Edit tour

Windows Analysis Report
http://quinnemanuel.com

Overview

General Information

Sample URL:	http://quinnemanuel.com
Analysis ID:	1523601
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

HTML body with high number of embedded SVGs detected

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1976,i,12190677906875791993,16865103595547294049,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7108 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5620 --field-trial-handle=1976,i,12190677906875791993,16865103595547294049,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7048 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5712 --field-trial-handle=1976,i,12190677906875791993,16865103595547294049,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://quinnemanuel.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-MXPGK97YYN&gtm=45je49u0v9113890631za200&_p=1727807610603&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101671035~101686685~101747727&cid=655236864.1727807618&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AAAI&_s=1&sid=1727807617&sct=1&seg=0&dl=https%3A%2F%2Fwww.quinnemanuel.com%2F&dt=Quinn%20Emanuel%20Trial%20Lawyers%20-%20Quinn%20Emanuel%20Urquhart%20%26%20Sullivan%2C%20LLP&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=10412 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.quinnemanuel.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_218.2.dr, chromecache_280.2.dr, chromecache_187.2.dr	String found in binary or memory: http://manos.malihu.gr)
Source: chromecache_218.2.dr, chromecache_147.2.dr, chromecache_309.2.dr, chromecache_280.2.dr, chromecache_228.2.dr, chromecache_187.2.dr	String found in binary or memory: http://manos.malihu.gr/jquery-custom-content-scroller
Source: chromecache_207.2.dr, chromecache_147.2.dr, chromecache_309.2.dr, chromecache_261.2.dr, chromecache_228.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_245.2.dr	String found in binary or memory: http://multiple-select.wenzhixin.net.cn
Source: chromecache_207.2.dr, chromecache_261.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_245.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_268.2.dr, chromecache_217.2.dr, chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_207.2.dr, chromecache_147.2.dr, chromecache_309.2.dr, chromecache_261.2.dr, chromecache_228.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_245.2.dr	String found in binary or memory: http://wenzhixin.net.cn/)
Source: chromecache_207.2.dr, chromecache_147.2.dr, chromecache_309.2.dr, chromecache_261.2.dr, chromecache_228.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_245.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0)
Source: chromecache_213.2.dr, chromecache_265.2.dr, chromecache_249.2.dr, chromecache_154.2.dr, chromecache_221.2.dr, chromecache_294.2.dr, chromecache_241.2.dr, chromecache_199.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_218.2.dr, chromecache_280.2.dr, chromecache_187.2.dr	String found in binary or memory: http://www.gnu.org/licenses/.
Source: chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: http://www.quinnjapan.com/
Source: chromecache_193.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: https://acsbapp.com/apps/app/dist/js/app.js
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_157.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_214.2.dr, chromecache_169.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_299.2.dr, chromecache_281.2.dr, chromecache_165.2.dr, chromecache_172.2.dr, chromecache_266.2.dr, chromecache_282.2.dr, chromecache_191.2.dr, chromecache_157.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/js-cookie
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_207.2.dr, chromecache_261.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_235.2.dr, chromecache_245.2.dr, chromecache_183.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_207.2.dr, chromecache_261.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_245.2.dr	String found in binary or memory: https://github.com/imakewebthings/waypoints/blob/master/licenses.txt
Source: chromecache_262.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_268.2.dr, chromecache_217.2.dr, chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_207.2.dr, chromecache_261.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_245.2.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: chromecache_207.2.dr, chromecache_261.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_235.2.dr, chromecache_245.2.dr, chromecache_183.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_207.2.dr, chromecache_261.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_245.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_207.2.dr, chromecache_147.2.dr, chromecache_309.2.dr, chromecache_261.2.dr, chromecache_228.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_245.2.dr	String found in binary or memory: https://github.com/uxsolutions/bootstrap-datepicker)
Source: chromecache_282.2.dr	String found in binary or memory: https://google.com
Source: chromecache_282.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_278.2.dr	String found in binary or memory: https://img.youtube.com/vi/JCcqzCo7X-M/mqdefault.jpg
Source: chromecache_278.2.dr	String found in binary or memory: https://img.youtube.com/vi/NBEWfKH702s/mqdefault.jpg
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: https://maps.google.com/maps?q=
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_157.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_299.2.dr, chromecache_281.2.dr, chromecache_165.2.dr, chromecache_172.2.dr, chromecache_266.2.dr, chromecache_282.2.dr, chromecache_191.2.dr, chromecache_157.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_193.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_193.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_248.2.dr, chromecache_200.2.dr, chromecache_146.2.dr, chromecache_198.2.dr, chromecache_176.2.dr, chromecache_209.2.dr, chromecache_304.2.dr, chromecache_215.2.dr	String found in binary or memory: https://sketch.com
Source: chromecache_283.2.dr, chromecache_246.2.dr	String found in binary or memory: https://sketchapp.com
Source: chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: https://static.srcspot.com/libs/avril.js
Source: chromecache_191.2.dr, chromecache_157.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_169.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_193.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_214.2.dr, chromecache_169.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_299.2.dr, chromecache_281.2.dr, chromecache_165.2.dr, chromecache_172.2.dr, chromecache_266.2.dr, chromecache_282.2.dr, chromecache_191.2.dr, chromecache_157.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_299.2.dr, chromecache_281.2.dr, chromecache_165.2.dr, chromecache_172.2.dr, chromecache_266.2.dr, chromecache_282.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_214.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_214.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_214.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_157.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_214.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_282.2.dr, chromecache_191.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_157.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_165.2.dr, chromecache_282.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_214.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-17720203-1
Source: chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-NBGL3QC
Source: chromecache_165.2.dr, chromecache_282.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_185.2.dr, chromecache_170.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_262.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files
Source: chromecache_191.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_173.2.dr	String found in binary or memory: https://www.quinnemanuel.com
Source: chromecache_278.2.dr	String found in binary or memory: https://www.quinnemanuel.com/
Source: chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.quinnemanuel.com/media/phyidkre/logo.png
Source: chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.quinnemanuel.com/offices/
Source: chromecache_173.2.dr	String found in binary or memory: https://www.quinnemanuel.com/offices/dallas/
Source: chromecache_167.2.dr	String found in binary or memory: https://www.quinnemanuel.com/offices/doha/
Source: chromecache_278.2.dr	String found in binary or memory: https://www.quinnemanuel.com/the-firm/news-events/award-another-year-still-most-feared/#rootNodeId=1
Source: chromecache_278.2.dr	String found in binary or memory: https://www.quinnemanuel.com/the-firm/news-events/five-quinn-emanuel-attorneys-named-2023-rising-sta
Source: chromecache_278.2.dr	String found in binary or memory: https://www.quinnemanuel.com/the-firm/news-events/law360-selects-five-quinn-emanuel-partners-as-2023
Source: chromecache_278.2.dr	String found in binary or memory: https://www.quinnemanuel.com/the-firm/news-events/new-york-partner-steig-olson-ranked-in-law360-s-ti
Source: chromecache_278.2.dr	String found in binary or memory: https://www.quinnemanuel.com/the-firm/news-events/partners-sean-pak-and-kevin-johnson-honored-as-one
Source: chromecache_278.2.dr	String found in binary or memory: https://www.quinnemanuel.com/the-firm/news-events/qe-wins-appeal-120-million-jury-verdict-against-ch
Source: chromecache_278.2.dr	String found in binary or memory: https://www.quinnemanuel.com/the-firm/news-events/quinn-emanuel-named-2023-litigation-department-of-
Source: chromecache_278.2.dr	String found in binary or memory: https://www.quinnemanuel.com/the-firm/news-events/quinn-emanuel-receives-top-rankings-in-legal-500-u
Source: chromecache_278.2.dr	String found in binary or memory: https://www.quinnemanuel.com/the-firm/news-events/quinn-emanuel-wins-chambers-usa-commercial-litigat
Source: chromecache_278.2.dr	String found in binary or memory: https://www.quinnemanuelchs.com/
Source: chromecache_173.2.dr	String found in binary or memory: https://www.quinnemanuelchs.com/offices/dallas/
Source: chromecache_167.2.dr	String found in binary or memory: https://www.quinnemanuelchs.com/offices/doha/
Source: chromecache_278.2.dr	String found in binary or memory: https://www.quinnkorea.com/
Source: chromecache_173.2.dr	String found in binary or memory: https://www.quinnkorea.com/offices/dallas/
Source: chromecache_167.2.dr	String found in binary or memory: https://www.quinnkorea.com/offices/doha/
Source: chromecache_165.2.dr, chromecache_282.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.spinxdigital.com/
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.youtube.com/channel/UCuAVJTZ1TkX9gPmf5ciJSjA
Source: chromecache_278.2.dr	String found in binary or memory: https://www.youtube.com/embed/JCcqzCo7X-M
Source: chromecache_278.2.dr	String found in binary or memory: https://www.youtube.com/embed/JCcqzCo7X-M?&autoplay=0&rel=0
Source: chromecache_278.2.dr	String found in binary or memory: https://www.youtube.com/embed/NBEWfKH702s
Source: chromecache_278.2.dr	String found in binary or memory: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0
Source: chromecache_278.2.dr	String found in binary or memory: https://www.youtube.com/embed/eSnzhoiLwx8
Source: chromecache_278.2.dr	String found in binary or memory: https://www.youtube.com/embed/eSnzhoiLwx8?&autoplay=0&rel=0
Source: chromecache_278.2.dr	String found in binary or memory: https://www.youtube.com/embed/pD218Mqhqms
Source: chromecache_278.2.dr	String found in binary or memory: https://www.youtube.com/embed/pD218Mqhqms?&autoplay=0&rel=0
Source: chromecache_278.2.dr	String found in binary or memory: https://www.youtube.com/embed/pD218Mqhqms?autoplay=1&modestbranding=0&showinfo=0
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_193.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49779 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@26/246@84/26

