849	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:46 UTC	372	OUT	GET /px.gif?ch=1&e=0.18254414261951002 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:46 UTC	1220	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 01 Oct 2024 22:47:46 GMT Cache-Control: public, max-age=86400 Age: 777798 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GWtmZQloGooWLkJnV6eOGU3BlxWRIa2nKVoK3uxYEyyKnSWZp8sRkS3E71H76CAX8OR2NgK8hP3CAtesEuQhcYgEv%2B1l7tGN0caVP6sPkZZ1BKfACdNF3zDH%2BqiHgPVLaw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c1b4ebe218cc-EWR
2024-09-30 22:47:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49848	100.20.12.218	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:46 UTC	565	OUT	OPTIONS /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://infoguard-switzerland.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:46 UTC	643	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:46 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=KGFdi49SH8vo2z8NZhydjLk3REJwIVdGJzIEE/A4EesnyBbtaQyaIxdKW8LKH5oPRC/V1W1Hydvhsp6yf5oc0457g3BPcd2EA1Hom72xsG/R2V5BStuQMvu8ElF3; Expires=Mon, 07 Oct 2024 22:47:46 GMT; Path=/ Set-Cookie: AWSALBCORS=KGFdi49SH8vo2z8NZhydjLk3REJwIVdGJzIEE/A4EesnyBbtaQyaIxdKW8LKH5oPRC/V1W1Hydvhsp6yf5oc0457g3BPcd2EA1Hom72xsG/R2V5BStuQMvu8ElF3; Expires=Mon, 07 Oct 2024 22:47:46 GMT; Path=/; SameSite=None; Secure access-control-allow-methods: POST access-control-allow-headers: content-type access-control-allow-origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49851	100.20.12.218	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:47 UTC	662	OUT	POST /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive Content-Length: 916 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://infoguard-switzerland.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:47 UTC	916	OUT	Data Raw: 7b 22 65 76 65 6e 74 54 79 70 65 22 3a 22 4b 45 59 57 4f 52 44 5f 43 4c 49 43 4b 22 2c 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 34 2d 30 39 2d 33 30 54 32 32 3a 34 37 3a 34 34 2e 38 31 39 5a 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 69 6e 66 6f 67 75 61 72 64 2d 73 77 69 74 7a 65 72 6c 61 6e 64 2e 63 6f 6d 22 2c 22 64 6f 6d 61 69 6e 53 74 61 74 75 73 22 3a 22 41 43 54 49 56 45 22 2c 22 73 79 73 74 65 6d 22 3a 22 50 57 22 2c 22 64 61 74 61 53 6f 75 72 63 65 22 3a 22 49 4e 56 45 4e 54 4f 52 59 22 2c 22 69 73 54 75 72 6e 4b 65 79 52 65 73 65 6c 6c 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 43 6e 61 6d 65 22 3a 66 61 6c 73 65 2c 22 64 72 69 64 22 3a 22 61 73 2d 64 72 69 64 2d 6f 6f 2d 31 38 38 35 37 31 34 31 38 36 35 34 30 38 39 34 22 2c 22 70 75 62 49 64 22 3a Data Ascii: {"eventType":"KEYWORD_CLICK","createdAt":"2024-09-30T22:47:44.819Z","domain":"infoguard-switzerland.com","domainStatus":"ACTIVE","system":"PW","dataSource":"INVENTORY","isTurnKeyReseller":false,"isCname":false,"drid":"as-drid-oo-1885714186540894","pubId":
2024-09-30 22:47:47 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:47 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=WOgBeJxH2+proOOGszdvOc4Bb44KdNryfV+wvy9VPmJ52U3rADGLDnMDxnlMFZCRHa/oQG1K1WOInIkz56vIGlp3jW9Z+qlQrMb6+TQaGEuUGIt3mVn3xQItiKCS; Expires=Mon, 07 Oct 2024 22:47:47 GMT; Path=/ Set-Cookie: AWSALBCORS=WOgBeJxH2+proOOGszdvOc4Bb44KdNryfV+wvy9VPmJ52U3rADGLDnMDxnlMFZCRHa/oQG1K1WOInIkz56vIGlp3jW9Z+qlQrMb6+TQaGEuUGIt3mVn3xQItiKCS; Expires=Mon, 07 Oct 2024 22:47:47 GMT; Path=/; SameSite=None; Secure access-control-allow-origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49852	100.20.12.218	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:48 UTC	748	OUT	GET /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pwvisitor=1bdf425c-ee62-4320-9019-676b75b07b0e; market=en-US; currency=USD; AKA_A2=A; AWSALB=y3AvUpNfWn/LpfaqThQvnuqspMxGCUZFA9zs43kmZKQ690xgrGpx2JccQQvNuC5GMGZ2MVdKnp8EvbxZMSlrgl1q5hUkYgN0RYgO8oXmfYB2qsLSkfUjUlJpNcN4; AWSALBCORS=y3AvUpNfWn/LpfaqThQvnuqspMxGCUZFA9zs43kmZKQ690xgrGpx2JccQQvNuC5GMGZ2MVdKnp8EvbxZMSlrgl1q5hUkYgN0RYgO8oXmfYB2qsLSkfUjUlJpNcN4
2024-09-30 22:47:48 UTC	531	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:48 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=FZp5sfFv7XfNwGYKN8Pqec39DYOHYA8UXGo/O8/zTamAuRqEyamaCwA02dDeTQ7lAhvxzI2ewYvDa4vkmt38C3wUJXC12fktAO6pWa/uXmc5Cajf1HnRxnnsiAQq; Expires=Mon, 07 Oct 2024 22:47:48 GMT; Path=/ Set-Cookie: AWSALBCORS=FZp5sfFv7XfNwGYKN8Pqec39DYOHYA8UXGo/O8/zTamAuRqEyamaCwA02dDeTQ7lAhvxzI2ewYvDa4vkmt38C3wUJXC12fktAO6pWa/uXmc5Cajf1HnRxnnsiAQq; Expires=Mon, 07 Oct 2024 22:47:48 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49835	3.33.130.190	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:50 UTC	1185	OUT	GET /lander?query=Custom+Folders+with+Pockets&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1 HTTP/1.1 Host: infoguard-switzerland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: traffic_target=gd; caf_ipaddr=8.46.123.33; country=US; city=New%20York; lander_type=parkweb; __gsas=ID=57aed5ead6c1e5c0:T=1727736433:RT=1727736433:S=ALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A; pvisitor=52e1cc11-8f0b-4834-8095-9063c94ba631
2024-09-30 22:47:50 UTC	710	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=86400 Content-Type: text/html Date: Mon, 30 Sep 2024 22:47:50 GMT Server: openresty Set-Cookie: traffic_target=gd; Path=/; Max-Age=86400 Set-Cookie: caf_ipaddr=8.46.123.33; Path=/; Max-Age=86400 Set-Cookie: country=US; Path=/; Max-Age=86400 Set-Cookie: city=New%20York; Path=/; Max-Age=86400 Set-Cookie: lander_type=parkweb; Path=/; Max-Age=86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_GdQfT9DPMl8h4uzKXbz9V2DgbDiuJ89i13uGTkKuvR48Dvre4rwaRkEEdxf0j0G6naAOGPC5sWEWiSOal8xpQA X-Content-Type-Options: nosniff Content-Length: 620 Connection: close
2024-09-30 22:47:50 UTC	476	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 2c 22 2f 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 26 67 64 61 62 70 3d 74 72 75 65 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 Data Ascii: <!doctype html><html lang="en"><head><meta charset="UTF-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="icon" href="data:,"/><script src="https://www.google.com/adsense/domains/caf.js?abp=1&gdabp=true"></script><script s
2024-09-30 22:47:50 UTC	144	IN	Data Raw: 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 70 61 72 6b 69 6e 67 2d 6c 61 6e 64 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 6d 61 69 6e 2e 65 66 39 30 61 36 32 37 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: ink href="https://img1.wsimg.com/parking-lander/static/css/main.ef90a627.css" rel="stylesheet"></head><body><div id="root"></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49856	104.22.75.216	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:51 UTC	657	OUT	GET /tag?o=5097926782615552&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363" If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
2024-09-30 22:47:51 UTC	422	IN	HTTP/1.1 304 Not Modified Date: Mon, 30 Sep 2024 22:47:51 GMT Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: "2588bdbfbd27eb6db5a16b2c065bb363" Last-Modified: Mon, 30 Sep 2024 22:18:41 GMT Vary: Origin X-Robots-Tag: noindex, nofollow Via: 1.1 google CF-Cache-Status: HIT Age: 1604 Server: cloudflare CF-RAY: 8cb7c1d0bc645e6d-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49858	142.250.186.78	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:51 UTC	2322	OUT	GET /afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=infoguard-switzerland.com&client=dp-godaddy1_xml&r=m&sct=ID%3D57aed5ead6c1e5c0%3AT%3D1727736433%3ART%3D1727736433%3AS%3DALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A&sc_status=6&rpbu=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DCustom%2BFolders%2Bwith%2BPockets%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&type=0&uiopt=true&swp=as-drid-oo-1885714186540894&q=Custom%20Folders%20with%20Pockets&afdt=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72 [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:51 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Mon, 30 Sep 2024 22:47:51 GMT Expires: Mon, 30 Sep 2024 22:47:51 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-bg0aoqbsGuC391XZfsPiSA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 22:47:51 UTC	583	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 8000<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-09-30 22:47:51 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-09-30 22:47:51 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2024-09-30 22:47:51 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2024-09-30 22:47:51 UTC	1390	IN	Data Raw: 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 36 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 36 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 32 70 78 3b 63 6f 6c 6f 72 3a 23 33 43 34 30 34 33 3b 7d 2e 73 69 31 32 38 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 62 65 62 65 62 3b 68 65 69 67 68 74 3a 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 Data Ascii: -serif;font-size:16px;line-height:24px;padding-bottom:22px;padding-left:16px;padding-right:16px;padding-top:22px;color:#3C4043;}.si128{background-color:#ebebeb;height:0px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-sh
2024-09-30 22:47:51 UTC	1390	IN	Data Raw: 6e 6f 64 65 5f 31 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 63 75 73 74 6f 6d 5f 6e 6f 64 65 5f 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 63 75 73 74 6f 6d 5f 6e 6f 64 65 5f 34 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 Data Ascii: node_1{margin-bottom:8px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.custom_node_2{width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.custom_node_4{height:100%;widt