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1976,i,12190677906875791993,16865103595547294049,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://quinnemanuel.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5620 --field-trial-handle=1976,i,12190677906875791993,16865103595547294049,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5712 --field-trial-handle=1976,i,12190677906875791993,16865103595547294049,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1976,i,12190677906875791993,16865103595547294049,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5620 --field-trial-handle=1976,i,12190677906875791993,16865103595547294049,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5712 --field-trial-handle=1976,i,12190677906875791993,16865103595547294049,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://www.redditstatic.com/ads/pixel.js	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://admin.youtube.com	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://yurt.corp.google.com	0%	URL Reputation	safe
https://viacon.corp.google.com	0%	URL Reputation	safe
https://static.doubleclick.net/instream/ad_status.js	0%	URL Reputation	safe
https://support.google.com/youtube/answer/6276924	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
http://tools.ietf.org/html/rfc1950	0%	URL Reputation	safe
https://support.google.com/youtube/?p=missing_quality	0%	URL Reputation	safe
https://support.google.com/youtube/?p=report_playback	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	unknown
i.ytimg.com	142.250.185.150	true	false	unknown
static.doubleclick.net	142.250.181.230	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	74.125.133.155	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
youtube-ui.l.google.com	216.58.206.78	true	false	unknown
cdn.acsbapp.com	172.67.11.155	true	false	unknown
googleads.g.doubleclick.net	142.250.184.194	true	false	unknown
play.google.com	216.58.206.46	true	false	unknown
static.srcspot.com	35.190.8.230	true	false	unknown
quinnemanuel.com	72.32.67.24	true	false	unknown
acsbapp.com	104.22.0.204	true	false	unknown
www.google.com	216.58.206.36	true	false	unknown
analytics.google.com	142.250.185.110	true	false	unknown
www.quinnemanuel.com	72.32.67.24	true	false	unknown
ytimg.l.google.com	142.250.185.174	true	false	unknown
pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com	3.92.120.28	true	false	unknown
img.youtube.com	unknown	unknown	false	unknown
cdn.mouseflow.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
news.quinnemanuel.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
pi.pardot.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.quinnemanuel.com/dist/js/app.js?v=638633792821681415	false		unknown
https://www.quinnemanuel.com/media/oo2oek0r/doha-map.jpg	false		unknown
https://www.quinnemanuel.com/media/p4ykb44q/office-detail-map-1.jpg	false		unknown
https://cdn.acsbapp.com/config/quinnemanuel.com/config.json?page=%2F	false		unknown
https://pi.pardot.com/analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=114357&account_id=866552&title=Quinn%20Emanuel%20Trial%20Lawyers%20-%20Quinn%20Emanuel%20Urquhart%20%26%20Sullivan%2C%20LLP&url=https%3A%2F%2Fwww.quinnemanuel.com%2F&referrer=	false		unknown
https://www.quinnemanuel.com/dist/img/play-btn.svg	false		unknown
https://www.quinnemanuel.com/	false		unknown
https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415	false		unknown
https://www.quinnemanuel.com/dist/img/favicon.ico	false		unknown
https://www.quinnemanuel.com/dist/img/search-icon.png	false		unknown
https://www.quinnemanuel.com/scripts/jquery.mCustomScrollbar.js?v=638633793696690455	false		unknown
https://www.quinnemanuel.com/media/qzokeaqy/dallas-desktop.jpg	false		unknown
https://www.quinnemanuel.com/scripts/jquery.mCustomScrollbar.js?v=638633793483684870	false		unknown
https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0	false		unknown
https://news.quinnemanuel.com/analytics?conly=true&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Quinn%20Emanuel%20Trial%20Lawyers%20-%20Quinn%20Emanuel%20Urquhart%20&%20Sullivan,%20LLP&url=https://www.quinnemanuel.com/&referrer=	false		unknown
https://www.youtube.com/generate_204?ZNzJTA	false		unknown
https://i.ytimg.com/vi_webp/NBEWfKH702s/default.webp	false		unknown
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false		unknown
https://www.quinnemanuel.com/dist/img/down-arrow.svg	false		unknown
https://www.quinnemanuel.com/images/facebook-icon.svg	false		unknown
https://www.quinnemanuel.com/media/2eqgnp4n/newyork.jpg	false		unknown
https://www.youtube.com/embed/JCcqzCo7X-M?&autoplay=0&rel=0	false		unknown
https://www.quinnemanuel.com/dist/img/dowanload.svg	false		unknown
https://img.youtube.com/vi/JCcqzCo7X-M/mqdefault.jpg	false		unknown
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false		unknown
https://i.ytimg.com/vi_webp/pD218Mqhqms/default.webp	false		unknown
https://static.doubleclick.net/instream/ad_status.js	false	URL Reputation: safe	unknown
https://www.quinnemanuel.com/dist/css/style.css?v=638633793483684870	false		unknown
https://www.quinnemanuel.com/dist/img/graphic-map.png?v=8	false		unknown
https://googleads.g.doubleclick.net/pagead/id	false		unknown
https://www.youtube.com/embed/pD218Mqhqms?&autoplay=0&rel=0	false		unknown
https://www.youtube.com/s/player/d9418494/www-embed-player.vflset/www-embed-player.js	false		unknown
https://cdn.acsbapp.com/config/quinnemanuel.com/config.json?page=%2Foffices%2Fdallas%2F	false		unknown
https://www.quinnemanuel.com/images/footerlogo.png	false		unknown
https://www.quinnemanuel.com/dist/img/left-arrow.png	false		unknown
http://quinnemanuel.com/	false		unknown
https://www.quinnemanuel.com/dist/img/homepage-play.svg	false		unknown
https://www.quinnemanuel.com/dist/css/style.css?v=638633792821681415	false		unknown
https://www.youtube.com/s/player/d9418494/www-player.css	false		unknown
https://static.srcspot.com/libs/avril.js	false		unknown
https://www.quinnemanuel.com/media/id5e4qm4/losangeles.jpg	false		unknown
https://www.google.com/js/th/t-IqUp8Jbddkqbic8L7iPCHeaww4UxHeW5fnd9iEy1U.js	false		unknown
https://i.ytimg.com/vi/eSnzhoiLwx8/default.jpg	false		unknown
https://cdn.acsbapp.com/config/quinnemanuel.com/config.json?page=%2Foffices%2Fdoha%2F	false		unknown
https://pi.pardot.com/analytics?ver=3&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Dallas%20%7C%20Quinn%20Emanuel%20Urquhart%20%26%20Sullivan%2C%20LLP&url=https%3A%2F%2Fwww.quinnemanuel.com%2Foffices%2Fdallas%2F&referrer=	false		unknown
https://news.quinnemanuel.com/analytics?conly=true&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Doha%20\|%20Quinn%20Emanuel%20Urquhart%20&%20Sullivan,%20LLP&url=https://www.quinnemanuel.com/offices/doha/&referrer=	false		unknown
https://img.youtube.com/vi/NBEWfKH702s/mqdefault.jpg	false		unknown
https://www.youtube.com/generate_204?bzGeHw	false		unknown
https://www.quinnemanuel.com/dist/img/image-johnquinn-combined-hover.jpg	false		unknown
https://pi.pardot.com/analytics?ver=3&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Doha%20%7C%20Quinn%20Emanuel%20Urquhart%20%26%20Sullivan%2C%20LLP&url=https%3A%2F%2Fwww.quinnemanuel.com%2Foffices%2Fdoha%2F&referrer=	false		unknown
https://news.quinnemanuel.com/analytics?conly=true&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Dallas%20\|%20Quinn%20Emanuel%20Urquhart%20&%20Sullivan,%20LLP&url=https://www.quinnemanuel.com/offices/dallas/&referrer=	false		unknown
https://www.quinnemanuel.com/media/ungb5yj0/ellie_015.jpg	false		unknown
https://www.youtube.com/s/player/d9418494/player_ias.vflset/en_US/embed.js	false		unknown
https://www.quinnemanuel.com/dist/fonts/Lato-Regular.woff2	false		unknown
https://www.youtube.com/generate_204?BBOfqA	false		unknown
https://cdn.jsdelivr.net/npm/js-cookie@2/src/js.cookie.min.js	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_191.2.dr, chromecache_157.2.dr	false	URL Reputation: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_220.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://www.spinxdigital.com/	chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	false		unknown
https://www.redditstatic.com/ads/pixel.js	chromecache_165.2.dr, chromecache_282.2.dr	false	URL Reputation: safe	unknown
http://youtube.com/streaming/otf/durations/112015	chromecache_220.2.dr, chromecache_193.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_214.2.dr, chromecache_169.2.dr	false	URL Reputation: safe	unknown
http://wenzhixin.net.cn/)	chromecache_207.2.dr, chromecache_147.2.dr, chromecache_309.2.dr, chromecache_261.2.dr, chromecache_228.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_245.2.dr	false		unknown
https://github.com/select2/select2/blob/master/LICENSE.md	chromecache_207.2.dr, chromecache_261.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_245.2.dr	false		unknown
https://www.google.com	chromecache_157.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_207.2.dr, chromecache_261.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_245.2.dr	false		unknown
https://admin.youtube.com	chromecache_220.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://www.quinnkorea.com/offices/doha/	chromecache_167.2.dr	false		unknown
http://www.apache.org/licenses/LICENSE-2.0)	chromecache_207.2.dr, chromecache_147.2.dr, chromecache_309.2.dr, chromecache_261.2.dr, chromecache_228.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_245.2.dr	false		unknown
https://www.youtube.com/api/drm/fps?ek=	chromecache_220.2.dr, chromecache_193.2.dr	false		unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_220.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://www.quinnemanuel.com/the-firm/news-events/new-york-partner-steig-olson-ranked-in-law360-s-ti	chromecache_278.2.dr	false		unknown
https://www.quinnemanuel.com/the-firm/news-events/quinn-emanuel-named-2023-litigation-department-of-	chromecache_278.2.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_169.2.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_207.2.dr, chromecache_261.2.dr, chromecache_258.2.dr, chromecache_244.2.dr, chromecache_245.2.dr	false	URL Reputation: safe	unknown
https://github.com/madler/zlib/blob/master/zlib.h	chromecache_268.2.dr, chromecache_217.2.dr, chromecache_220.2.dr, chromecache_193.2.dr	false		unknown
https://yurt.corp.google.com	chromecache_220.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://cdn.jsdelivr.net/npm/js-cookie	chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	false		unknown
https://viacon.corp.google.com	chromecache_220.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_220.2.dr, chromecache_193.2.dr	false		unknown
https://support.google.com/youtube/answer/6276924	chromecache_220.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
http://youtube.com/yt/2012/10/10	chromecache_220.2.dr, chromecache_193.2.dr	false		unknown
https://cct.google/taggy/agent.js	chromecache_299.2.dr, chromecache_281.2.dr, chromecache_165.2.dr, chromecache_172.2.dr, chromecache_266.2.dr, chromecache_282.2.dr, chromecache_191.2.dr, chromecache_157.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_193.2.dr	false		unknown
https://www.youtube.com/embed/pD218Mqhqms?&autoplay=0&rel=0	chromecache_278.2.dr	false		unknown
http://tools.ietf.org/html/rfc1950	chromecache_268.2.dr, chromecache_217.2.dr, chromecache_220.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://www.google.%/ads/ga-audiences	chromecache_214.2.dr, chromecache_169.2.dr	false		unknown
https://www.quinnemanuel.com/the-firm/news-events/qe-wins-appeal-120-million-jury-verdict-against-ch	chromecache_278.2.dr	false		unknown
http://www.youtube.com/videoplayback	chromecache_193.2.dr	false		unknown
https://www.quinnemanuelchs.com/offices/doha/	chromecache_167.2.dr	false		unknown
https://github.com/js-cookie/js-cookie	chromecache_262.2.dr	false		unknown
https://www.quinnemanuel.com/the-firm/news-events/award-another-year-still-most-feared/#rootNodeId=1	chromecache_278.2.dr	false		unknown
https://support.google.com/youtube/?p=missing_quality	chromecache_220.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://www.quinnemanuel.com/the-firm/news-events/law360-selects-five-quinn-emanuel-partners-as-2023	chromecache_278.2.dr	false		unknown
https://www.quinnkorea.com/offices/dallas/	chromecache_173.2.dr	false		unknown
http://manos.malihu.gr/jquery-custom-content-scroller	chromecache_218.2.dr, chromecache_147.2.dr, chromecache_309.2.dr, chromecache_280.2.dr, chromecache_228.2.dr, chromecache_187.2.dr	false		unknown
https://sketch.com	chromecache_248.2.dr, chromecache_200.2.dr, chromecache_146.2.dr, chromecache_198.2.dr, chromecache_176.2.dr, chromecache_209.2.dr, chromecache_304.2.dr, chromecache_215.2.dr	false		unknown
https://support.google.com/youtube/?p=report_playback	chromecache_220.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://www.quinnemanuel.com/media/phyidkre/logo.png	chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	false		unknown
https://www.quinnemanuelchs.com/offices/dallas/	chromecache_173.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.150	unknown	United States	15169	GOOGLEUS	false
3.92.120.28	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
142.250.184.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.110	analytics.google.com	United States	15169	GOOGLEUS	false
142.250.185.198	unknown	United States	15169	GOOGLEUS	false
216.58.206.46	play.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.150	i.ytimg.com	United States	15169	GOOGLEUS	false
18.208.125.13	unknown	United States	14618	AMAZON-AESUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
74.125.133.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
3.215.172.219	unknown	United States	14618	AMAZON-AESUS	false
216.58.206.78	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.181.230	static.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
72.32.67.24	quinnemanuel.com	United States	33070	RMH-14US	false
172.67.11.155	cdn.acsbapp.com	United States	13335	CLOUDFLARENETUS	false
35.190.8.230	static.srcspot.com	United States	15169	GOOGLEUS	false
104.22.0.204	acsbapp.com	United States	13335	CLOUDFLARENETUS	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
142.250.185.174	ytimg.l.google.com	United States	15169	GOOGLEUS	false
104.22.1.204	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523601
Start date and time:	2024-10-01 20:32:31 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://quinnemanuel.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@26/246@84/26
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.quinnemanuel.com/offices/doha/ Browse: https://www.quinnemanuel.com/offices/dallas/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 142.251.173.84, 142.250.186.142, 34.104.35.123, 142.250.186.136, 142.250.185.202, 216.58.206.42, 142.250.184.234, 172.217.18.10, 142.250.186.42, 216.58.212.170, 142.250.186.74, 142.250.185.74, 142.250.186.170, 172.217.18.106, 142.250.185.106, 142.250.184.202, 142.250.185.170, 142.250.181.234, 142.250.185.234, 142.250.185.138, 172.217.18.3, 104.18.27.50, 104.18.26.50, 142.250.186.40, 104.18.186.31, 104.18.187.31, 142.250.186.78, 2.18.64.212, 2.18.64.220, 13.107.42.14, 13.85.23.86, 104.18.41.41, 172.64.146.215, 199.232.214.172, 20.242.39.171, 192.229.221.95, 216.58.212.138, 142.250.184.238, 142.250.186.67, 20.3.187.198, 172.217.23.106, 142.250.186.138, 216.58.206.74, 172.217.16.202, 142.250.185.163, 142.250.184.195, 172.217.16.138, 142.250.74.202, 142.250.186.106, 142.250.185.232, 172.217.18.14, 142.250.185.206
Excluded domains from analysis (whitelisted): cdn.jsdelivr.net.cdn.cloudflare.net, slscr.update.microsoft.com, clientservices.googleapis.com, cdn.mouseflow.com.cdn.cloudflare.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, od.linkedin.edgesuite.net, jnn-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, www.linkedin.com.cdn.cloudflare.net, edgedl.me.gvt1.com, clients.l.google.com, a1916.dscg2.akamai.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://quinnemanuel.com

Input	Output
URL: https://www.quinnemanuel.com/ Model: jbxai	{ "brand":["quinn emanuel"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.quinnemanuel.com/ Model: jbxai	{ "brand":["quinn emanuel trial lawyers"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.quinnemanuel.com/ Model: jbxai	{ "brand":["quinn emanuel"], "contains_trigger_text":true, "trigger_text":"A GLOBAL FORCE IN BUSINESS LITIGATION", "prominent_button_name":"ACCEPT", "text_input_field_labels":["Cookies Settings"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.quinnemanuel.com/ Model: jbxai	{ "brand":["Quinn Emanuel Urquhart & Sullivan, LLP"], "contains_trigger_text":true, "trigger_text":"LAW FIRM MOST FEARED GLOBALLY BY LARGE BUSINESSES", "prominent_button_name":"ACCEPT", "text_input_field_labels":["Cookies Settings"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.quinnemanuel.com/offices/doha/ Model: jbxai	{ "brand":["quinn emanuel trial lawyers"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.quinnemanuel.com/ Model: jbxai	{ "brand":["quinn emanuel trial lawyers"], "contains_trigger_text":true, "trigger_text":"INN EMANUEL?", "prominent_button_name":"ACCEPT", "text_input_field_labels":["Cookies Settings"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1207
Entropy (8bit):	5.21495669758832
Encrypted:	false
SSDEEP:	24:2dRrmLzHzn1DeaxMxLmR/gGFTpfVkXpnq6XGH2EktHfeV0Q6Xc5:cdyDzn2mN9qFXq2EWDXQ
MD5:	F25E4690B4E3DA95A3890F8D3070F05C
SHA1:	6C28D5DAA19BD4952531A9A220BE9101764B189E
SHA-256:	0607C3D1E48E9254EE4D0857FCB70B4E5D4D1EA1A14D8DDD59BE22FB2B969308
SHA-512:	B8AD4A940DB0228DA75C6F84E1E7B92E07CE57D7EC223E61B269987C4564ACCDBAE5C3CF884E23552631ACCF2B5D447A0E11CB191E86F9B72B627CF44951B8D3
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/dowanload.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="11px" height="12px" viewBox="0 0 11 12" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: sketchtool 57.1 (101010) - https://sketch.com -->.. <title>1435AF84-69D9-4F65-92CE-6830A4BEB60A@1x</title>.. <desc>Created with sketchtool.</desc>.. <g id="New-Design" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Attorney-List" transform="translate(-1141.000000, -1186.000000)" fill="#48A8C0" fill-rule="nonzero">.. <g id="BioCards" transform="translate(136.000000, 414.000000)">.. <g id="Bio-Card-/-Static" transform="translate(780.000000, 633.000000)">.. <path d="M235.887318,149.361496 L235.887318,150.861496 L225.181227,150.861496 L225.181227,149.361496 L235.887318,149.361496 Z M231.3111,138.999924 L231.310227,145.795924 L234.137115,142.97043 L235.197776,144.03109 L230.560627,148.668238 L225.906934

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (14965), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	90881
Entropy (8bit):	5.276530230883681
Encrypted:	false
SSDEEP:	1536:dsrjDQ3fDRHBk9aPP2Ajh6y/xRwsM3ldxz7hgTXZ3wkevNdr3/wCjI6h8MWbAG09:urjDQ3flHBk9aPP2Ajh6y/xRwsM3ldxF
MD5:	22917C4CF92382B697EFE5A42AE55452
SHA1:	0B8B2624BB2FE2F1364F35E17659359810202A61
SHA-256:	E6C112D8D3002AE249D8CAC3B3A1125AA5BDE67D659330C9DFCC2A1B3F4A0BC3
SHA-512:	614F75460113750C5C10F218E43577D6376F89106D22F8BF40409DEAD81A5A348F4EE6C01253046690AD0C0A92F77432C7CC76E014578302CACD97CEF429E932
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/css/style.css?v=638633793483684870
Preview:	./* Slider */..slick-slider.{. position: relative;.. display: block;. box-sizing: border-box;.. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;.. -webkit-touch-callout: none;. -khtml-user-select: none;. -ms-touch-action: pan-y;. touch-action: pan-y;. -webkit-tap-highlight-color: transparent;.}...slick-list.{. position: relative;.. display: block;. overflow: hidden;.. margin: 0;. padding: 0;.}..slick-list:focus.{. outline: none;.}..slick-list.dragging.{. cursor: pointer;. cursor: hand;.}...slick-slider .slick-track,..slick-slider .slick-list.{. -webkit-transform: translate3d(0, 0, 0);. -moz-transform: translate3d(0, 0, 0);. -ms-transform: translate3d(0, 0, 0);. -o-transform: translate3d(0, 0, 0);. transform: translate3d(0, 0, 0);.}...slick-track.{. position: relative;. top: 0;. left: 0;.. display: block;. margin-

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	2664
Entropy (8bit):	7.908397048527254
Encrypted:	false
SSDEEP:	48:8PvRIcEmTQrR94BOA90oMkSaSajhqL5PDan6OzpEHKgXyama:8PvRIDmTo9A90ywLla6OWHTyam
MD5:	AD3AB78DC032B9F6A4ADC29D807514F5
SHA1:	C0F3015C4BFF1A3A4553E96CF33FCB0979E9F99D
SHA-256:	DF709500B3FD32ABA7D463788CA803D4FF55875084DC16799C9BAA7649D95665
SHA-512:	1289B2C60DFAAE6EAF97D99D00C7CB52474910FEB4E45A89C6ACFBD1E496C2A943049448C64BD8B786C7C139DA2E06D3B2039AC250B9B25DA9B2663EF4E2CDC5
Malicious:	false
Reputation:	low
Preview:	RIFF`...WEBPVP8 T...p+...x.Z.>m..M.!$$.P...H......^..~e.?.z........._..Y7..J....>...y..g...Y.....k.../.=@...#...;U4O._.@...g............/..K...B}..?....._.=...............^.^..m...S...5-..^X.....-...g..?G..9.y.v....c..v.ib...k...O2.m.S..-..]..............>../2?..\|.D......4<.m...i.......M.r..Z...s.Y .[7.f...s?>.0.j.1.% :'^k....O.#..p..q.8E.8.E..-....w)}p.@.....O3..O.k...6.j.O...q.E.Ig...K.vn..!O.U..p9.(.s=."...%>...6..` J...c.)..V.PY..r..$....}u\|.....8..5....k.>Kn...g..kLod0.e.B.n@..H.. ..?...H.E,.RS...(Z..;b...+dG.+.W....B$M......y......;$.P.....(...!m...v.j...].\|LGQ.d...(-..2a.0..+..e4....r.....J<.....'D....s~.&'.R....].....Y./...=.kf..E..S.....L..+.p\|k...?._.....2.1.X..........,z.=.Lz$.......O%.........%tQS27..o..('...r...=Uy.u..k..y..`...z.WW..S9.!e..m@...5NW.k.}.\|.>?..X.e.,.K.$..Z.).e......]....oUeT8.dr..!s8.6L.}....s"-J.7.#...)..P..o*.xo5.m....W..4N...h.B.>.....?.....x...}.\|.<..wI2A..W5.O.....^.j.v..+.'.q..9j:V.As...Q.L..hj.8.......

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5453)
Category:	downloaded
Size (bytes):	5620
Entropy (8bit):	5.200998355308952
Encrypted:	false
SSDEEP:	96:3DvZ6XcSBguSMe+8gGVU74cgqb6Ys7v4/q1ykQ7KjcBWXDylZP259N8gvwx3Ug8:zvZMcSy/PglLiZBQ7KIBW2lZ259Srxh8
MD5:	0C0335550002DC4C4DB0DE1D9DCF043D
SHA1:	0BD0357FAA46E9FF78D939B196D43ED47C701160
SHA-256:	41402ADFC915AD6DFD6328C06C8038763D25FE603E63BEBA4A2638A2BBC03136
SHA-512:	449683E6A927848F403214C49705A91D54A880D4DA605F2E7B3FC52BF178C7475CA6131FAD823A6AEAD84A1EB4A3E0501B122900C97241CE620AB45330861F12
Malicious:	false
Reputation:	low
URL:	https://pi.pardot.com/pd.js
Preview:	/!..Marketing Cloud Account Engagement's Engagement Tracker Javascript - 2023-04-13 11:24:47..If you're an ad blocker, block the URI only. Don't block the domain../.function checkNamespace(e){for(var t=e.split("."),r=window,i=0;i<t.length;i++){var a=t[i];r[a]\|\|(r[a]={}),r=r[a]}}function getPardotUrl(){var e="pi.pardot.com";return"string"==typeof piHostname&&(e=piHostname),("https:"==document.location.protocol?"https://":"http://")+e}function piTracker(e){if(checkNamespace("pi.tracker"),pi.tracker.visitor_id=piGetCookie("visitor_id"+(piAId-1e3)),pi.tracker.visitor_id_sign=piGetCookie("visitor_id"+(piAId-1e3)+"-hash"),pi.tracker.pi_opt_in=piGetCookie("pi_opt_in"+(piAId-1e3)),"false"!=pi.tracker.pi_opt_in\|\|void 0!==pi.tracker.title&&pi.tracker.notify_pi){var t=piGetParameter(document.URL,"pi_campaign_id");null!=t?pi.tracker.campaign_id=t:"undefined"!=typeof piCId&&""!=piCId&&null!=piCId?pi.tracker.campaign_id=piCId:pi.tracker.campaign_id=null,pi.tracker.account_id=piAId,pi.tracker.title

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1936 x 972, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	97998
Entropy (8bit):	7.992790908914006
Encrypted:	true
SSDEEP:	1536:fdGQEUWCltkpVVCmsbTBGbHxGrDw6UvD33GNBBih3IEiMa93d0z+siyg0BEv6TEH:fNQCkBC1lQs4rr3WNBiiMa9t0qsq0BE1
MD5:	D622529FF1939BCC7E33B66450CA52FF
SHA1:	0B72366A84B4830171FDD872A66BD65663456735
SHA-256:	2DC2E295722F8DE00C2FA33BC555E0D1BB5DE8FA06125C60BBB371D49F2D82F2
SHA-512:	0FC1DCAA6C32997155F2EC878C6FAFC461EB7E80B5FDFE1BA4ECBFAC8355B2AB16EE90E78C4869AA553894CEB977F39AECFA3D556671FBD38B405F52388586E2
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/graphic-map.png?v=8
Preview:	.PNG........IHDR.....................PLTE......\|\|\|~~~.......uuu...............{{{............................\|\|\|........qqq......{{{............................\|\|\|......................................................................................................................................................................................................................................................................................................................................}}}............................................................................................................................................................................................. !!!... ___444JJJ.....aaammmIII..............................xxx888DDD+++kkk...rrr/.......tRNS.............'..0.."...%...E....",K.......*T...4>[...A.\|W......8....P..^wr.me.....s..x..E.mP.._k3{;.....A.}..c..K<.X.H.........g.......7....g.N.q...6.S-.......r_.....

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4207593&time=1727807679917&url=https%3A%2F%2Fwww.quinnemanuel.com%2Foffices%2Fdoha%2F
Preview:	{}

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	69694
Entropy (8bit):	4.663824620780257
Encrypted:	false
SSDEEP:	1536:SttRcZczYl277tjBbcAb33f4B5H6w1R1pzP7ehSk7m:SttRcZczYl277tjBbcAb33f4HLX1pzDx
MD5:	19AC38CD25A8F97EC57F6565AF8FB499
SHA1:	1BA415AC2F25FF53E13EA2CC0E8068FD9BE103A4
SHA-256:	BF8050693D044179BCF2EBA40718BFEBAEA021811DA225A5A494077250D3FBE9
SHA-512:	63467A2834996BB88E86FBE185F3964347CF3460051138ADB787B863509B0A951AEE8F462D40E7D48CEE2DEA939EE8F133C37E9DCE4F3AD01703D3600FF15149
Malicious:	false
Reputation:	low
Preview:	{"v":"5.5.8","fr":29.9700012207031,"ip":0,"op":150.000006109625,"w":800,"h":320,"nm":"Quote1","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Shape Layer 1","td":1,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[400,285,0],"ix":2},"a":{"a":0,"k":[0,0,0],"ix":1},"s":{"a":0,"k":[100,100,100],"ix":6}},"ao":0,"shapes":[{"ty":"gr","it":[{"ind":0,"ty":"sh","ix":1,"ks":{"a":0,"k":{"i":[[0,0],[0,0],[0,0],[0,0]],"o":[[0,0],[0,0],[0,0],[0,0]],"v":[[143.971,-12.93],[-143.971,-12.93],[-143.971,12.93],[143.971,12.93]],"c":true},"ix":2},"nm":"Path 1","mn":"ADBE Vector Shape - Group","hd":false},{"ty":"fl","c":{"a":0,"k":[1,1,1,1],"ix":4},"o":{"a":0,"k":100,"ix":5},"r":1,"bm":0,"nm":"Fill 1","mn":"ADBE Vector Graphic - Fill","hd":false},{"ty":"tr","p":{"a":0,"k":[10.971,-32.07],"ix":2},"a":{"a":0,"k":[0,0],"ix":1},"s":{"a":0,"k":[100,100],"ix":3},"r":{"a":0,"k":0,"ix":6},"o":{"a":0,"k":100,"ix":7},"sk":{"a":0,"k":0,"ix":4},"sa":{"a":0,"k":0,"ix":5},"nm":

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5481
Entropy (8bit):	4.50239433017837
Encrypted:	false
SSDEEP:	96:Qd0ZTQ3jPOVeNUa909QSPDMaCWMCYVmfvIsuUR:LETmVKx09HYaCWMpMvtu2
MD5:	A49AC36C3FF04EAE4A5B46A348DD5353
SHA1:	96E5084B727868C7B592686D2BA320255033E040
SHA-256:	6A578DB165E9D287C8E07CF0D997F9DE95795733EBD20D67E253CE267654C579
SHA-512:	4FE7F83FC939CC92D319AAA55877C0D997AFEDA8A0B4974A78367308CBF537C9D1D52A30C690D86148972A442EFAFF3E7852FDB9A938ABFDDB5CD71F382B950C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding.com/sketch -->. <title>A72BD116-5407-4E27-B525-37908419402E@1x</title>. <desc>Created with sketchtool.</desc>. <defs>. <polygon id="path-1" points="0 0.00630952381 19.9936905 0.00630952381 19.9936905 19.997619 0 19.997619"></polygon>. </defs>. <g id="Welcome" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" opacity="1">. <g id="Homepage-v3-London-Copy" transform="translate(-735.000000, -3158.000000)">. <g id="Group-2" transform="translate(0.000000, 3132.000000)">. <g id="IG" transform="translate(735.000000, 26.000000)">. <g id="Group-3">. <mask id="mask-2" fill="white">. <use xlink:href="#path-1"></

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	dropped
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5453)
Category:	dropped
Size (bytes):	5620
Entropy (8bit):	5.200998355308952
Encrypted:	false
SSDEEP:	96:3DvZ6XcSBguSMe+8gGVU74cgqb6Ys7v4/q1ykQ7KjcBWXDylZP259N8gvwx3Ug8:zvZMcSy/PglLiZBQ7KIBW2lZ259Srxh8
MD5:	0C0335550002DC4C4DB0DE1D9DCF043D
SHA1:	0BD0357FAA46E9FF78D939B196D43ED47C701160
SHA-256:	41402ADFC915AD6DFD6328C06C8038763D25FE603E63BEBA4A2638A2BBC03136
SHA-512:	449683E6A927848F403214C49705A91D54A880D4DA605F2E7B3FC52BF178C7475CA6131FAD823A6AEAD84A1EB4A3E0501B122900C97241CE620AB45330861F12
Malicious:	false
Reputation:	low
Preview:	/!..Marketing Cloud Account Engagement's Engagement Tracker Javascript - 2023-04-13 11:24:47..If you're an ad blocker, block the URI only. Don't block the domain../.function checkNamespace(e){for(var t=e.split("."),r=window,i=0;i<t.length;i++){var a=t[i];r[a]\|\|(r[a]={}),r=r[a]}}function getPardotUrl(){var e="pi.pardot.com";return"string"==typeof piHostname&&(e=piHostname),("https:"==document.location.protocol?"https://":"http://")+e}function piTracker(e){if(checkNamespace("pi.tracker"),pi.tracker.visitor_id=piGetCookie("visitor_id"+(piAId-1e3)),pi.tracker.visitor_id_sign=piGetCookie("visitor_id"+(piAId-1e3)+"-hash"),pi.tracker.pi_opt_in=piGetCookie("pi_opt_in"+(piAId-1e3)),"false"!=pi.tracker.pi_opt_in\|\|void 0!==pi.tracker.title&&pi.tracker.notify_pi){var t=piGetParameter(document.URL,"pi_campaign_id");null!=t?pi.tracker.campaign_id=t:"undefined"!=typeof piCId&&""!=piCId&&null!=piCId?pi.tracker.campaign_id=piCId:pi.tracker.campaign_id=null,pi.tracker.account_id=piAId,pi.tracker.title

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	264822
Entropy (8bit):	5.573596647881103
Encrypted:	false
SSDEEP:	6144:/Mwn+yZCNvszjrvBB9Tch2+4jRelVcwOuwGW:EvuCNvOQON
MD5:	2E8302F3148BA56B764C8DC02D8570FD
SHA1:	EA8133ED0CBDDA8305226166DD400BA7A935FAB8
SHA-256:	CFCE32E63885D31FF0FD3D4706C625AD4F362771884E7A2915753A040119706C
SHA-512:	E77C1C465A926CA6FCA5C248DF1E565BA99ECA6B62DBD8F0476885A9952C8CDAB58087C5623CFE1E0FE06CD2422433FA9792489CB2A3D5916B30EC01B3E73829
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-MXPGK97YYN&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2880 x 1100, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	971903
Entropy (8bit):	7.994023793990077
Encrypted:	true
SSDEEP:	12288:si6ETA7nvgSX8dl4MxNKLaeLScJzibl/4bOYL3XpVeOAQt1jaT3CzjB1yifVlw:bVUzXsoMXKLarEF5Ve7Q7aOHysw
MD5:	51CE083D73DEAADB29E8F24503464857
SHA1:	0084926736A1E41B64D6B52A3CA583AB5409F101
SHA-256:	5D88F6D24A81A6A6B4157AE0840DBCE95B3793F3A0725E37DF8C74733D9387E0
SHA-512:	C4720849EC96F429270F2EDF59F620A3A951261E903A7F33FE225B4611E42ED95ABB4926D2DCC250BEFAB6D011C54FECC702FF46653E39901B9086C8C371128E
Malicious:	false
Reputation:	low
Preview:	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y;KP2>9,@ELJCCLLNE8F@2...VQD;E<..m_S@e\FYN7DIC..c.....t...fX=CBB..eON;zpRthMnbC[YE_\N..`ESR..kLPLVYO..m.uNedPUK?xdAmiT..Y.tX.{S)-}jJ.{`OVHNYUxu^qpXp\9YaUn`L.}WFQE..g.((..z.oDci\dQ22N\...RF,32(..xB:)..X.....L.wCy}hjrd..s?W`.j6Qcdk\|{.......IDATx..Mr.@...zko....B.Hy.....OU....Z4..}....PK.n..q&..B.!..B.'..c..v.d....'D%.u&..0.D..v....)1}.%.H.....N.p..:...B.a.TqS&....?<".s.x}`<v%....%...\I.R..O..;P...o...o..=..?l...

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1176 x 661, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	667068
Entropy (8bit):	7.9921151314210706
Encrypted:	true
SSDEEP:	12288:HyPxNwE9KQc/pV3He5oTvvqsstqyA89CKZ74i5rkUqYaIBcs2+:QTwQ54PHFTqssQyPf4ArkUqu6n+
MD5:	C8626FEA64F45FA641DAD729E659EE2D
SHA1:	A016D5FDDEA080C6873AB5F030FA69EB5D6A28A8
SHA-256:	FA307155A2D9ADCE31861FB56547B847452AF1CE226EA799B11EC72154907263
SHA-512:	F8DDB6F71C51174B2A86015A7A2EDA7B9CB71FAE900052F30D0CDE1C57843EE00B3FA4393D6C2A76EEBB4031744DF9730BE94DD0425B2BA045F34A7779835B4B
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/media/bccfwzuh/data-01.png
Preview:	.PNG........IHDR...............QT.. .IDATx..{.m.q.V.....3..pF.I..EJ.. %.AI.,A.l..m..d...8..9@>..1.......e R E...D.5.........^k..9...j..Z.......]].......;=8BD "@D....=.'.......A....G-.K.E.m.L....@DIm.."!...r0.-.P.c-..0..V.D.,.f.@.z.Lk...E.VnW?.uA`..Pm.~.h{L..(.U.....5e....6....?.x...........T...^l....l.j.U9.......Q.....JB..S..@....c.n.....y.[.J...d.............~......".)..T.'B..N,.. .[...i."/e\|h...yK.....)..'.A..sz......K..H..<..Bg.D....8.....n.-..\...\=..s~...+....5.'}.\|.(..}G.M.I....jh......A.,-...@S.....HD....c.].]...)tu....]..iiQ.F..~....c....%.Y].....Q..`^\.k..Py.b.b.$..x...7.aq8....z`W..2M..u..A...EN/..+7."p.>...}`.n....)2-/...O..A.!..$3...V.....71..t.$...;....q.3\<...aP8..9.d.........5Z.ko....$3Zzr8.q.z.T.`.4.d..T7.0{J..<........[`).?......@...#`.E:....p....<.[......."..].t).....M;...E)B.~A..K....kj.5._\.3..K.A......+...!.+..Lj..".A.....S.......*..xG.A....G<.l..5 ..\.p2...&.V......W.:.....5\|..H...C...+.....r\I+...

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	153
Entropy (8bit):	4.7470003948174115
Encrypted:	false
SSDEEP:	3:YRM9HfHFw65v0NMGAh8xLERDWgRnU/iEhDEgAVMxDV:Ys/lw+0NghPRzRU/RVmaDV
MD5:	229052B37E8ED63856F69D1F5D45E634
SHA1:	DE408BF93DDF318DBAB9B031233110B2FF6815F8
SHA-256:	D59FA87DCBCDB2132316F7F66B835AE54C0D0EEDDD82219C14CCE4BB5700EA25
SHA-512:	B16A51B16FBBF979BA93D2C16636D026D579C26011C72C782E7DD4799E9803B6C0A1771619C7326BDD2EB6C4E2462E08B85B3257E48643CE084ED3BF1095161E
Malicious:	false
Reputation:	low
URL:	https://cdn.acsbapp.com/config/quinnemanuel.com/config.json?page=%2F
Preview:	{"time":"2024-09-04T05:42:27.390Z","specifics":"","addonAnalytics":false,"blockMeta":false,"blockImages":false,"blockStyles":false,"widgetSettings":null}