2024-09-30 22:47:51 UTC	1390	IN	Data Raw: 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 79 5f 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 64 64 64 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 Data Ascii: rgin-top:24px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.y_{font-weight:400;background-color:#ffffff;border:1px solid #dddddd;font-family:sans-serif,arial,sans-serif;font-size:12px;line-height:12px;padding
2024-09-30 22:47:51 UTC	1390	IN	Data Raw: 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 Data Ascii: ion:column; -webkit-box-orient:vertical; -webkit-flex-direction:column; flex-direction:column;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:flex-start; justify-content:flex-start;-ms-flex-align:stretch; -webkit-box-align:stretch; -w
2024-09-30 22:47:51 UTC	1390	IN	Data Raw: 72 20 73 70 61 6e 22 3e 53 70 6f 6e 73 6f 72 65 64 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 76 69 73 69 62 6c 65 5f 75 72 6c 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 63 75 73 74 6f 6d 5f 6e 6f 64 65 5f 34 20 76 5f 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 Data Ascii: r span">Sponsored</span></div><div class="i_ div visible_url" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div class="i_ div custom_node_4 v_" style="-ms-flex-direction:row; -webkit-box-or
2024-09-30 22:47:51 UTC	1390	IN	Data Raw: 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 63 75 73 74 6f 6d 5f 6e 6f 64 65 5f 38 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 Data Ascii: ms-flex-pack:center; -webkit-box-pack:center; -webkit-justify-content:center; justify-content:center;-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;"><div class="i_ div custom_node_8" style="-ms-flex-direct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49859	142.250.186.78	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:51 UTC	764	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-30 22:47:51 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 30 Sep 2024 22:47:51 GMT Expires: Mon, 30 Sep 2024 22:47:51 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49860	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:51 UTC	1468	OUT	GET /stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DCustom%2BFolders%2Bwith%2BPockets%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:51 UTC	443	IN	HTTP/1.1 204 No Content Connection: close Cache-Control: no-store,no-cache Date: Mon, 30 Sep 2024 22:47:51 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 934706f40ffde6f857deae8d024c1192.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: czYjClQY3jtgSApsVBETktUzQZKA170cLZX8Kp8MjaFfrG9BhITqmQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49861	52.222.236.107	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:51 UTC	1462	OUT	GET /stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DCustom%2BFolders%2Bwith%2BPockets%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1 Host: widget.trustpilot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:51 UTC	443	IN	HTTP/1.1 204 No Content Connection: close Cache-Control: no-store,no-cache Date: Mon, 30 Sep 2024 22:47:50 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 8a6f67a9421de326f43e9107751b580e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: VEJj66hJkQQZ204c0qynQHmlgLKjd9WuE8s3DXpgTSaxJmDxNFrjoQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49862	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:51 UTC	616	OUT	GET /px.gif?ch=1&e=0.4732434893340589 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:51 UTC	1226	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 01 Oct 2024 22:47:51 GMT Cache-Control: public, max-age=86400 Age: 778976 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2BohLnSAaP7i57m4S6sBn%2F6o1aG9jjuUdakcSRFMnd9kapFyPafAXGRiuQGaMqONQb1wnTSei7hfOaRiOXxJNbrOOb%2FVvaZ%2FFaehgoOe26GbB0LryqB%2F2oxuPhG2GrJZgw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c1d4ad26433d-EWR
2024-09-30 22:47:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49863	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:51 UTC	696	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3" If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
2024-09-30 22:47:51 UTC	1166	IN	HTTP/1.1 304 Not Modified Date: Mon, 30 Sep 2024 22:47:51 GMT Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 17 Sep 2024 10:11:09 GMT Cache-Control: public, max-age=86400 Age: 1170371 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5czHoFR1yt49Vh7Uh7%2Bbc36XxlgzIqchheU3KWP0VmYqSBi1cdyskVaeAbNyvTY%2FFqF%2BZDkbvOKhpbGh7RNszzLvhcEBQP9HLPe5lcXnNfGMlnWGNyfJWBz5VFnpNXeIZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c1d4999c7ca2-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49864	104.22.75.216	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:51 UTC	472	OUT	GET /tag?o=5097926782615552&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363" If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