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	1880
Entropy (8bit):	7.870626817139743
Encrypted:	false
SSDEEP:	48:OLAymClrPt+/LQx+AVM4aphRq0A5xo83mp:hymClOwPM4ap/Gbo82p
MD5:	56666907A7B890B83F09B8F1F0BAE8B5
SHA1:	E81BD5CF0F9C081388CE53C24EAD87FE63EB1D85
SHA-256:	FBA32179ABBB85B6AFBDFD5CF6E4D1DF40082C7232372F0F6EFF9EEBB292E3CF
SHA-512:	CBCDDF8ABD5BF1EF0ADF76099974E8E4C8F4E5C749D058F91D205ECF2F4095CBC02ADAB1755339C2E5DAC7634A1EDC0DFAABB6EC07A237155181C0089A0D6681
Malicious:	false
Reputation:	low
Preview:	RIFFP...WEBPVP8 D........*x.Z.>m .M.!$$.P...g....Z...,.h..>?.....u..O......@...g...O:mH.R....-.?..S.....7..._i_N.....k.......?.d...X..../.......CzW....9lP.tm.`..d.].;x.L..D?}$.Z.8L..n...& ....z.wH.I....\|.E[..\|k].nq.(6..{.k..9X..u..L>...Ee0." U~.N,......C....m..+.~.._@.....e.....M}s~....uf...E..E..>.^h.HL...Z....s..B..f..B..&\..;....I..;.....$N.4E.!.C."7/z4.K..Gb..6.:.5zn`.7.i.T..$M2^I>.+.....i.........._~\|..9..:..O...J.E........m..m-..w..A.g-..T>h...j...=j....k..y....g0V..I=..jH..o....v.4=.w.6P...........S....dT.D..C0......4..............I/.3...8k..G..XaHV.oQ...h.Vb..;.....6..+(..G..u.W..#9Axl.".......5..,l..7.....>EN....4.n:.6.B.u.....4..U.4>...\H..p5R.}.K......ae.\Z9.C../...Q).$.`.J3...../.dK:.....p6..M.. .aF".<.N..]...]r...'...V..../.4.R7.d&k.v.\|.....XGT\|....a.ac...:-.T....d.....\^+s.l..8........Kp.T.....%.-.....e:.+.a>....I..1<...X...l...$.7..C...y......<...}..=c.i....$j..7.=.~..I?].1i.b.......t-....P......O].P..Z..&.....y.E....aX..3.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 94337
Category:	dropped
Size (bytes):	42084
Entropy (8bit):	7.99323226114822
Encrypted:	true
SSDEEP:	768:1v6Z/eYrTkA7HYmyaDkk/Di4T2Yv/eiXwXyJYLwfVfsKJqroV:NSeETH7Hbyw/Diev/BXJJYLwZn9V
MD5:	465E10ECCE6684A330F79EBB313C06D7
SHA1:	A0DA2CD5493027844090859A22C44155E1029B71
SHA-256:	0035884AC8B31405CD20B78F2D03219D8580AE8A987E8719FDD197126BC0D1F6
SHA-512:	C3A18C3E304A23ACEA3D600D998A365817282C37B7B36DD1131F80456A00382A24C0B4153D11D3D2E3237B779F2BA61117F33E528898D64DABE992F51C441A75
Malicious:	false
Reputation:	low
Preview:	............k{.J.-.Wz?3.mwy.t..5>=.l@.b....s.t..$.R.....OD..Jv..~...z....DF.X+2..2.....b.&..b?}.3.5...1.Yw.w..[.=\..?7.+.}!..19..k....E:..V.....oU....3c....Wk..,..W......pP.W.`L......tk(.v....2...&&:mQ.B..1Y..q.....7^.m.b.+....Z......./..9N./...o.....i.\.C..Y.Z._M....\g^...cueuW}{..CQ.oo..........B..m...6nZ...2.........<j m.6.8...1..F....,x~q..w.k.Kn.wh[M....'^-7....%.F.Y0d..gY._..mL..&...D}C..[....-_D..Q.......^.....z..q^...=...tP...s2F&..;.t..../.U...9u..60.Z....n...2vq\|-....2....F../...bi[...u...ZZ-j7Z.........cLp A+..j...5i...1oh...1...{..c..zAD.G.[..7F/...?.`.o.....V..u0&....t^_..^.o..k~....v....Z}.cT.gc.t.W.B.e`....J....8..{.m....*.g..k!.Y.;.#..N...k.c.......lMk>.7.V7.-...g...v.O.=.Z.K.........:.....[z..i.....=.O..V.........._W.{...`...g..V.....x^1..=.F.z...Y.[.U.....A.7...j......J.{\.aj.G.O...,...o.?..w.......[K?\|....16\|c2......9..C.L....`V...&..{...6FC...]j[c$#"Y.r.Q....6]..9....W.\..m.n..9%.\|2..AfC.m.1^..zm.[......1.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20377)
Category:	downloaded
Size (bytes):	327427
Entropy (8bit):	5.5498892399019955
Encrypted:	false
SSDEEP:	3072:nFkUeQ65WH/6YJKQK0+3zOhOJjt+/Kjrv+aUPim6NIh7R5Ezch2+4jRHjmraa9:nn+yCceyGjrvzSCIhl50ch2+4jUT
MD5:	D00257BE3FB5882A45BF1A3DF110E0AE
SHA1:	D7C0828DFAAAC34008AB7FE6ECFFDDD7DC2CBE10
SHA-256:	6E0A536723FD1A00A4358B3B460E7DC9799C54C4F421BD480D1D2AE429574A8C
SHA-512:	F653C1A3EC25C77C03F242A7FB3D6CEB172AE5A92EF3DF7DBE7B1F058D4B20C22D3D0BF4E26F636686DA0ADD55434F9B2922D1824389514B12FA5BD2B1EDD315
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NBGL3QC
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"13",. . "macros":[{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-17720203-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"f

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	5.627376897065431
Encrypted:	false
SSDEEP:	96:kSLyPOAiD4joVro2OotO4GvKKKPf/9VhjjSlqJPAAAADA4bMut9q:0PN9cVk2xtZUKKKPf/9VhjIePAAAADAb
MD5:	4C869F5FE69C19227833A37DF3106F05
SHA1:	8BC0696115298163E7FEA2316F626EA7831D0AE3
SHA-256:	D421C1B52057AEFB4C0251C75D8C92EB0DA8BB8F14B527F23E69437A10020A73
SHA-512:	2A06F9208E92AFC140E88C01E0C3393AA1143623F547DA3D59A8DE2BE76D0301E11708482833BC9097135385D18CB91A5CEEE07DAAAF66F026B39936ACCC5B03
Malicious:	false
Reputation:	low
Preview:	...... .... .....&......... .h.......(... ...@..... ............................................................>...`...`...`...`...]...H.......................................................................................................U...................b....................................................................................................m..!...!...!...!...&...W......:...............................................................................*...2...-..."....m..!...!...!...!...&...W......:...........................+...2...5...-...................................$...`...r...g...M....m..!...!...!...!...&...W......:.......................D...a...p...y...e...G...&.......................qf..N...I...L...U......qL...!...!...!...!...&...W......:...........8...qo..W...N...J...G...L...U...e.....~...)...........0o..+...!...!...!...$...l..;...!...!...!...!...&...W......:...........Ul......!...!...!...!...!...!...+...X.....<........m..@..."...!...!...!...!.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (751)
Category:	downloaded
Size (bytes):	77247
Entropy (8bit):	5.164243104416516
Encrypted:	false
SSDEEP:	1536:OaBrJ3Ktec8X/hkulqsZHeGpWzAz6lbw7d0OJ//PbmlEp4V2Qn1TztBoKDdFgWUq:O5+sp+oSEhKNU
MD5:	553CD8FDFEEBBB93E27F4683FFFEFA6F
SHA1:	5ED56FD8B129061382A1BBCB84B846B31BE4E905
SHA-256:	420222FDCDF127B6D20F05D57C46C8DD4BB3DCD5232E4C9A896AE73DD740AC4D
SHA-512:	3A02273C6560F95804075B57E47C6B89C6E1D49486712EECAA7FDE8CA997F9A11EE04004996FDC2E17ACACC2742F8EAA93B4FED60B0FC3F64DF702059C9E6DE5
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/offices/doha/
Preview:	.<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="utf-8">.. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <meta name="format-detection" content="telephone=no" />. <meta name="google-site-verification" content="tFjkM15kqPyBnUNW-LYSgstILkvq1Bxn6Kz3aTUfN_I" />. <meta name="theme-color" content="#a3bb05">. <link rel="icon" sizes="192x192" href="/useradmin-icon.png">. <meta name="ROBOTS" content="ALL" />. <meta name="Slurp" content="NOYDIR" />. <meta name="Slurp" content="NOODP" />. <meta name="msvalidate.01" content="D192DB59B1D0AF1E751FE67445203F70" />.. . . <title>. Doha. \| Quinn Emanuel Urquhart & Sullivan, LLP. </title>. <meta name="description" content="Quinn Emanuel has offices located around the globe. Contact any of our locations for more information about working together." />. <script type='application/ld+json'>.. {...."@context": "http://schema.org",...."@gr

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2664
Entropy (8bit):	7.908397048527254
Encrypted:	false
SSDEEP:	48:8PvRIcEmTQrR94BOA90oMkSaSajhqL5PDan6OzpEHKgXyama:8PvRIDmTo9A90ywLla6OWHTyam
MD5:	AD3AB78DC032B9F6A4ADC29D807514F5
SHA1:	C0F3015C4BFF1A3A4553E96CF33FCB0979E9F99D
SHA-256:	DF709500B3FD32ABA7D463788CA803D4FF55875084DC16799C9BAA7649D95665
SHA-512:	1289B2C60DFAAE6EAF97D99D00C7CB52474910FEB4E45A89C6ACFBD1E496C2A943049448C64BD8B786C7C139DA2E06D3B2039AC250B9B25DA9B2663EF4E2CDC5
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/pD218Mqhqms/default.webp
Preview:	RIFF`...WEBPVP8 T...p+...x.Z.>m..M.!$$.P...H......^..~e.?.z........._..Y7..J....>...y..g...Y.....k.../.=@...#...;U4O._.@...g............/..K...B}..?....._.=...............^.^..m...S...5-..^X.....-...g..?G..9.y.v....c..v.ib...k...O2.m.S..-..]..............>../2?..\|.D......4<.m...i.......M.r..Z...s.Y .[7.f...s?>.0.j.1.% :'^k....O.#..p..q.8E.8.E..-....w)}p.@.....O3..O.k...6.j.O...q.E.Ig...K.vn..!O.U..p9.(.s=."...%>...6..` J...c.)..V.PY..r..$....}u\|.....8..5....k.>Kn...g..kLod0.e.B.n@..H.. ..?...H.E,.RS...(Z..;b...+dG.+.W....B$M......y......;$.P.....(...!m...v.j...].\|LGQ.d...(-..2a.0..+..e4....r.....J<.....'D....s~.&'.R....].....Y./...=.kf..E..S.....L..+.p\|k...?._.....2.1.X..........,z.=.Lz$.......O%.........%tQS27..o..('...r...=Uy.u..k..y..`...z.WW..S9.!e..m@...5NW.k.}.\|.>?..X.e.,.K.$..Z.).e......]....oUeT8.dr..!s8.6L.}....s"-J.7.#...)..P..o*.xo5.m....W..4N...h.B.>.....?.....x...}.\|.<..wI2A..W5.O.....^.j.v..+.'.q..9j:V.As...Q.L..hj.8.......

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	120870
Entropy (8bit):	5.458375657777695
Encrypted:	false
SSDEEP:	3072:UHhUlOdKAJbh+gTHSOwsC+AZ8hizvuP+wo0SzP:IhcOdKARh+gTHSOwsC+AZ8hizvuP+woV
MD5:	03056576332C0AB6EB58AA7606FD2DC5
SHA1:	CC81E3C340E4C3405CF9DFB6219A8339CB23A1EB
SHA-256:	3D546F0C69AE0BA14F09290F45BFCC5EDCFF6FC36755BA00EAE768830DD3AA4C
SHA-512:	8FBB940263EC41C8554C074A93457C2341987D8037598564C9E12222F813CA2455C9DFCCE8D98D91C5084AC685E9978A5F9780CB76531AFBDCE49AFE7B100BA4
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/d9418494/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var e7=function(a){g.zk(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.Ya()).toString(36));return a},f7=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.eha(a.D,b,c)},Grb=function(a){if(a instanceof g.ln)return a;.if(typeof a.Hm=="function")return a.Hm(!1);if(g.Ra(a)){var b=0,c=new g.ln;c.next=function(){for(;;){if(b>=a.length)return g.q1;if(b in a)return g.mn(a[b++]);b++}};.return c}throw Error("Not implemented");},Hrb=function(a,b,c){if(g.Ra(a))g.kc(a,b,c);.else for(a=Grb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},Irb=function(a,b){var c=[];.Hrb(b,function(d){try{var e=g.Lp.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.ima(e)&&c.push(d)},a);.return c},Jrb=function(a,b){Irb(a,b).forEach(function(c){g.Lp.prototype.remove.call(this,c)},a)},Krb=function(a){if(a.oa){if(a.oa.locationOverri

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	dropped
Size (bytes):	220363
Entropy (8bit):	5.5445243595091736
Encrypted:	false
SSDEEP:	3072:5iFkUeQ65WHenJKQE0+3zOhOJjt+/Kjh+qmOWzch2+4jRJGZZ9:Yn+yMgyGjA/ch2+4jqZ
MD5:	BD256545FC0DAFB555D5AFCABFE5BE51
SHA1:	1445839FCD31187134EB049F7D57585D4B2C2694
SHA-256:	D38FD57521EB5E7C9960406CFDC123DDE6522C673DC519DA70DEA527EED6BDCE
SHA-512:	CDFCFCEDE16976E2F65ACF9929FA213F12B1E0AEC82B3B1232187F95B1192E92A4B1DF11A75646334F70E421B716B28DD9ABBE7FE046B8A397909D1895A3AEF1
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":10},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-17720203-1","tag_id":13},{"function":"__rep","vtp_containerId":"UA-17720203-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-MXPGK97YYN"]],"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-17720203-1","tag_id":12}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (789)
Category:	downloaded
Size (bytes):	64839
Entropy (8bit):	4.491272794170445
Encrypted:	false
SSDEEP:	1536:O8BrJ3Ktec8X/hkulqsZHeGpWzAz6lbw7d0OJ//PbmlEp4V2Qn1TztBoKDdFgWU/:OWhKNU
MD5:	B736EAE70ECAD5A4A08D82B2F94CEA19
SHA1:	40447876015E93FC6CA00F32AFE8BE85F4CE99EB
SHA-256:	9C3449F42386B63734AFA9DFA49CE7BD33C3C74161ECEE1F4BC7E35129FADED1
SHA-512:	0C15876027D6CC2F2464751BD7664264DA309986882DA08E1F26ADBFA2C92C3C80C105BC77CDC3D5008EF79F04457CF617C4EECCFEB7154F2CD6522E987325FE
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/offices/dallas/
Preview:	.<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="utf-8">.. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <meta name="format-detection" content="telephone=no" />. <meta name="google-site-verification" content="tFjkM15kqPyBnUNW-LYSgstILkvq1Bxn6Kz3aTUfN_I" />. <meta name="theme-color" content="#a3bb05">. <link rel="icon" sizes="192x192" href="/useradmin-icon.png">. <meta name="ROBOTS" content="ALL" />. <meta name="Slurp" content="NOYDIR" />. <meta name="Slurp" content="NOODP" />. <meta name="msvalidate.01" content="D192DB59B1D0AF1E751FE67445203F70" />.. . . <title>. Dallas. \| Quinn Emanuel Urquhart & Sullivan, LLP. </title>. <meta name="description" content="Quinn Emanuel has offices located around the globe. Contact any of our locations for more information about working together." />. <script type='application/ld+json'>.. {...."@context": "http://schema.org",...."@

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	153
Entropy (8bit):	4.7470003948174115
Encrypted:	false
SSDEEP:	3:YRM9HfHFw65v0NMGAh8xLERDWgRnU/iEhDEgAVMxDV:Ys/lw+0NghPRzRU/RVmaDV
MD5:	229052B37E8ED63856F69D1F5D45E634
SHA1:	DE408BF93DDF318DBAB9B031233110B2FF6815F8
SHA-256:	D59FA87DCBCDB2132316F7F66B835AE54C0D0EEDDD82219C14CCE4BB5700EA25
SHA-512:	B16A51B16FBBF979BA93D2C16636D026D579C26011C72C782E7DD4799E9803B6C0A1771619C7326BDD2EB6C4E2462E08B85B3257E48643CE084ED3BF1095161E
Malicious:	false
Reputation:	low
URL:	https://cdn.acsbapp.com/config/quinnemanuel.com/config.json?page=%2Foffices%2Fdallas%2F
Preview:	{"time":"2024-09-04T05:42:27.390Z","specifics":"","addonAnalytics":false,"blockMeta":false,"blockImages":false,"blockStyles":false,"widgetSettings":null}

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2880 x 1100, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	971903
Entropy (8bit):	7.994023793990077
Encrypted:	true
SSDEEP:	12288:si6ETA7nvgSX8dl4MxNKLaeLScJzibl/4bOYL3XpVeOAQt1jaT3CzjB1yifVlw:bVUzXsoMXKLarEF5Ve7Q7aOHysw
MD5:	51CE083D73DEAADB29E8F24503464857
SHA1:	0084926736A1E41B64D6B52A3CA583AB5409F101
SHA-256:	5D88F6D24A81A6A6B4157AE0840DBCE95B3793F3A0725E37DF8C74733D9387E0
SHA-512:	C4720849EC96F429270F2EDF59F620A3A951261E903A7F33FE225B4611E42ED95ABB4926D2DCC250BEFAB6D011C54FECC702FF46653E39901B9086C8C371128E
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/world_image.png
Preview:	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y;KP2>9,@ELJCCLLNE8F@2...VQD;E<..m_S@e\FYN7DIC..c.....t...fX=CBB..eON;zpRthMnbC[YE_\N..`ESR..kLPLVYO..m.uNedPUK?xdAmiT..Y.tX.{S)-}jJ.{`OVHNYUxu^qpXp\9YaUn`L.}WFQE..g.((..z.oDci\dQ22N\...RF,32(..xB:)..X.....L.wCy}hjrd..s?W`.j6Qcdk\|{.......IDATx..Mr.@...zko....B.Hy.....OU....Z4..}....PK.n..q&..B.!..B.'..c..v.d....'D%.u&..0.D..v....)1}.%.H.....N.p..:...B.a.TqS&....?<".s.x}`<v%....%...\I.R..O..;P...o...o..=..?l...

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	52948
Entropy (8bit):	3.8793838396538614
Encrypted:	false
SSDEEP:	768:89NrMLoD7uCbzF8gIdy+BMMvL0wfTQw+m/QxTliw6W7hbQCgls:8T8o/uiZIdy4NTlNeLddbQCgls
MD5:	E0E37A5ADB54F970263FAA629B537BDE
SHA1:	53F6D745831F641D272200F63FFB68E775026CCE
SHA-256:	14740B6056D3E81971C5DE4901DCD1BA1874B65A3610204FDB86018CAF3D88D4
SHA-512:	A23A8A0B6404788E57F3A9DE86C5F0ADD1D3198BD5EDC89484A469AA1C15E83543B6C164496E18A64DE9A8FF6BCA5D4351B1BC4B7BBBD82A0CA5454BD2E3650A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="285px" height="34px" viewBox="0 0 285 34" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 61 (89581) - https://sketch.com -->. <title>qe-logo</title>. <desc>Created with Sketch.</desc>. <g id="Symbols" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Nav" transform="translate(-136.000000, -21.000000)">. <g id="qe-logo" transform="translate(136.000000, 21.000000)">. <path d="M3.246264,3.2581656 C3.862548,3.2581656 4.429584,3.3963336 4.948056,3.6726696 C5.467212,3.9490056 5.941224,4.3669296 6.370776,4.9271256 L6.456276,3.5495496 L11.28258,3.5495496 L11.28258,21.9812976 L6.370776,21.9812976 L6.370776,18.3793536 C5.89266,19.0784016 5.452848,19.5182136 5.05134,19.7015256 C4.650516,19.8834696 4.153932,19.9751256 3.562272,19.9751256 C2.703168,19.9751256 1.991808,19.7719776 1.428192,19.3670496 C0.86526,18.962

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29188, version 1.0
Category:	downloaded
Size (bytes):	29188
Entropy (8bit):	7.992870460573762
Encrypted:	true
SSDEEP:	768:8o1Co5FuV/eixGB9Sht8UPhXadlCB8SLs4:f5FuV/eBBUAU5gCB8SLB
MD5:	69279AEF7FBC11101022A9F06079BBBF
SHA1:	44118888E95417ADCD5DA115CDF1FC23E8DE85D1
SHA-256:	76DF5B67646F4F0F999D4E1C482AB2007B948F3B9ACC2C8A207BFDB214103855
SHA-512:	AD3131D86AC21D34C4899927AB2E7834B30C540C94CBF26DE472BA1B0B40ED8B001893731101FEA7AE8435F5AD754A998DC17B543A078AC18BD3851EBA18A569
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/fonts/Lato-Regular.woff2
Preview:	wOF2......r......./...q.........................?FFTM....v..j.`.......e.....p..k....6.$..<. ..#..`.K[..Q......l.....m'..e...l..5.v.N.. ..OJrT......9.21l..Jb...X..Uc.0kWB..9.N........36z^_(..w..3.....e.UD...Fuc.0n..c.}GR..zt...... .=........&..m......i6.n....G.G...f...2...G4.'#+.h%....{`.....a.IyB.....Dta."I....a./;......B...@$N....G..^m......m.Q3.T1AEP...(ABI1.PD...=..\8u...t.}.....1...uU..l..(..........s....m..C.O.7.N<'^.I..D..`....p......,P..C.....w.....#..0.IIu...w..b..%V..RQN...P..2.L5..bZ...Cl....?R.u...h...wT.BC..`V.r..........Z1L>x4.$......\|..8l..@.....7x.O.....~..:M.wO?.w.B..7..!I.&J..^....@..#....\.doy.,.\.~.im."2.y&...........&.....%....!.._fx...i....}....A[...q.........%........(.]..WIAi.NS...Ov...tV....D\|.........j'....p@#...../.....>..B.t(.m.M.T..bQD<.$D..Et.u....V.....$ .HE]..SXa.0>..1U._....[.........f..I.......,Qw/.e8...Y..e.\|..@1.{g..3.."t'..w............N..)IN.%A...K.....7s9of.j.."....E*.....7..P. ...>$7..v...h.v.+wv..s.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1140x640, components 3
Category:	downloaded
Size (bytes):	29731
Entropy (8bit):	7.647474228837758
Encrypted:	false
SSDEEP:	384:PwT/UBJ1NLG+ofzLECsgrohzVbwe8VIMqdpEMbnCoGEYaMiRYpUHJBpr2mAopFO5:PGMJnBwFVIMw/bCoGtNpw6mdpFDVK
MD5:	EE7159C69A3876DF71653A36F89EA39C
SHA1:	E83735512ECC4B9D4ED468F1E09B36E19E00957F
SHA-256:	DC27858173A0FCE1A8C83ABBF5AB22FC2DFFA481B902776224A0D77716F5F887
SHA-512:	4F67D100E05F3977969D9A8D06C66CC65C70AB4486E39C243B1340DEC0DF354E9550945E71456DC7A0F61D2592CBE3260D5E7A8B0673ABFA678E4CE742EB1342
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/image-johnquinn-combined-hover.jpg
Preview:	......JFIF.............C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333........t..........................................7..........................!1Q.2"3ARa.#BSTq.b.4Ur..CD...................................................!..1."............?..s..n..[.C.../2. <...^e.P.e.@....?6...P8...U.2..KL....QQ... ....8... .... ....".e..Tf....3d.....~...\|..@..7.dS.Fo...9....a.99...`Trs....Q..G.lAQ.......9<..X.........?#...i....(..?...O/..".r....._/....g/...G3.................`8.r...`Ts.....C....q.<..X.89.......r..{.Ui...2QQ...%.yy">.(...9......'...5Q.x.#..........._..G..\.....\.u.......?35..5..+......!..\|..Aq.'.M....l..?+..o".y.....`......E.9.!.............B.........r.J...B=l9.Z..2M#.2...$.+.....Ri...Q.I.y..o.Ss\.:.>\|c..dU8......EG......C.....9..<k.?..(....:m..^.....=rY(.vo.%....V....l.........\N<...>g....8./......q........y3...uW....u...f....V.r..d..?;......>'.;..dH...)._..

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 2880x620, components 3
Category:	downloaded
Size (bytes):	122179
Entropy (8bit):	7.89130116266792
Encrypted:	false
SSDEEP:	3072:40k0TUOu4kwHVfPzBrLP6jTB/4VkWvDMg2VYwwlhb1W5D2Wr0MWv:7k0ywHhRLCjTtUzAYww/onr0Z
MD5:	1689DC55547BB4AFFE2470FA0D5688D5
SHA1:	D17FBCDBF00FA027D1E7238212A90714E5B3385F
SHA-256:	E39AC679B0D9C7B8473FE642104CEE02DC6606D504037FE78E9AB1EDAF2D63F8
SHA-512:	A6BDAABA9371F2D6D6A52FA1E4DBD604E3D8C10A73B64CD0BD508A7E4F0B8431913676D4F7FE443ED0091864C6AB540215D050A38FA23831063A80744AF7F00D
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/media/qzokeaqy/dallas-desktop.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	321373
Entropy (8bit):	5.493854818766851
Encrypted:	false
SSDEEP:	6144:5AOOeIqurxfiM0CCpYc4NSYYMrmgmETVFzrpQqr3K9zwrcRjI0UIBBWv9G:eObuZGpt04
MD5:	08742814270EB419F18089A9CDA3CA1A
SHA1:	D2C7101C8D2582507FA53DBEE046780C2DC1EAA1
SHA-256:	797B10B3C0390D014F5651DE778EED2167A6006CC261BBB014E8CC08464C5347
SHA-512:	0EFA219742C3861DCB72C836ECABABD13AEEE93193D2BF0976E449540A4C98B47AC88175B68440B832C65F498F6B63E717767E57586E3911B980228D8B593CAD
Malicious:	false
Reputation:	low
URL:	https://acsbapp.com/apps/app/dist/js/app.js
Preview:	!function({retentionPeriodDays:e,timestamp:t,daysBeforeNotice:i,productName:n,version:s,ignorePattern:a}){if(a.some((e=>RegExp(e).test(document.currentScript.src))))return;const r=(-1(Date.now()-t-24e60601e3)/864e5).toFixed(2);r<=i&&r>=0?console.warn(`Warning: The version ${s} of ${n} is set to lose support in ${r} days.`):r<0&&console.error(`Error: The version ${s} of ${n} not supported anymore.`)}({retentionPeriodDays:90,productName:"accessWidget",daysBeforeNotice:14,version:"v1.16.36",timestamp:1727614033054,ignorePattern:["/^(?!.v\\d+\\.\\d+\\.\\d+).*/"]}),(()=>{"use strict";var e={301:function(e,t,i){var n=this&&this.__values\|\|function(e){var t="function"==typeof Symbol&&Symbol.iterator,i=t&&e[t],n=0;if(i)return i.call(e);if(e&&"number"==typeof e.length)return{next:function(){return e&&n>=e.length&&(e=void 0),{value:e&&e[n++],done:!e}}};throw new TypeError(t?"Object is not iterable.":"Symbol.iterator is not defined.")},s=this&&this.__read\|\|function(e,t){var i="function"==typ

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	544945
Entropy (8bit):	4.850726532887996
Encrypted:	false
SSDEEP:	6144:snlKxrcQ4J5DB4ID/4QnA4Bp5pKET3QPbdtHD:ZKnA4Bp5pKET3QPbdtj
MD5:	25C6431F550AADC0B9699E4437C5E4A4
SHA1:	E3111D096D83848E5E9AD943B524D30DF71EBDEC
SHA-256:	7804FE7B3C65DE8EDA71291A48B46074F447BCBF57EE77082C2F492731BDBDB6
SHA-512:	868F6AB927B9500801B906EDE77FC722D1E5D064440DB0B5D053C8126454D70437CD0A861713ECBABEBA896B0DD386B589943720AFBBE9544BD76A1C2F8E145E
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415
Preview:	@font-face {. font-family: 'Lato';. src: url("../fonts/Lato-Black.eot");. src: url("../fonts/Lato-Black.eot?#iefix") format("embedded-opentype"), url("../fonts/Lato-Black.woff2") format("woff2"), url("../fonts/Lato-Black.woff") format("woff"), url("../fonts/Lato-Black.ttf") format("truetype"), url("../fonts/Lato-Black.svg#Lato-Black") format("svg");. font-weight: 900;. font-style: normal;. font-display: swap; }..@font-face {. font-family: 'Lato';. src: url("../fonts/Lato-Bold.eot");. src: url("../fonts/Lato-Bold.eot?#iefix") format("embedded-opentype"), url("../fonts/Lato-Bold.woff2") format("woff2"), url("../fonts/Lato-Bold.woff") format("woff"), url("../fonts/Lato-Bold.ttf") format("truetype"), url("../fonts/Lato-Bold.svg#Lato-Bold") format("svg");. font-weight: 700;. font-style: normal;. font-display: swap; }..@font-face {. font-family: 'Lato';. src: url("../fonts/Lato-Regular.eot");. src: url("../fonts/Lato-Regular.eot?#iefix") format("embedded-opentype"), url("../fo

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	783
Entropy (8bit):	7.419004852396902
Encrypted:	false
SSDEEP:	24:6Os5yUya1e1JQwi1M4U+8GTaSeDbzsDo5qyj8JMpz:6b5yUyTzQwsM4nTveDHsKqJMpz
MD5:	C54ABF61EEBFA89FC876C4549A8F7782
SHA1:	D73A00A5DD830211ACBB4B41FC228A10D601F8DF
SHA-256:	3629A0EBDB8A5C42AEEBEAB41CA1FEE069D0C599989792D7E800F42E4C1A7C7C
SHA-512:	9CB22770E8E87DD76D2C745F86E66C6CEED61A9D271122C9462AB280EC8075E2C40718005597A0B90979CDBF022C435E25C77B706FBA967C470318A22C2E78C9
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/search-icon.png
Preview:	.PNG........IHDR.....................sRGB........DeXIfMM........i...............................................................yIDAT8...Mh.Q..g.f.$T..".......{Q.j..M.."V.^D..R.....D/.D.%1......')U".F..m.tw..H..l..M............w...s...,.G@..%.....s..r3..'.6...,L.....~...2...p...9."..w....J...O..'.G...y5.LdF.....v.....e.......D.Y.e...dtn...sv..c.s..R.'....sd=.a'Y.V...#.N6....y.y.E.C..UHV.....BLv...U..\.0.....&.'^.../.......]..4..[.......O...}. .RA...B..b.......;C...~.t6..p_.#...H.1A..............x.FB......b.h..,m..%?.v.^...'..7C^-..).g.u..i...... ...6..%pU..O.z...V9..(!Y..Cl.S..8c....X..^.t.r..q...9c('c..%..r.o....+!5..R.gYu._..V..n...yNU.......s.j.c.......\|\{...2......_..DI.b.]}...`.h...?arS.NkO....Zu..f6.r.M<.5./..H..?K......IEND.B`.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	dropped
Size (bytes):	120870
Entropy (8bit):	5.458375657777695
Encrypted:	false
SSDEEP:	3072:UHhUlOdKAJbh+gTHSOwsC+AZ8hizvuP+wo0SzP:IhcOdKARh+gTHSOwsC+AZ8hizvuP+woV
MD5:	03056576332C0AB6EB58AA7606FD2DC5
SHA1:	CC81E3C340E4C3405CF9DFB6219A8339CB23A1EB
SHA-256:	3D546F0C69AE0BA14F09290F45BFCC5EDCFF6FC36755BA00EAE768830DD3AA4C
SHA-512:	8FBB940263EC41C8554C074A93457C2341987D8037598564C9E12222F813CA2455C9DFCCE8D98D91C5084AC685E9978A5F9780CB76531AFBDCE49AFE7B100BA4
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;'use strict';var e7=function(a){g.zk(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.Ya()).toString(36));return a},f7=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.eha(a.D,b,c)},Grb=function(a){if(a instanceof g.ln)return a;.if(typeof a.Hm=="function")return a.Hm(!1);if(g.Ra(a)){var b=0,c=new g.ln;c.next=function(){for(;;){if(b>=a.length)return g.q1;if(b in a)return g.mn(a[b++]);b++}};.return c}throw Error("Not implemented");},Hrb=function(a,b,c){if(g.Ra(a))g.kc(a,b,c);.else for(a=Grb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},Irb=function(a,b){var c=[];.Hrb(b,function(d){try{var e=g.Lp.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.ima(e)&&c.push(d)},a);.return c},Jrb=function(a,b){Irb(a,b).forEach(function(c){g.Lp.prototype.remove.call(this,c)},a)},Krb=function(a){if(a.oa){if(a.oa.locationOverri

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (321), with CRLF line terminators
Category:	dropped
Size (bytes):	44947
Entropy (8bit):	5.2319718177925445
Encrypted:	false
SSDEEP:	768:+sehRXO3vGRxgJ40qygWUWDrMNPcfUb72KMO:3ehRXOeRGG0qJWtrMNpl
MD5:	D6F41569445AA360A62A47C28CBC8C4E
SHA1:	9AB4F73FD49DADDB5F607A22B741EE767864AB3C
SHA-256:	06DC7A1634D059EBE8AA7B8F1F1F1076A8F05EEF219CE597C6A539095846D51E
SHA-512:	42D56FEFC9B30DE2EED4C00DBB8C2E25F6EB2A24495E75084EBF445B3CC914011BC47E405B3E68A4C2CED7CD89E4D4D39E35087EA4ED4000E85DC75810191ACA
Malicious:	false
Reputation:	low
Preview:	/..== malihu jquery custom scrollbars plugin == ..version: 2.8.1 ..author: malihu (http://manos.malihu.gr) ..plugin home: http://manos.malihu.gr/jquery-custom-content-scroller ../..../..Copyright 2010-2013 Manos Malihutsakis ....This program is free software: you can redistribute it and/or modify ..it under the terms of the GNU General Public License as published by ..the Free Software Foundation, either version 3 of the License, or ..any later version. ....This program is distributed in the hope that it will be useful, ..but WITHOUT ANY WARRANTY; without even the implied warranty of ..MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the ..GNU General Public License for more details. ....You should have received a copy of the GNU General Public License ..along with this program. If not, see http://www.gnu.org/licenses/. ../..(function($){.../plugin script/...var methods={....init:function(options){.....var defaults={ ......set_width:false, /*optional element width: bool

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28284, version 1.0
Category:	downloaded
Size (bytes):	28284
Entropy (8bit):	7.9935750578727545
Encrypted:	true
SSDEEP:	384:Hxhb+HpDg005DRgM+1KtZpDnm4otW2YiG+m0lEXlb8Wr+8KxQc6IDFYx/1J01Vz:bb+JD+Rg/+Zk4otW24+mjXN3y84ZYfez
MD5:	E29067446336B1E58BE582E29387DA02
SHA1:	84E0481E68ACF4B9956E243A43A2672F213AC4CD
SHA-256:	C16911984DCE7909E91263930A1F34352A03476A6C58894A482F33AAD91CD379
SHA-512:	DD164C11AB985D0C40D53B89819934815CE7981C4594B61714CAB0C3E8375C44A74826BF3606313AF8249824BBC58376E8AB1A541425CE1A1C2D412E9B46C49E
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/fonts/Lato-Black.woff2
Preview:	wOF2......n\|.......@..n.........................?FFTM....v..j.`.......e.....\..,....6.$..<. ..t..`.K['.q.w.l...x....lD..........q0.M.....2.....6....Z.C.;.D....b...3......Ry.P.0........TN.Lf.`.c/I>.D%...........ym.=X.e..d..n.E..q.h.......ne.7....u^4..p.Y..d..../2..//.....b...: ..S..6..b..>..~....v...x.41.. Y.$.PI.N'E...<..{.KR.Pf.s.l.@;.3.B._.J..0O.D.."O....{^c..n......w.=.o.....O..{.sU....H...1.. ....9.)U.+..g{.N...[.+ ....c'\|.\U.....Ew.....D!....od}..-......:p.....dR.q....K.)."(..[t.R.P...[.U"^..s.N......t3....- E...'....D.B...5`..L...!7-T.....v...e.2.4u....\|..d.ds.3...L.3..?U...C)..3..N...o<.y..Z).......R.'n..........%.z...D..^&V.._..Z.o....A[.jS..(.N....VU#.5Wjb..2>...N.nw....yT./TR.VR[...N>...@."'.....r9r`.}.......v..K~p..nr....<..o8...k3CE..-....L......:...L]...c.....T....@.2w.ZI.f.....2......hk......w...@..)R ).Y.r.n4.i..HI3Ki.F..w.f.Z.3.g.g........S.]..8.0.$=....T{..\...?..\(y.4....R..Km...BC...J{.....$T.D?..>".I.......`..K..pq.IHE._....