2024-09-30 22:47:51 UTC	422	IN	HTTP/1.1 304 Not Modified Date: Mon, 30 Sep 2024 22:47:51 GMT Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: "2588bdbfbd27eb6db5a16b2c065bb363" Last-Modified: Mon, 30 Sep 2024 22:18:41 GMT Vary: Origin X-Robots-Tag: noindex, nofollow Via: 1.1 google CF-Cache-Status: HIT Age: 1604 Server: cloudflare CF-RAY: 8cb7c1d4b8185e65-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49865	142.250.186.78	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:52 UTC	764	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2024-09-30 22:47:52 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Mon, 30 Sep 2024 22:47:52 GMT Expires: Mon, 30 Sep 2024 22:47:52 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49870	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:52 UTC	371	OUT	GET /px.gif?ch=1&e=0.4732434893340589 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:52 UTC	1228	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 01 Oct 2024 22:47:52 GMT Cache-Control: public, max-age=86400 Age: 778094 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y%2FjSBH%2BTosM0CCBFYqAF7zTlH6OaHi%2BnfHwh%2BAkbmtpicFofoGqxiwQAgba7EDUVoel2fa5ZWb37uJz5tG%2FIbqI5u4HlsIwGhOW3w5bT0mI297Q162hX%2FQjIaAXzZeZWeA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c1d8be6241ba-EWR
2024-09-30 22:47:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49871	104.26.3.70	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:52 UTC	451	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3" If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
2024-09-30 22:47:52 UTC	1164	IN	HTTP/1.1 304 Not Modified Date: Mon, 30 Sep 2024 22:47:52 GMT Connection: close X-GUploader-UploadID: ABPtcPpGQj4M5XWsw0_afNd_e9OGg14LZRJ1uEm-mT1UqcHm2kBDuQd0t4vHO2_h4el5IlQxZBc x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Tue, 01 Oct 2024 22:47:52 GMT Cache-Control: public, max-age=86400 Age: 1381546 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NhAP5iwVein2suQOMRA4SC0i%2BN7miLo%2B2FXoG1P19YTd79RXBb6PFkm6YOCuN9fbIMI9xJu8mCzxJpb0061UAfzcVIT40I44kGBacUoN9w5WBu72UkSVNmurYdCps2mJxA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb7c1d89d2d6a5e-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49866	100.20.12.218	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:52 UTC	662	OUT	POST /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive Content-Length: 922 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://infoguard-switzerland.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://infoguard-switzerland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:52 UTC	922	OUT	Data Raw: 7b 22 65 76 65 6e 74 54 79 70 65 22 3a 22 4b 45 59 57 4f 52 44 5f 43 4c 49 43 4b 22 2c 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 34 2d 30 39 2d 33 30 54 32 32 3a 34 37 3a 35 30 2e 34 36 37 5a 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 69 6e 66 6f 67 75 61 72 64 2d 73 77 69 74 7a 65 72 6c 61 6e 64 2e 63 6f 6d 22 2c 22 64 6f 6d 61 69 6e 53 74 61 74 75 73 22 3a 22 41 43 54 49 56 45 22 2c 22 73 79 73 74 65 6d 22 3a 22 50 57 22 2c 22 64 61 74 61 53 6f 75 72 63 65 22 3a 22 49 4e 56 45 4e 54 4f 52 59 22 2c 22 69 73 54 75 72 6e 4b 65 79 52 65 73 65 6c 6c 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 43 6e 61 6d 65 22 3a 66 61 6c 73 65 2c 22 64 72 69 64 22 3a 22 61 73 2d 64 72 69 64 2d 6f 6f 2d 31 38 38 35 37 31 34 31 38 36 35 34 30 38 39 34 22 2c 22 70 75 62 49 64 22 3a Data Ascii: {"eventType":"KEYWORD_CLICK","createdAt":"2024-09-30T22:47:50.467Z","domain":"infoguard-switzerland.com","domainStatus":"ACTIVE","system":"PW","dataSource":"INVENTORY","isTurnKeyReseller":false,"isCname":false,"drid":"as-drid-oo-1885714186540894","pubId":
2024-09-30 22:47:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:52 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=u4IL7hWUCv/ay8HNUv1fSQ3aRnSv65+iRci3JyM1etF4/3zHFrrHtxQHVWrrMK1C8TkubtDhlXQtbtuf6QM5AfUPujswp0pHDB5xpa7XPTgS/lgBj/OPRbvU9xqX; Expires=Mon, 07 Oct 2024 22:47:52 GMT; Path=/ Set-Cookie: AWSALBCORS=u4IL7hWUCv/ay8HNUv1fSQ3aRnSv65+iRci3JyM1etF4/3zHFrrHtxQHVWrrMK1C8TkubtDhlXQtbtuf6QM5AfUPujswp0pHDB5xpa7XPTgS/lgBj/OPRbvU9xqX; Expires=Mon, 07 Oct 2024 22:47:52 GMT; Path=/; SameSite=None; Secure access-control-allow-origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49867	216.58.206.65	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:52 UTC	686	OUT	GET /svg/right_arrow.svg HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:52 UTC	750	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 171 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 22:41:27 GMT Expires: Tue, 01 Oct 2024 21:41:27 GMT Cache-Control: public, max-age=82800 Age: 385 Last-Modified: Thu, 16 Feb 2023 19:33:13 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:52 UTC	171	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 