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1810
Entropy (8bit):	4.958948333487326
Encrypted:	false
SSDEEP:	24:2d6io0vLlXtaB3tmAw0nxDQDUDQnj+nLZBqsSfAyFeaxM2fJoI665CmI0mTwL/G2:c6iFDyhbof6nLZHAj665KTwDGqV
MD5:	6444A1EAE77625BE53C4E1AD1E3C7AD8
SHA1:	1CCCD1F586DA3D3BF4D436E67D5E5E0999C3A07B
SHA-256:	DA641426010D7268BDFB9709AB0F03C175FF1AE311301188858484F911931EDC
SHA-512:	A48C4DABBEFB124908C5A4AA0D8319AEA3E34E7C00F021B5A82080B09CCAA86FC6579713F56DDAE963325216F73E670DFECAE22D3A368167552FCBE31C86E633
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/homepage-play.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="200px" height="200px" viewBox="0 0 200 200" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>8A202E65-D8A4-474A-9B79-BA9EA101B44D@1x</title>. <defs>. <filter x="-101.2%" y="-101.2%" width="302.5%" height="302.5%" filterUnits="objectBoundingBox" id="filter-1">. <feOffset dx="0" dy="2" in="SourceAlpha" result="shadowOffsetOuter1"></feOffset>. <feGaussianBlur stdDeviation="20" in="shadowOffsetOuter1" result="shadowBlurOuter1"></feGaussianBlur>. <feColorMatrix values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.2 0" type="matrix" in="shadowBlurOuter1" result="shadowMatrixOuter1"></feColorMatrix>. <feMerge>. <feMergeNode in="shadowMatrixOuter1"></feMergeNode>. <feMergeNode in="SourceGraphic"></feMergeNode>. </feMerge>. </filter>. </defs>. <g id="Desktop" stroke="none" stroke-width=

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	264822
Entropy (8bit):	5.573639050552873
Encrypted:	false
SSDEEP:	6144:/Mwn+yZCBvszjrvBB9Tch2+4jRelVcwOuwGW:EvuCBvOQON
MD5:	39C3D05C718AF26270A2C5090BE21747
SHA1:	533E45ACC55E09D08D33E9B517527A9128A01105
SHA-256:	C2443285E263FC76D2D14F3228B6A9F5FB0442F59F7EEBAFF0742FC5A36D7B3E
SHA-512:	E81112A1C9C1E74ED7A7CFA037F2B40B84CE12C9A72563BA84C36475BFEFDB114F3D200EE527533C780DBEE6FBDA57909F109E00E401F33F4EBA2D3ADAABB4A9
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	dropped
Size (bytes):	2442768
Entropy (8bit):	5.604657258846942
Encrypted:	false
SSDEEP:	49152:IxtjZG60+iR0qKsTLlTUC+JhV5GJ1eKuVKGbZ71sjoG:pfd
MD5:	34C0EB65A1A40D63EFB16DBFA35D58B9
SHA1:	10CF1F8C6796290B03C132AF633C8D481904B34D
SHA-256:	5059590A454043033E983133398FA9D38D66F760E8645AE7EBC6DFFF4B063C59
SHA-512:	7567A53EABEC1721F305774C5EB7FCD0EBA5D02A9D9D4629ABD79834DB519BA03DA816340FAE0B7702266C3243A92B615AD4F888B51590481BC8701ED649FE2F
Malicious:	false
Reputation:	low
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4207593&time=1727807701673&url=https%3A%2F%2Fwww.quinnemanuel.com%2Foffices%2Fdallas%2F
Preview:	{}

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	72221
Entropy (8bit):	5.60692994394511
Encrypted:	false
SSDEEP:	1536:8xxy069bhE0PaF+0mS8QCV7nh7lI2ii10MYk/xIDJCOqmqM12e7yF4Ld2wPqRtcJ:sy069bq0PaF+0/ZiK6vtM
MD5:	B0DD92BF8A943E79F7DB99EC6E263384
SHA1:	AAE67A8D66D70F28F28E5B541117E3564F903E96
SHA-256:	CDC7E7544D983937EF60F6EA72CACAEBAF3AAE9753EE8048307A670794C9FAE6
SHA-512:	3AA8BE2F78A899BF8621CCD277ADB3556FDE13BF5CBB797C0AD958A2CD350134F13172A34DB72BCA47A9D9A13BBB8264EF881A8D011276D6AAE194E8840F7BFB
Malicious:	false
Reputation:	low
URL:	https://cdn.mouseflow.com/projects/8e58752a-4185-48a9-a4c0-1d8a0a196006.js
Preview:	var mouseflowDisableKeyLogging = true;if(typeof mouseflow==='undefined'&&typeof mouseflowPlayback==='undefined'){(function(){var _200=false;var _204=false;var _183=[{_93:"regex",_8:"(www.quinnemanuel.com/practice-areas/*)",_274:""}];var _179=[];var _20='https://us.mouseflow.com';function _7(_412,_151){_151=(typeof _151!=='undefined'?_151:'');if(_4.debug)console.log('MF'+(_4.includeDebugTime?' - '+_151:'')+': '+_412)}var _60=new _362(window);var _34=new _333(window);var _5=new _327(window,Math,JSON,_60);var _13=new _293(_60,_5);var _36=new _277('local',window,_5,_7);var _294=new _277('session',window,_5,_7);var _232=new _356(window);var _4=new _325(window,_36,_200,_204);_4._100();_4._169=[];_4._162=[];_4._117=[];_4._171=[];_4._418=[];_4._417=[];_4._71='8e58752a-4185-48a9-a4c0-1d8a0a196006';_4._415=true;_4._414='5242000';_4._159('appUrl',_20);var _316=new _408(window,_5,_4,_7);function _395(_0,_4,_53,_5,_13,_76,_36){var _20,_71,_7,_56;var _195='mf_liveHeatmaps';var _15;var _119=[];var _9

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1176 x 661, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	620482
Entropy (8bit):	7.99096629150213
Encrypted:	true
SSDEEP:	12288:HyPxNwE9KQc/pV3He5oTvvqsstqyA89CKZ74i5rkUq5:QTwQ54PHFTqssQyPf4ArkUq5
MD5:	789052445DD7B095C65CEB85ED927D6F
SHA1:	26202B1DE57E0133671B8FB20546D58B78A3BA14
SHA-256:	69155615936E9A7B5016A7913EE7801DBAE8B2FF3964BDFE1B95449F0F278AC8
SHA-512:	5DCA64E3D29A7B2856E491C9D841572EDB6916E348E79C6816DF25E4C68ADC644F483480EE553F15B97C55A2C55945CF235623EBF10EB06BEFDCFDC5BE7E719B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............QT.. .IDATx..{.m.q.V.....3..pF.I..EJ.. %.AI.,A.l..m..d...8..9@>..1.......e R E...D.5.........^k..9...j..Z.......]].......;=8BD "@D....=.'.......A....G-.K.E.m.L....@DIm.."!...r0.-.P.c-..0..V.D.,.f.@.z.Lk...E.VnW?.uA`..Pm.~.h{L..(.U.....5e....6....?.x...........T...^l....l.j.U9.......Q.....JB..S..@....c.n.....y.[.J...d.............~......".)..T.'B..N,.. .[...i."/e\|h...yK.....)..'.A..sz......K..H..<..Bg.D....8.....n.-..\...\=..s~...+....5.'}.\|.(..}G.M.I....jh......A.,-...@S.....HD....c.].]...)tu....]..iiQ.F..~....c....%.Y].....Q..`^\.k..Py.b.b.$..x...7.aq8....z`W..2M..u..A...EN/..+7."p.>...}`.n....)2-/...O..A.!..$3...V.....71..t.$...;....q.3\<...aP8..9.d.........5Z.ko....$3Zzr8.q.z.T.`.4.d..T7.0{J..<........[`).?......@...#`.E:....p....<.[......."..].t).....M;...E)B.~A..K....kj.5._\.3..K.A......+...!.+..Lj..".A.....S.......*..xG.A....G<.l..5 ..\.p2...&.V......W.:.....5\|..H...C...+.....r\I+...

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1125
Entropy (8bit):	5.0825212228156245
Encrypted:	false
SSDEEP:	24:2df1uLzHzkP1DeaxMxmR8GFMVVcDlfHL+TKM/JQLZnD:cdKDzQBXOMoTFwhD
MD5:	D47BFF661360A32D5A63A1FC301907EF
SHA1:	264FEC18608C26596330F2C6E677F097D578DDB8
SHA-256:	DE293C7F61999D8DDA28EAF64220F3B4663CB322DEC419DC3DAAC0A782E67779
SHA-512:	569C34DB98DC3A8D71356B268F3E80BC4036E909EB4DA95F3FB7B1CA893E5DC1D49F8791B7054BB669E4F3F346E011B1BDA499403482B0BDFDEE4556CBD5D806
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="17px" height="10px" viewBox="0 0 17 10" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: sketchtool 57.1 (101010) - https://sketch.com -->.. <title>5DBA7327-99EB-4850-8675-327AD42EA87B@1x</title>.. <desc>Created with sketchtool.</desc>.. <g id="New-Design" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Attorney-List" transform="translate(-617.000000, -201.000000)" fill="#C0CF13" fill-rule="nonzero">.. <g id="Search+Filters" transform="translate(135.000000, 127.000000)">.. <g id="Input-/-Dropdown-Copy" transform="translate(262.000000, 56.000000)">.. <g id="Icon-/-Arrow-/-Green" transform="translate(221.000000, 15.000000)">.. <polygon id="Green-DownArrow" points="1.6275547 2.93933983 -0.493765641 5.06066017 7.5 13.0544258 15.4937656 5.06066017 13.3724453 2.93933983

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2476
Entropy (8bit):	4.891702710978416
Encrypted:	false
SSDEEP:	48:c6gNjJhTTvWWUX1vM+cBmG11vqR5lIse2xTGQTsBmJuM:Qd3TEvMpIjlIsena
MD5:	21D6243CAF0EB27BD01C83D40FFA570C
SHA1:	ABCB4EBAC192CCC249EC89691AB7B5D82F0C03B8
SHA-256:	750A4740A0DAE1290E1E81D22B7663E8E21383E5E09C2F8AE581BDDD9B12F026
SHA-512:	B2A19EE1F377E2BABE9AD4C28CD4B2566AEE0E9623B8995B408A109769A1CEC15B38DC55A0975D320E79815F691320C21A13167788AF94277B48ECAEBD0A2376
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/images/linkedin-icon.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding.com/sketch -->. <title>BC566ED1-24CE-465D-AF83-21882FAF4D95@1x</title>. <desc>Created with sketchtool.</desc>. <defs>. <polygon id="path-1" points="0 0 19.9987778 0 19.9987778 19.9998889 0 19.9998889"></polygon>. </defs>. <g id="Welcome" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" opacity="1">. <g id="Homepage-v3-London-Copy" transform="translate(-784.000000, -3158.000000)">. <g id="Group-2" transform="translate(0.000000, 3132.000000)">. <g id="linkedin" transform="translate(784.000000, 26.000000)">. <mask id="mask-2" fill="white">. <use xlink:href="#path-1"></use>. </mask>. <g id="C

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	52948
Entropy (8bit):	3.8793838396538614
Encrypted:	false
SSDEEP:	768:89NrMLoD7uCbzF8gIdy+BMMvL0wfTQw+m/QxTliw6W7hbQCgls:8T8o/uiZIdy4NTlNeLddbQCgls
MD5:	E0E37A5ADB54F970263FAA629B537BDE
SHA1:	53F6D745831F641D272200F63FFB68E775026CCE
SHA-256:	14740B6056D3E81971C5DE4901DCD1BA1874B65A3610204FDB86018CAF3D88D4
SHA-512:	A23A8A0B6404788E57F3A9DE86C5F0ADD1D3198BD5EDC89484A469AA1C15E83543B6C164496E18A64DE9A8FF6BCA5D4351B1BC4B7BBBD82A0CA5454BD2E3650A
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/media/phyidkre/qe-logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="285px" height="34px" viewBox="0 0 285 34" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 61 (89581) - https://sketch.com -->. <title>qe-logo</title>. <desc>Created with Sketch.</desc>. <g id="Symbols" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Nav" transform="translate(-136.000000, -21.000000)">. <g id="qe-logo" transform="translate(136.000000, 21.000000)">. <path d="M3.246264,3.2581656 C3.862548,3.2581656 4.429584,3.3963336 4.948056,3.6726696 C5.467212,3.9490056 5.941224,4.3669296 6.370776,4.9271256 L6.456276,3.5495496 L11.28258,3.5495496 L11.28258,21.9812976 L6.370776,21.9812976 L6.370776,18.3793536 C5.89266,19.0784016 5.452848,19.5182136 5.05134,19.7015256 C4.650516,19.8834696 4.153932,19.9751256 3.562272,19.9751256 C2.703168,19.9751256 1.991808,19.7719776 1.428192,19.3670496 C0.86526,18.962

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1728, components 3
Category:	dropped
Size (bytes):	377736
Entropy (8bit):	7.984329167044541
Encrypted:	false
SSDEEP:	6144:ZBo5VyxZCiM2Uiwkl8ph2BJeAbz0ZUOOtoR52DVUCh3WK4diSbq:zaVya2Um8pQBJr0ZUfGRKsiS+
MD5:	55CBB043DFE4DA0F1E51CA0013209F81
SHA1:	94A191472364C6B7B86EC00F14A05805F00CB0D5
SHA-256:	2685A7EB7470E1FB132C3DF1DB007A2427E212F4303C3060D00004F13671E6FF
SHA-512:	5EEB87CCC4C1F76DFE83DD52C23B13395D2F3048385EA2392298F8F85E77EBE50F51B76CBC6A096CE9DA1F6EF5E0BF8842E12A8673F08101C751D3881C0BBC7F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333........@...................................................................................w...U!.U.....P2XR..TF!2"....2Y..%I%HQ.+a$.!..VJ.%i.+Y...h.......%)..).+hJ.h.."....HD.......T...$.J.bITTIA$.$.DH.%LD...X..FQ.j..@@.`$.Z.Eq2.D.$..(H."X..A%...... .!......%.X.."J...Y..........%.%.D...S.P.....ZJ.. . ..1!1......""...B......Z+.d.U.J.....Ha...H....E..a.Ta.H.@D.)Z...%.UL......!..d`V.hJ...(D....X.%...H.BT...Z.V.....H..J.I%A%..h."H.IbI`..D.d.....PB....R.d..H. ...d.`L..EK.D.H.eF"X.%,..H.".BV.h..b.%.T..Z.D.H.@.%..@...LH....."P.QX...X.$."1 ".".... ...Z1.... (.RB.H....j..M.2T..(..H..T.$..%b.......0.d......DBBB"C..Q....B.[.4H.%-J2..EB@@.DU@BI[D)..$...[ ...e,..B$DD$...$K....J..D. DJ".K3TR.%e,VD...E.DR.".@J.[".DC.[..T.,....%.Q[Ad+H..@DDDD!)`*$.QPPU.@@@..D@&$.@D.D..(@@....(.)%T...P.......(..U.Z.(...EB.V.&+U$.....!.(.!2.+T..$T

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1099, components 3
Category:	downloaded
Size (bytes):	23180
Entropy (8bit):	3.814027667079179
Encrypted:	false
SSDEEP:	384:fUDbS1r3W+kYli3MI40bkzI8B3dhqur6VirdmVviR2D4C:f+bSNRrli8wbMIq3dgur6ViJmVviAx
MD5:	67AC0AE3A6D29BED96EEE626CBAE00D3
SHA1:	B1135884DC666F41315D33623214F70702D2BD3C
SHA-256:	DFF921BE3B3994D49FC2FE075B19AA13CC2381781247451EB1B1AFB772531F31
SHA-512:	A4BB78F01F6FB21090B2400052FAFFD826CF0FC2C65869F21D939FFAA06772F8E972527B9BF819B4349B2FF6685F8EF498BF0F355BE0C90DC7525EAF33C70F49
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/subnav-bg.jpg
Preview:	......JFIF.............C...................... ....&"((&"%$0=3-9.$%5H59?ADED)3KPJBO=CDA...C...........A,%,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA......K.@............................................................................ .(..E..@....@.@.......X....@.....E....P..B......P.X....A..(....(".....j...B..@X..!.(...H.P.(...........................................................r...@..(..@.(.H.,.................A....... P..Z.............J@.@!A.....@..)..(X.( d...@..........P.(....................................................,..X..... (....................(.............Z...Q..@......Q@H....(......(..(X.( B....@..........P.(.........................................................@..( .......P..,..P......@..........P...Z. .....@ .)M..( .!..h..........!@.....)...........P.(........................................................P....... .....`...(....P...@P...........E.....,.....4.@.P........P.......@...2...P).......@......................................................