44 37 44 37 44 37 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 77 69 64 74 68 3d 22 34 38 22 3e 3c 70 61 74 68 20 64 3d 22 6d 32 34 20 34 30 2e 35 35 2d 33 2e 33 35 2d 33 2e 34 20 31 30 2e 38 35 2d 31 30 2e 38 48 37 2e 34 35 76 2d 34 2e 37 48 33 31 2e 35 4c 32 30 2e 36 35 20 31 30 2e 38 20 32 34 20 37 2e 34 35 20 34 30 2e 35 35 20 32 34 5a 22 2f 3e 3c 2f 73 76 67 3e 0a Data Ascii: <svg fill='#D7D7D7' xmlns="http://www.w3.org/2000/svg" height="48" width="48"><path d="m24 40.55-3.35-3.4 10.85-10.8H7.45v-4.7H31.5L20.65 10.8 24 7.45 40.55 24Z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49872	100.20.12.218	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:53 UTC	748	OUT	GET /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1 Host: api.aws.parking.godaddy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pwvisitor=1bdf425c-ee62-4320-9019-676b75b07b0e; market=en-US; currency=USD; AKA_A2=A; AWSALB=FZp5sfFv7XfNwGYKN8Pqec39DYOHYA8UXGo/O8/zTamAuRqEyamaCwA02dDeTQ7lAhvxzI2ewYvDa4vkmt38C3wUJXC12fktAO6pWa/uXmc5Cajf1HnRxnnsiAQq; AWSALBCORS=FZp5sfFv7XfNwGYKN8Pqec39DYOHYA8UXGo/O8/zTamAuRqEyamaCwA02dDeTQ7lAhvxzI2ewYvDa4vkmt38C3wUJXC12fktAO6pWa/uXmc5Cajf1HnRxnnsiAQq
2024-09-30 22:47:53 UTC	531	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 22:47:53 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: AWSALB=dHbTWxPashXu55/90FLmfyTH12ezVAb+t/H5KLvflNWgo7FMMUK6o1Z2WbvAYnA6MXhiiSKp+RSvU3MZ/jVTgn4C1eBeVCr2UDNYz2X0PFoZFw3pUXhYZxYb7U6G; Expires=Mon, 07 Oct 2024 22:47:53 GMT; Path=/ Set-Cookie: AWSALBCORS=dHbTWxPashXu55/90FLmfyTH12ezVAb+t/H5KLvflNWgo7FMMUK6o1Z2WbvAYnA6MXhiiSKp+RSvU3MZ/jVTgn4C1eBeVCr2UDNYz2X0PFoZFw3pUXhYZxYb7U6G; Expires=Mon, 07 Oct 2024 22:47:53 GMT; Path=/; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49875	142.250.184.225	443	4988	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:53 UTC	445	OUT	GET /svg/right_arrow.svg HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 22:47:53 UTC	750	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 171 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 22:41:27 GMT Expires: Tue, 01 Oct 2024 21:41:27 GMT Cache-Control: public, max-age=82800 Age: 386 Last-Modified: Thu, 16 Feb 2023 19:33:13 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 22:47:53 UTC	171	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 44 37 44 37 44 37 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 77 69 64 74 68 3d 22 34 38 22 3e 3c 70 61 74 68 20 64 3d 22 6d 32 34 20 34 30 2e 35 35 2d 33 2e 33 35 2d 33 2e 34 20 31 30 2e 38 35 2d 31 30 2e 38 48 37 2e 34 35 76 2d 34 2e 37 48 33 31 2e 35 4c 32 30 2e 36 35 20 31 30 2e 38 20 32 34 20 37 2e 34 35 20 34 30 2e 35 35 20 32 34 5a 22 2f 3e 3c 2f 73 76 67 3e 0a Data Ascii: <svg fill='#D7D7D7' xmlns="http://www.w3.org/2000/svg" height="48" width="48"><path d="m24 40.55-3.35-3.4 10.85-10.8H7.45v-4.7H31.5L20.65 10.8 24 7.45 40.55 24Z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49877	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-09-30 22:47:57 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 79 6b 2b 35 47 71 33 66 6c 55 65 30 65 38 34 42 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 38 34 31 65 31 63 63 35 31 35 64 37 63 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: yk+5Gq3flUe0e84B.1Context: 66841e1cc515d7c3
2024-09-30 22:47:57 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-30 22:47:57 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 79 6b 2b 35 47 71 33 66 6c 55 65 30 65 38 34 42 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 38 34 31 65 31 63 63 35 31 35 64 37 63 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 31 72 49 39 30 63 48 59 4d 39 77 73 2b 47 37 62 57 6f 45 38 64 46 67 67 65 5a 46 75 4a 71 6c 6d 34 2f 49 4d 42 5a 4c 6c 6d 6f 77 30 37 71 6a 68 4a 31 64 66 67 68 38 4b 71 58 34 72 4c 47 47 56 31 5a 4c 37 6b 56 61 7a 42 4f 61 53 66 55 71 44 57 57 44 4f 68 68 38 35 34 57 34 46 61 30 54 53 6f 69 53 4a 68 57 6d 52 6f 63 67 42 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: yk+5Gq3flUe0e84B.2Context: 66841e1cc515d7c3<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAc1rI90cHYM9ws+G7bWoE8dFggeZFuJqlm4/IMBZLlmow07qjhJ1dfgh8KqX4rLGGV1ZL7kVazBOaSfUqDWWDOhh854W4Fa0TSoiSJhWmRocgB
2024-09-30 22:47:57 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 79 6b 2b 35 47 71 33 66 6c 55 65 30 65 38 34 42 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 38 34 31 65 31 63 63 35 31 35 64 37 63 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: yk+5Gq3flUe0e84B.3Context: 66841e1cc515d7c3<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-30 22:47:57 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-30 22:47:57 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 61 33 2f 51 2f 4b 74 44 35 45 75 6e 68 73 37 4a 42 44 6b 63 70 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: a3/Q/KtD5Eunhs7JBDkcpA.0Payload parsing failed.