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1440x310, components 3
Category:	downloaded
Size (bytes):	56122
Entropy (8bit):	7.960275098204318
Encrypted:	false
SSDEEP:	1536:4nvcVtnTTBq9RZPAo9ZHGJFITQgGYBfmLuWT3FiyLnH:4n0VtnTTBkRZYo9Z6FITQgGY5mjrFiyr
MD5:	CB31BDD5BA64FA327F0B1985C24FC2B5
SHA1:	C2FF53030B58F23A129F180E8B8488FEDC7CC90F
SHA-256:	D4375AB2D294076BD6D4A3BE0D63E6603351BEE58AB82FA00E042488F52DC0FD
SHA-512:	A658F68273B9EA28E088BC843EA57A2C6CB8F71763A2087E1816D9E87506C8F09CEBF590B221BE14FCF22D27C4C044449EE541AF67E82617003C8273E0DB9ED9
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/media/ypod3mun/doha-officedetail-desktop-x1.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 540x810, components 3
Category:	dropped
Size (bytes):	54957
Entropy (8bit):	7.963109199868282
Encrypted:	false
SSDEEP:	1536:2PEZifmKGu/HOaJ/5dTtROYIZkZZpZVr28t7Qe:tZieKGiu01OTOrF28Ee
MD5:	31C3789EEAB1BB1B4D6984A1A8B02F7B
SHA1:	571A155DC34CDBF0758ABB9A648B6C6249DBBA44
SHA-256:	80B1C33B01FBE08602B27A8339BFFA85316D58B6C0B41D0EBA3E4A3C73A7FF4E
SHA-512:	A477A59852FB2F07631C18B4E7E4F8ADCFBFE733EA47BD2A93198EF2B6DC58048B5D78DE87AC10A4200B1299CE56988EB5DD2182DCCF6C49D61EDC6BC3F2033E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Exif..MM........i...........................P...........d........00..........00......2023:10:31 12:06:47.2023:10:31 12:06:47.......http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>..<x:xmpmeta xmlns:x="adobe:ns:meta/"><rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><rdf:Description rdf:about="uuid:faf5bdd5-ba3d-11da-ad31-d33d75182f1b" xmlns:xmp="http://ns.adobe.com/xap/1.0/"><xmp:CreateDate>2023-10-31T12:06:47</xmp:CreateDate></rdf:Description></rdf:RDF></x:xmpmeta>..<?xpacket end='w'?>...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((.........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.7470003948174115
Encrypted:	false
SSDEEP:	3:YRM9HfHFw65v0NMGAh8xLERDWgRnU/iEhDEgAVMxDV:Ys/lw+0NghPRzRU/RVmaDV
MD5:	229052B37E8ED63856F69D1F5D45E634
SHA1:	DE408BF93DDF318DBAB9B031233110B2FF6815F8
SHA-256:	D59FA87DCBCDB2132316F7F66B835AE54C0D0EEDDD82219C14CCE4BB5700EA25
SHA-512:	B16A51B16FBBF979BA93D2C16636D026D579C26011C72C782E7DD4799E9803B6C0A1771619C7326BDD2EB6C4E2462E08B85B3257E48643CE084ED3BF1095161E
Malicious:	false
Reputation:	low
Preview:	{"time":"2024-09-04T05:42:27.390Z","specifics":"","addonAnalytics":false,"blockMeta":false,"blockImages":false,"blockStyles":false,"widgetSettings":null}

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	692060
Entropy (8bit):	5.359477709353989
Encrypted:	false
SSDEEP:	12288:AiURum0531OFSNie+ioYdjy2OZUCuvazMZBs0UAZ6xXG:Y/0531OFSN3+ioYpbO0vazks0UAv
MD5:	06F7A1C476AF156060222FBDFEF1BCAD
SHA1:	470729718A2170181589F05B318C8D2B210CC9D8
SHA-256:	77E70402E48FC86C1BA988FA9E0572A851DB5505BBF86266F9484DFF508072C9
SHA-512:	024BD6246A282814A154A6ED7618DF934E920CA89F626290B661239E7C784E5FF4554164AF6328A3FA3619C52F1929CD149453F6B472B95C89FAA47089EE71D9
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/js/app.js?v=638633792821681415
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1925
Entropy (8bit):	5.042947473848433
Encrypted:	false
SSDEEP:	24:2do9eclRLz0wOaa2OA6t3tCnxDQUUDQnG+pn9mBthMuvDeaxMxfjsLDFg8JbV+Cy:cunoLfU6HUtfxp9mvZLV+TwLqxZ
MD5:	5528B28B117326B649EE30F5627792FB
SHA1:	C6F90C52EAFAED1AB926A0F2CEBBD72DBED76251
SHA-256:	2AD6D4994A8747869703F5D831C4DE9E6581212D7291710D4A81FD9DBF49EC6C
SHA-512:	70A5F30D29794AD506355AF97444B31901443D8A28AB8395D0BAC5041F1C800B88688021503B098E5E28B4770555CCEF729CE7A924A71428850A3CA7A13925A9
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/play-btn.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="126px" height="126px" viewBox="0 0 126 126" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: sketchtool 56.3 (101010) - https://sketch.com -->.. <title>DADFBE1A-A194-49CA-890E-ADB193C74F00@1x</title>.. <desc>Created with sketchtool.</desc>.. <defs>.. <filter x="-162.0%" y="-162.0%" width="424.0%" height="424.0%" filterUnits="objectBoundingBox" id="filter-1">.. <feOffset dx="0" dy="2" in="SourceAlpha" result="shadowOffsetOuter1"></feOffset>.. <feGaussianBlur stdDeviation="20" in="shadowOffsetOuter1" result="shadowBlurOuter1"></feGaussianBlur>.. <feColorMatrix values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.2 0" type="matrix" in="shadowBlurOuter1" result="shadowMatrixOuter1"></feColorMatrix>.. <feMerge>.. <feMergeNode in="shadowMatrixOuter1"></feMergeNode>.. <feMergeNode in="Source

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	11017
Entropy (8bit):	7.938809303319445
Encrypted:	false
SSDEEP:	192:kz4AF6HCZKh+ltCuC8rOOmdebEVKnLfB43MhBqZdDaugCZ89fffffS0fKffu:s4QDaB84if2yBqZd69fffffNKffu
MD5:	B5D13A680F33BCA86A9DB3CD370A9F49
SHA1:	DA0D705D158822DB04DAADB92BFB9734A16D7A9B
SHA-256:	2EE530FBD47B1E493A977D59505027E83FC7A4EFD85E8F83B445D1DE9596037F
SHA-512:	434485E94DA800770344E8DC1CB118ACE2E252C33523DD491478A7899F0791ECCE549ED665DC3D946642BBAC558E200C332FE294565C4BAFFEEF8EA45E38A46B
Malicious:	false
Reputation:	low
Preview:	......JFIF........................................................................................................................................................@..".........................................P........................!...1."AQ.a#2Rq...B...$345brs...C....%S..6DEctu.............................................................!1.QA....2aq.B..."T..............?...)J.O@R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.+..qh..e.SQ!.vy....%.I[.:cV?......l........4.o.....f..r.V.rE.u.,..q.8.!~ouu.>.....<..lA........;~&.G..Q..T^...K..0..7lH.6c.@R...<&.Lk...c%....>. ......W..."..TE.1D...&m.+..62DLI.r.~.....R..Q6)JP.R......)@)JP.R....?.\|i...^.dR..A,.,.+"I..Eh..]A.Kj..y.\|;..Kk&..]h.].q...H.U+.r.e..#.H9.,.j.X.G.)^d...%s.,.&6.)...!.t9... z.Z....h............@YC.FW.B.\.H....H...:%dUf.y.?......!RN.[.BF22.+.dg....[..O.".i"..7P.d.:..'.X.....e.Pr.Y..(.b9".65)J..R....(.)J.JR.R..62I...;.=.....2N.nI...'.....j.+r.....A.i..,.r.%.3.(.+j.c.C.&.Cx.n.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	306
Entropy (8bit):	6.87875956488453
Encrypted:	false
SSDEEP:	6:6v/lhP2uRv6Ekdghvhe+LY0pRiekoZZJ23N2lKdp:6v/7e6MGh9Y8p78gA
MD5:	E337F412159135A13FE0F7CC324D8AD3
SHA1:	625C023A107B1027014D1845EE81D1958841540F
SHA-256:	BAAA44F68F7F9866B98F49E5B5A2DC1040122FB6D2B23E203D753B151EB7423C
SHA-512:	FCEAD5F381D04D9864B3CD1C458979D47256F7CFA7EDF3607D1F138A04B41427C483A14540D77D1C971FFDE26C0711B65401286D5182DB1E941E5C46B1A0B007
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............!.wT....sRGB.........IDAT8...M..0.Fkw.R<..x..".W.]x.q.^."x....R.J.+$P.dh...3.f.$.$i..c.....IB`.].d1w4TA.2t..'..A.g.m].................j.......0.(.....!....................*#..^..S...,a.d.o....Z..q[....w....0...L.3q.....r4.$..F...?.....Z.q.K..{.~.i...\......IEND.B`.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HfkY:/kY
MD5:	FD235CFB11139CABA7A7D4886342544B
SHA1:	EFB73B8FE6951866B2A2536CDB6546BAEEE65846
SHA-256:	9077FC5E7F63EF0D228F6930D04A6654DE03681A79719E13E130B0EB9BEDDD64
SHA-512:	E80980DF8F6565E00EAB9C0EDD8F93E70339E003A2593B02321CB906ADC1E98205BADD4C1CF6FB7C983A2AA52205D9E8A5432D7F0D7A2BF3B388D2B0780E0B84
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlChJDIxZ_3vBIFDXYaxmM=?alt=proto
Preview:	CgkKBw12GsZjGgA=

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2589
Entropy (8bit):	4.864382786821925
Encrypted:	false
SSDEEP:	48:ckmVq+TTv7CXcvZSApazp4eML1EJiqEq5dVHEtlmaZ4cvVZyuM:GVJTZvZzpUM/q5dVVU4cdI
MD5:	2FD48CE04C0099FD0FC8C1ACD4B70739
SHA1:	A75EADA7C1BED38AF59CA2BE34524AB6778734CB
SHA-256:	F925A9FE6FBB5D3CEAD11DA9204BD6885C400EA641367B8E814F4DEF8B9ECEAF
SHA-512:	FDD693DEC523F03F7FEF93294F0A63B182422635320576790C29D210206EBC4951EA3443810B32FFB6A62682A60FCE6EA0AA363711BFBB8733F7DEDD9DF9ACB4
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/images/twitter-icon.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="25px" height="20px" viewBox="0 0 25 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding.com/sketch -->. <title>50ABCC23-E067-458F-A693-D2B82AE55CA4@1x</title>. <desc>Created with sketchtool.</desc>. <defs>. <polygon id="path-1" points="0.00538116592 0.0737219731 24.5192825 0.0737219731 24.5192825 19.9946188 0.00538116592 19.9946188"></polygon>. </defs>. <g id="Welcome" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" opacity="1">. <g id="Homepage-v3-London-Copy" transform="translate(-684.000000, -3158.000000)">. <g id="Group-2" transform="translate(0.000000, 3132.000000)">. <g id="twitter" transform="translate(684.000000, 26.000000)">. <mask id="mask-2" fill="white">. <use xlink:href="#path-1"></use>.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1125
Entropy (8bit):	5.0825212228156245
Encrypted:	false
SSDEEP:	24:2df1uLzHzkP1DeaxMxmR8GFMVVcDlfHL+TKM/JQLZnD:cdKDzQBXOMoTFwhD
MD5:	D47BFF661360A32D5A63A1FC301907EF
SHA1:	264FEC18608C26596330F2C6E677F097D578DDB8
SHA-256:	DE293C7F61999D8DDA28EAF64220F3B4663CB322DEC419DC3DAAC0A782E67779
SHA-512:	569C34DB98DC3A8D71356B268F3E80BC4036E909EB4DA95F3FB7B1CA893E5DC1D49F8791B7054BB669E4F3F346E011B1BDA499403482B0BDFDEE4556CBD5D806
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/down-arrow.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="17px" height="10px" viewBox="0 0 17 10" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: sketchtool 57.1 (101010) - https://sketch.com -->.. <title>5DBA7327-99EB-4850-8675-327AD42EA87B@1x</title>.. <desc>Created with sketchtool.</desc>.. <g id="New-Design" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Attorney-List" transform="translate(-617.000000, -201.000000)" fill="#C0CF13" fill-rule="nonzero">.. <g id="Search+Filters" transform="translate(135.000000, 127.000000)">.. <g id="Input-/-Dropdown-Copy" transform="translate(262.000000, 56.000000)">.. <g id="Icon-/-Arrow-/-Green" transform="translate(221.000000, 15.000000)">.. <polygon id="Green-DownArrow" points="1.6275547 2.93933983 -0.493765641 5.06066017 7.5 13.0544258 15.4937656 5.06066017 13.3724453 2.93933983

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1728, components 3
Category:	downloaded
Size (bytes):	299595
Entropy (8bit):	7.95096264276493
Encrypted:	false
SSDEEP:	6144:OK8VA9ooLu44QcOQ1crusdGJfxGxZUvpe+53ndLmR9EamwG4279L4Qi:OxyrL3i5uusdmxiZUv0+UB2pL4Qi
MD5:	AE26E7B4DBBD8791D3426C508775925A
SHA1:	9A00880FF29798B05ADD8C7D36A238BE83FE92F9
SHA-256:	EEC853E69FCC7F83E2667D1C8ED28C2DDE4D22B92DE035E8F38BD8B6639223B7
SHA-512:	194A6B07761B046AFA381CF2693AF40C23990262CBEEE6EC3EA4965D842D74D32DFF3021BD5CE5C316C418E7FBE222053551606C42DD44AA31956D03A07314DC
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/media/fajftxg3/syndey.jpg
Preview:	......JFIF.............C...........................".##!. %*5-%'2( .?/279<<<$-BFA:F5;<9...C...........9& &99999999999999999999999999999999999999999999999999........@....................................................................................o.P.T.)J..J.J..R.....)JPPP.P...PPP.R.....)J........HP.HP.).B....1)@!AR(..B.B..B..............P.....R..D(...B...................... ........@..!.....@...@...LH..B.......B.@....B...)AJR....R.)AJ..R.).)JPPR.R.PR.........P.P......@.@........R..@.............P@.......@....................R..........@..@@..A. ..........@@B...@b.................)........F.mAJ.R...........)AJd.R...........R..PR............P.(...................H..... ....A.HR............B.....B..........R..!.. ............. .. ......................@B.....U.@...((()@()AJ.PR........(..)@)@.@.PR.".............@(...........(. . ....... .(........ ..B.B...............).J@......@...............@...!.1........).. !.. !..............Z...R......j..PR.R..)A.(()@)HR.......R..AAHP.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	downloaded
Size (bytes):	338877
Entropy (8bit):	5.616824180269083
Encrypted:	false
SSDEEP:	3072:qBJvrYwB8VOTwDAfqZfbWtnA16zeVjH4mA3SpfJ6jXD7MBEtat9cXqDI8:qjvt0OUDAfqZfR6aVb4mROXD70EIti69
MD5:	39194FBDA3B75220D24BA59F994FCE0D
SHA1:	792E6C8BFE1102C757C9BCFFBC20AE2252CA5022
SHA-256:	E170CA1EEFEC8C4D0FAB4B1884D7B23F99BBA0E16D4FEE3D2F1F4996D287DF06
SHA-512:	30072E703ADC1DFB9FFF0E2D3EC5316B8E0921FD9B12856EED11793BE4AFD647D9E96D007C7D40B9BEAF13416381AC7D9D92345220F6DC0C7AE044F16CED221B
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/d9418494/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function u(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (321), with CRLF line terminators
Category:	downloaded
Size (bytes):	44947
Entropy (8bit):	5.2319718177925445
Encrypted:	false
SSDEEP:	768:+sehRXO3vGRxgJ40qygWUWDrMNPcfUb72KMO:3ehRXOeRGG0qJWtrMNpl
MD5:	D6F41569445AA360A62A47C28CBC8C4E
SHA1:	9AB4F73FD49DADDB5F607A22B741EE767864AB3C
SHA-256:	06DC7A1634D059EBE8AA7B8F1F1F1076A8F05EEF219CE597C6A539095846D51E
SHA-512:	42D56FEFC9B30DE2EED4C00DBB8C2E25F6EB2A24495E75084EBF445B3CC914011BC47E405B3E68A4C2CED7CD89E4D4D39E35087EA4ED4000E85DC75810191ACA
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/scripts/jquery.mCustomScrollbar.js?v=638633793696690455
Preview:	/..== malihu jquery custom scrollbars plugin == ..version: 2.8.1 ..author: malihu (http://manos.malihu.gr) ..plugin home: http://manos.malihu.gr/jquery-custom-content-scroller ../..../..Copyright 2010-2013 Manos Malihutsakis ....This program is free software: you can redistribute it and/or modify ..it under the terms of the GNU General Public License as published by ..the Free Software Foundation, either version 3 of the License, or ..any later version. ....This program is distributed in the hope that it will be useful, ..but WITHOUT ANY WARRANTY; without even the implied warranty of ..MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the ..GNU General Public License for more details. ....You should have received a copy of the GNU General Public License ..along with this program. If not, see http://www.gnu.org/licenses/. ../..(function($){.../plugin script/...var methods={....init:function(options){.....var defaults={ ......set_width:false, /*optional element width: bool