Target ID:	0
Start time:	18:46:38
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:46:43
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2380,i,13374029525997523503,1954096389479087345,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:46:45
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://infoguard-switzerland.com/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://infoguard-switzerland.com/lander	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander	HTTP Parser: No favicon
Source: https://www.godaddy.com/domainsearch/find?key=parkweb&utm_source=godaddy&utm_medium=parkedpages&utm_campaign=x_dom-broker_parkedpages_x_x_invest_b_001&tmskey=dpp_dbs&domainToCheck=infoguard-switzerland.com&isc=GPPTCOM&itc=parkedpage_landers	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=2	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=2	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=2	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=2	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=2	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=2	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=2	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=2	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Display+Board+Software&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Display+Board+Software&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Display+Board+Software&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Display+Board+Software&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Custom+Folders+with+Pockets&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Custom+Folders+with+Pockets&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Custom+Folders+with+Pockets&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1	HTTP Parser: No favicon
Source: https://infoguard-switzerland.com/lander?query=Custom+Folders+with+Pockets&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1	HTTP Parser: No favicon

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /lander HTTP/1.1Host: infoguard-switzerland.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?o=5097926782615552&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&gdabp=true HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?o=5097926782615552&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363"If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
Source: global traffic	HTTP traffic detected: GET /tag?o=5097926782615552&upapi=true HTTP/1.1Host: btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.49639305765025 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&gdabp=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?o=5097926782615552&upapi=true HTTP/1.1Host: btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363"If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.49639305765025 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/parking/landers/infoguard-switzerland.com?trafficTarget=gd&abp=1&gdabp=true HTTP/1.1Host: api.aws.parking.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Request-Id: d058dfdb-cfb0-462f-897f-0973e8616027sec-ch-ua-platform: "Windows"Accept: /Origin: https://infoguard-switzerland.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/parking/landers/infoguard-switzerland.com?trafficTarget=gd&abp=1&gdabp=true HTTP/1.1Host: api.aws.parking.godaddy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALBCORS=YMjrNjrg6LWLqGCleMSFG3SlQNwIKduu26uisaVkSt5nl4ARCvck16v5wtvbGr2Ru1L3H1NJLzxt8JQqn1XbdmHqwdCfh4Zc6kha3FeTHXANIltagk02JGwvQBW+; pwvisitor=1bdf425c-ee62-4320-9019-676b75b07b0e
Source: global traffic	HTTP traffic detected: GET /afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=infoguard-switzerland.com&client=dp-godaddy1_xml&r=m&rpbu=https%3A%2F%2Finfoguard-switzerland.com%2Flander&type=3&uiopt=true&swp=as-drid-oo-1885714186540894&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=r3&nocache=9201727736431066&num=0&output=afd_ads&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727736431068&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=907&frm=0&uio=-&cont=relatedLinks&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Finfoguard-switzerland.com%2Flander&referer=http%3A%2F%2Finfoguard-switzerland.com%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1Host: widget.trustpilot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trustboxes/5419b637fa0340045cd0c936/main.js HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2 HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trustboxes/5419b637fa0340045cd0c936/main.js HTTP/1.1Host: widget.trustpilot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trustbox-data/5419b637fa0340045cd0c936?businessUnitId=483fd2b90000640005029919&locale=en-US HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander&referrer=http%3A%2F%2Finfoguard-switzerland.com%2F&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander&referrer=http%3A%2F%2Finfoguard-switzerland.com%2F&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967D2 HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1Host: api.aws.parking.godaddy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pwvisitor=1bdf425c-ee62-4320-9019-676b75b07b0e; AWSALB=7ikdeK6xyud4tSOvegZ5EpbMvqv6JeCPjXp/0cJGIk8llFYGy4wHE3W63z52z7vIBdVfrr6hQ324GCD5yyThKPlaA9PswvyTtm2fzoyNYJAsruc/SibPRjzQQL3m; AWSALBCORS=7ikdeK6xyud4tSOvegZ5EpbMvqv6JeCPjXp/0cJGIk8llFYGy4wHE3W63z52z7vIBdVfrr6hQ324GCD5yyThKPlaA9PswvyTtm2fzoyNYJAsruc/SibPRjzQQL3m
Source: global traffic	HTTP traffic detected: GET /fonts/ubuntu.css HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trustbox-data/5419b637fa0340045cd0c936?businessUnitId=483fd2b90000640005029919&locale=en-US HTTP/1.1Host: widget.trustpilot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/ubuntu/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://widget.trustpilot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://widget.trustpilot.com/fonts/ubuntu.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/ubuntu/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://widget.trustpilot.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://widget.trustpilot.com/fonts/ubuntu.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lander?query=Service+Labels&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=2 HTTP/1.1Host: infoguard-switzerland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: traffic_target=gd; caf_ipaddr=8.46.123.33; country=US; city=New%20York; lander_type=parkweb; __gsas=ID=57aed5ead6c1e5c0:T=1727736433:RT=1727736433:S=ALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A; pvisitor=52e1cc11-8f0b-4834-8095-9063c94ba631
Source: global traffic	HTTP traffic detected: GET /tag?o=5097926782615552&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363"If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=infoguard-switzerland.com&client=dp-godaddy1_xml&r=m&sct=ID%3D57aed5ead6c1e5c0%3AT%3D1727736433%3ART%3D1727736433%3AS%3DALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A&sc_status=6&rpbu=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DService%2BLabels%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D2&type=0&uiopt=true&swp=as-drid-oo-1885714186540894&q=Service%20Labels&afdt=ChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=9571727736455062&num=0&output=afd_ads&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727736455064&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=907&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DService%2BLabels%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.10775175719051644 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3"If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
Source: global traffic	HTTP traffic detected: GET /stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DService%2BLabels%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D2&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DService%2BLabels%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm4BlLqpj7zRH6EZNx1sBq5v8Fh5YF-lOhw5Kb8eOlc9osiZ8S3q_1ap_GM1ReYzcpBdJ46bKsT6c6UUlLAKQUyjpCQ0U1URbUpSFnPbljBM4UoQoyjzOX-KP5X5N9P2EbECoxEhnc0dNwQVrIo2DyAB%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D2&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag?o=5097926782615552&upapi=true HTTP/1.1Host: btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363"If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.10775175719051644 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3"If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
Source: global traffic	HTTP traffic detected: GET /svg/left_chevron_icon.svg?c=%23757575 HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /svg/right_chevron_icon.svg?c=%23757575 HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /svg/left_chevron_icon.svg?c=%23757575 HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /svg/right_chevron_icon.svg?c=%23757575 HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1Host: api.aws.parking.godaddy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pwvisitor=1bdf425c-ee62-4320-9019-676b75b07b0e; AWSALB=kmkbEGGU2+8akPBR7cCHwDAmUsXQDGmDzqET54/n6FnNYq94IpTC6RsrW5IbiSd3vIvOuJX69bKVvwWn6GT/pVs+WgCaAmEXZ6ViQ1Js8ovvcdSaqbdoSOx5TV57; AWSALBCORS=kmkbEGGU2+8akPBR7cCHwDAmUsXQDGmDzqET54/n6FnNYq94IpTC6RsrW5IbiSd3vIvOuJX69bKVvwWn6GT/pVs+WgCaAmEXZ6ViQ1Js8ovvcdSaqbdoSOx5TV57; market=en-US; currency=USD; AKA_A2=A
Source: global traffic	HTTP traffic detected: GET /lander?query=Display+Board+Software&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1 HTTP/1.1Host: infoguard-switzerland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: traffic_target=gd; caf_ipaddr=8.46.123.33; country=US; city=New%20York; lander_type=parkweb; __gsas=ID=57aed5ead6c1e5c0:T=1727736433:RT=1727736433:S=ALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A; pvisitor=52e1cc11-8f0b-4834-8095-9063c94ba631
Source: global traffic	HTTP traffic detected: GET /tag?o=5097926782615552&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363"If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=infoguard-switzerland.com&client=dp-godaddy1_xml&r=m&sct=ID%3D57aed5ead6c1e5c0%3AT%3D1727736433%3ART%3D1727736433%3AS%3DALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A&sc_status=6&rpbu=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DDisplay%2BBoard%2BSoftware%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&type=0&uiopt=true&swp=as-drid-oo-1885714186540894&q=Display%20Board%20Software&afdt=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=7431727736463258&num=0&output=afd_ads&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727736463259&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=907&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DDisplay%2BBoard%2BSoftware%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DDisplay%2BBoard%2BSoftware%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DDisplay%2BBoard%2BSoftware%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj5b2GV7g2CsokHLOPp3ZuvQUAVx0a7PqKIksmeSvmR5jKGKEKh1r8oFQRfOozRbmCwOsKoUpHftCTpD2BM9cKu6dqxVmsBV4fdtDucUEc5mMaNUZu1RxFpiA516YFctJqtyTsJ0CwmI1IAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.18254414261951002 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3"If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
Source: global traffic	HTTP traffic detected: GET /tag?o=5097926782615552&upapi=true HTTP/1.1Host: btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363"If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3"If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.18254414261951002 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1Host: api.aws.parking.godaddy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pwvisitor=1bdf425c-ee62-4320-9019-676b75b07b0e; market=en-US; currency=USD; AKA_A2=A; AWSALB=y3AvUpNfWn/LpfaqThQvnuqspMxGCUZFA9zs43kmZKQ690xgrGpx2JccQQvNuC5GMGZ2MVdKnp8EvbxZMSlrgl1q5hUkYgN0RYgO8oXmfYB2qsLSkfUjUlJpNcN4; AWSALBCORS=y3AvUpNfWn/LpfaqThQvnuqspMxGCUZFA9zs43kmZKQ690xgrGpx2JccQQvNuC5GMGZ2MVdKnp8EvbxZMSlrgl1q5hUkYgN0RYgO8oXmfYB2qsLSkfUjUlJpNcN4
Source: global traffic	HTTP traffic detected: GET /lander?query=Custom+Folders+with+Pockets&afdToken=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE&pcsa=false&nb=0&rurl=http%3A%2F%2Finfoguard-switzerland.com%2F&nm=1 HTTP/1.1Host: infoguard-switzerland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: traffic_target=gd; caf_ipaddr=8.46.123.33; country=US; city=New%20York; lander_type=parkweb; __gsas=ID=57aed5ead6c1e5c0:T=1727736433:RT=1727736433:S=ALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A; pvisitor=52e1cc11-8f0b-4834-8095-9063c94ba631
Source: global traffic	HTTP traffic detected: GET /tag?o=5097926782615552&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363"If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads?adsafe=low&adtest=off&psid=7949183650&pcsa=false&channel=non-expiry&domain_name=infoguard-switzerland.com&client=dp-godaddy1_xml&r=m&sct=ID%3D57aed5ead6c1e5c0%3AT%3D1727736433%3ART%3D1727736433%3AS%3DALNI_MaE3uW-SY5p0RoZuCuY6TgTk_4e7A&sc_status=6&rpbu=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DCustom%2BFolders%2Bwith%2BPockets%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&type=0&uiopt=true&swp=as-drid-oo-1885714186540894&q=Custom%20Folders%20with%20Pockets&afdt=ChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266%2C72717107&format=n3&ad=n3&nocache=7531727736469140&num=0&output=afd_ads&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1727736469141&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=907&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=678245571&rurl=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DCustom%2BFolders%2Bwith%2BPockets%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /stats/TrustboxImpression?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DCustom%2BFolders%2Bwith%2BPockets%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/TrustboxView?locale=en-US&styleHeight=20px&styleWidth=fit-content&theme=light&fontFamily=Ubuntu&url=https%3A%2F%2Finfoguard-switzerland.com%2Flander%3Fquery%3DCustom%2BFolders%2Bwith%2BPockets%26afdToken%3DChMI_fWA49_riAMV6SUQCB3wsSsyEm0BlLqpj0nO7WltS3W5i_qDN-h_qqjd9jOCm4OffBw-mNfppM7OZusfCY00mIwwGUrWKRqDHzYG4cjfk34oUpY9vOzHLWUjdvxCXOipGVHGcra6lGE2H9HQv3XKztNEOeN7F5WAvCQykv86dQSyIAE%26pcsa%3Dfalse%26nb%3D0%26rurl%3Dhttp%253A%252F%252Finfoguard-switzerland.com%252F%26nm%3D1&referrer=&userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&language=en-US&platform=Win32&nosettings=1&businessUnitId=483fd2b90000640005029919&widgetId=5419b637fa0340045cd0c936 HTTP/1.1Host: widget.trustpilot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://widget.trustpilot.com/trustboxes/5419b637fa0340045cd0c936/index.html?templateId=5419b637fa0340045cd0c936&businessunitId=483fd2b90000640005029919Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.4732434893340589 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3"If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
Source: global traffic	HTTP traffic detected: GET /tag?o=5097926782615552&upapi=true HTTP/1.1Host: btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"2588bdbfbd27eb6db5a16b2c065bb363"If-Modified-Since: Mon, 30 Sep 2024 22:18:41 GMT
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://infoguard-switzerland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.4732434893340589 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3"If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
Source: global traffic	HTTP traffic detected: GET /svg/right_arrow.svg HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/parkingEvents?abp=1&gdabp=true HTTP/1.1Host: api.aws.parking.godaddy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pwvisitor=1bdf425c-ee62-4320-9019-676b75b07b0e; market=en-US; currency=USD; AKA_A2=A; AWSALB=FZp5sfFv7XfNwGYKN8Pqec39DYOHYA8UXGo/O8/zTamAuRqEyamaCwA02dDeTQ7lAhvxzI2ewYvDa4vkmt38C3wUJXC12fktAO6pWa/uXmc5Cajf1HnRxnnsiAQq; AWSALBCORS=FZp5sfFv7XfNwGYKN8Pqec39DYOHYA8UXGo/O8/zTamAuRqEyamaCwA02dDeTQ7lAhvxzI2ewYvDa4vkmt38C3wUJXC12fktAO6pWa/uXmc5Cajf1HnRxnnsiAQq
Source: global traffic	HTTP traffic detected: GET /svg/right_arrow.svg HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: infoguard-switzerland.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lander HTTP/1.1Host: infoguard-switzerland.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://infoguard-switzerland.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: infoguard-switzerland.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: btloader.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: ad-delivery.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: api.aws.parking.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: widget.trustpilot.com
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: www.godaddy.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://infoguard-switzerland.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Windows Analysis Report
http://infoguard-switzerland.com/