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	72221
Entropy (8bit):	5.60692994394511
Encrypted:	false
SSDEEP:	1536:8xxy069bhE0PaF+0mS8QCV7nh7lI2ii10MYk/xIDJCOqmqM12e7yF4Ld2wPqRtcJ:sy069bq0PaF+0/ZiK6vtM
MD5:	B0DD92BF8A943E79F7DB99EC6E263384
SHA1:	AAE67A8D66D70F28F28E5B541117E3564F903E96
SHA-256:	CDC7E7544D983937EF60F6EA72CACAEBAF3AAE9753EE8048307A670794C9FAE6
SHA-512:	3AA8BE2F78A899BF8621CCD277ADB3556FDE13BF5CBB797C0AD958A2CD350134F13172A34DB72BCA47A9D9A13BBB8264EF881A8D011276D6AAE194E8840F7BFB
Malicious:	false
Reputation:	low
Preview:	var mouseflowDisableKeyLogging = true;if(typeof mouseflow==='undefined'&&typeof mouseflowPlayback==='undefined'){(function(){var _200=false;var _204=false;var _183=[{_93:"regex",_8:"(www.quinnemanuel.com/practice-areas/*)",_274:""}];var _179=[];var _20='https://us.mouseflow.com';function _7(_412,_151){_151=(typeof _151!=='undefined'?_151:'');if(_4.debug)console.log('MF'+(_4.includeDebugTime?' - '+_151:'')+': '+_412)}var _60=new _362(window);var _34=new _333(window);var _5=new _327(window,Math,JSON,_60);var _13=new _293(_60,_5);var _36=new _277('local',window,_5,_7);var _294=new _277('session',window,_5,_7);var _232=new _356(window);var _4=new _325(window,_36,_200,_204);_4._100();_4._169=[];_4._162=[];_4._117=[];_4._171=[];_4._418=[];_4._417=[];_4._71='8e58752a-4185-48a9-a4c0-1d8a0a196006';_4._415=true;_4._414='5242000';_4._159('appUrl',_20);var _316=new _408(window,_5,_4,_7);function _395(_0,_4,_53,_5,_13,_76,_36){var _20,_71,_7,_56;var _195='mf_liveHeatmaps';var _15;var _119=[];var _9

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	2442768
Entropy (8bit):	5.604657258846942
Encrypted:	false
SSDEEP:	49152:IxtjZG60+iR0qKsTLlTUC+JhV5GJ1eKuVKGbZ71sjoG:pfd
MD5:	34C0EB65A1A40D63EFB16DBFA35D58B9
SHA1:	10CF1F8C6796290B03C132AF633C8D481904B34D
SHA-256:	5059590A454043033E983133398FA9D38D66F760E8645AE7EBC6DFFF4B063C59
SHA-512:	7567A53EABEC1721F305774C5EB7FCD0EBA5D02A9D9D4629ABD79834DB519BA03DA816340FAE0B7702266C3243A92B615AD4F888B51590481BC8701ED649FE2F
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/d9418494/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2124
Entropy (8bit):	5.00266658839156
Encrypted:	false
SSDEEP:	48:c6gNjzTTvKDq+lnw8WqYnTCQeL9CgP8PLVExLCnmN28uM:QdzTmIirP8P2P
MD5:	B6FB08313F87B2F01A19660890CCC0F4
SHA1:	075806AAC2013324BDA98683CA4A79F07E6D9BE4
SHA-256:	69AD961538FD4E6151432627E5D34E5EE144D8F211AE20D1053197FE69631766
SHA-512:	5BBAAED6F0888B9643C547A92D6E618CB1EC998A6FAB2BAB75B435A8D6AD8C280A30949744033F4C6CC0789457FB64D564E9AD08231597F894745522404AA347
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding.com/sketch -->. <title>63516B19-0E89-409F-8BBA-71A05BC9A140@1x</title>. <desc>Created with sketchtool.</desc>. <defs>. <polygon id="path-1" points="7.4906367e-06 2.99625468e-05 19.9920674 2.99625468e-05 19.9920674 19.9921348 7.4906367e-06 19.9921348"></polygon>. </defs>. <g id="Welcome" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Homepage-v3-London-Copy" transform="translate(-637.000000, -3158.000000)">. <g id="Group-2" transform="translate(0.000000, 3132.000000)">. <g id="facebook-selected" transform="translate(637.000000, 26.000000)">. <mask id="mask-2" fill="white">. <use xlink:href="#path-1"></use>.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	783
Entropy (8bit):	7.419004852396902
Encrypted:	false
SSDEEP:	24:6Os5yUya1e1JQwi1M4U+8GTaSeDbzsDo5qyj8JMpz:6b5yUyTzQwsM4nTveDHsKqJMpz
MD5:	C54ABF61EEBFA89FC876C4549A8F7782
SHA1:	D73A00A5DD830211ACBB4B41FC228A10D601F8DF
SHA-256:	3629A0EBDB8A5C42AEEBEAB41CA1FEE069D0C599989792D7E800F42E4C1A7C7C
SHA-512:	9CB22770E8E87DD76D2C745F86E66C6CEED61A9D271122C9462AB280EC8075E2C40718005597A0B90979CDBF022C435E25C77B706FBA967C470318A22C2E78C9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sRGB........DeXIfMM........i...............................................................yIDAT8...Mh.Q..g.f.$T..".......{Q.j..M.."V.^D..R.....D/.D.%1......')U".F..m.tw..H..l..M............w...s...,.G@..%.....s..r3..'.6...,L.....~...2...p...9."..w....J...O..'.G...y5.LdF.....v.....e.......D.Y.e...dtn...sv..c.s..R.'....sd=.a'Y.V...#.N6....y.y.E.C..UHV.....BLv...U..\.0.....&.'^.../.......]..4..[.......O...}. .RA...B..b.......;C...~.t6..p_.#...H.1A..............x.FB......b.h..,m..%?.v.^...'..7C^-..).g.u..i...... ...6..%pU..O.z...V9..(!Y..Cl.S..8c....X..^.t.r..q...9c('c..%..r.o....+!5..R.gYu._..V..n...yNU.......s.j.c.......\|\{...2......_..DI.b.]}...`.h...?arS.NkO....Zu..f6.r.M<.5./..H..?K......IEND.B`.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	11820
Entropy (8bit):	7.954314665880945
Encrypted:	false
SSDEEP:	192:PUn/1AcF1/QB8n4KgvVpp50tCWEJcahK8m6Ngzdwy7EJ5sfm1XjoN6:PEyG1oB8vgv8tCWEJcvxwyP76
MD5:	6E9F1EFC4E4871E931871BE5F9656412
SHA1:	57D330D91FDDB67F5D09B824CFAE71EF13885B75
SHA-256:	1088331A942FCA4AB7347F29099E72ACB125F63280B39682B3124CBE5986106F
SHA-512:	70A3C2C1DC7E03FB0815644CC949419A8ADFB82061131BAF9C5A58D3A4DB106E23497C9469E8767592932B93EB05EB549C85ADB0F8584E839D83B42DFB36A4F8
Malicious:	false
Reputation:	low
URL:	https://img.youtube.com/vi/JCcqzCo7X-M/mqdefault.jpg
Preview:	......JFIF........................................................................................................................................................@.."........................................I........................!..1."AQ..2aq...#R..3Bbr.$C......S...6.....&Dcs................................;......................!..1..AQ"2aq....#R....B.....CTb................?....F..-F.R.K..E).+.)..+X...TdP.Y.J#......-.+}2....V..Q.>'a...Z...........\|tU..H.Y(.B.....0H...2\|....g....Bc...(9.?.\.t...,.A....C[K)iD.h.Q.g.#=j&Zf.w..Q......g.4.<...........S.U......\1..}i.8....S.aFV...5.4!Ij;......t..:~.0,-d.+.iT....(.....E.P.QE.!.QE.E.QB.E.P.QE.!.QE.YH...9".....-F.e..R%K5`..-FV....~........~...u._%'.)>.r./...3P."....t....4..+.....n....#.Y.....v...kv...f..:.]....>5.chSQm.}.m...4..L1...V....j.k.oY.R./xR......T..:O....Q.%.?.....[A...i.Se`E{.d.:...;........Gx.U.5.&.q..E...+(..".&L.QE...E.P.QE.!.QE.E.QB.E.P.QE.!.QE.OH...O...Xk.I...S....B...G....9.m.J....!0.....

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	4.172901596249024
Encrypted:	false
SSDEEP:	3:rUPdHghA5eutZ3dHghAdxko0XeyYe3dHghAlL30EfYovZ3dHghA7KovdsDecB3db:Q5xIe+0CJDdwecUvYB
MD5:	228F2C5539A0CC7B1010A1C291CC47AD
SHA1:	0F1D71A4A24A402B5A91159D05FD8F2B99FE3710
SHA-256:	3E05E3295C7997E96AF701C8EAD7D5125E03F301CA9D9F883154D614EC68C40E
SHA-512:	AD069135BC043E11E470A09E6D880F5E187B475AE1B105DB13F4E1F09E7C1AB0676BEE2CC4552942919AE4E06FE253AFB1AB92BCE502FBD167E8E998EFF4F679
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/css/style-dropdown-rich-text.css
Preview:	..../*umb_name:h1/..h1 {...h1;..}..../*umb_name:h2/..h2 {...h2;..}..../*umb_name:h3/..h3 {...h3;..}..../*umb_name:h4/..h4 {...h4;..}..../*umb_name:h5/..h5 {...h5;..}..../*umb_name:p/..p {...p;..}

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4207593&time=1727807617588&url=https%3A%2F%2Fwww.quinnemanuel.com%2F
Preview:	{}

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	84866
Entropy (8bit):	4.489330081837083
Encrypted:	false
SSDEEP:	1536:CxnOi1Wi/bpvw6k5Bcmg0YtTozUgpbVjK8cjnmbqCcxukin8/SBp68gEgCr+66m:CxnOivvk5Bcmg0UKbIDmbGxukin36bEB
MD5:	750B810D89918A6126DD75FCB81942E5
SHA1:	5AD6D2089D9FE97F8DD2B00D45D722C47AB67A89
SHA-256:	01CF6E1CB2FA56431F7B0F55E43B16B252DF3AA837877E5ADCEC40029B5F3FB1
SHA-512:	A60879CCF41C7156ECE15EAFCE9E268F709206D0F9908B1FFE55939572144FCBE6196D0EFB3E1EF75A715F9343840974E191696E14C4DF3E253F5EBAAE5E67C5
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/quote2.json
Preview:	{"v":"5.5.8","fr":29.9700012207031,"ip":0,"op":150.000006109625,"w":800,"h":320,"nm":"Quote2","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Shape Layer 4","td":1,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[400,285,0],"ix":2},"a":{"a":0,"k":[0,0,0],"ix":1},"s":{"a":0,"k":[100,100,100],"ix":6}},"ao":0,"shapes":[{"ty":"gr","it":[{"ind":0,"ty":"sh","ix":1,"ks":{"a":0,"k":{"i":[[0,0],[0,0],[0,0],[0,0]],"o":[[0,0],[0,0],[0,0],[0,0]],"v":[[392.824,-25.223],[-392.824,-25.223],[-392.824,25.223],[392.824,25.223]],"c":true},"ix":2},"nm":"Path 1","mn":"ADBE Vector Shape - Group","hd":false},{"ty":"fl","c":{"a":0,"k":[1,1,1,1],"ix":4},"o":{"a":0,"k":100,"ix":5},"r":1,"bm":0,"nm":"Fill 1","mn":"ADBE Vector Graphic - Fill","hd":false},{"ty":"tr","p":{"a":0,"k":[-1.176,-95.777],"ix":2},"a":{"a":0,"k":[0,0],"ix":1},"s":{"a":0,"k":[100,100],"ix":3},"r":{"a":0,"k":0,"ix":6},"o":{"a":0,"k":100,"ix":7},"sk":{"a":0,"k":0,"ix":4},"sa":{"a":0,"k":0,"ix":5},

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 540x810, components 3
Category:	downloaded
Size (bytes):	54957
Entropy (8bit):	7.963109199868282
Encrypted:	false
SSDEEP:	1536:2PEZifmKGu/HOaJ/5dTtROYIZkZZpZVr28t7Qe:tZieKGiu01OTOrF28Ee
MD5:	31C3789EEAB1BB1B4D6984A1A8B02F7B
SHA1:	571A155DC34CDBF0758ABB9A648B6C6249DBBA44
SHA-256:	80B1C33B01FBE08602B27A8339BFFA85316D58B6C0B41D0EBA3E4A3C73A7FF4E
SHA-512:	A477A59852FB2F07631C18B4E7E4F8ADCFBFE733EA47BD2A93198EF2B6DC58048B5D78DE87AC10A4200B1299CE56988EB5DD2182DCCF6C49D61EDC6BC3F2033E
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/media/3vod5e3y/james-bremen-2_540x810.jpg
Preview:	......JFIF.....,.,......Exif..MM........i...........................P...........d........00..........00......2023:10:31 12:06:47.2023:10:31 12:06:47.......http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>..<x:xmpmeta xmlns:x="adobe:ns:meta/"><rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><rdf:Description rdf:about="uuid:faf5bdd5-ba3d-11da-ad31-d33d75182f1b" xmlns:xmp="http://ns.adobe.com/xap/1.0/"><xmp:CreateDate>2023-10-31T12:06:47</xmp:CreateDate></rdf:Description></rdf:RDF></x:xmpmeta>..<?xpacket end='w'?>...C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((.........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (14965), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	90881
Entropy (8bit):	5.276530230883681
Encrypted:	false
SSDEEP:	1536:dsrjDQ3fDRHBk9aPP2Ajh6y/xRwsM3ldxz7hgTXZ3wkevNdr3/wCjI6h8MWbAG09:urjDQ3flHBk9aPP2Ajh6y/xRwsM3ldxF
MD5:	22917C4CF92382B697EFE5A42AE55452
SHA1:	0B8B2624BB2FE2F1364F35E17659359810202A61
SHA-256:	E6C112D8D3002AE249D8CAC3B3A1125AA5BDE67D659330C9DFCC2A1B3F4A0BC3
SHA-512:	614F75460113750C5C10F218E43577D6376F89106D22F8BF40409DEAD81A5A348F4EE6C01253046690AD0C0A92F77432C7CC76E014578302CACD97CEF429E932
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/css/style.css?v=638633793696690455
Preview:	./* Slider */..slick-slider.{. position: relative;.. display: block;. box-sizing: border-box;.. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;.. -webkit-touch-callout: none;. -khtml-user-select: none;. -ms-touch-action: pan-y;. touch-action: pan-y;. -webkit-tap-highlight-color: transparent;.}...slick-list.{. position: relative;.. display: block;. overflow: hidden;.. margin: 0;. padding: 0;.}..slick-list:focus.{. outline: none;.}..slick-list.dragging.{. cursor: pointer;. cursor: hand;.}...slick-slider .slick-track,..slick-slider .slick-list.{. -webkit-transform: translate3d(0, 0, 0);. -moz-transform: translate3d(0, 0, 0);. -ms-transform: translate3d(0, 0, 0);. -o-transform: translate3d(0, 0, 0);. transform: translate3d(0, 0, 0);.}...slick-track.{. position: relative;. top: 0;. left: 0;.. display: block;. margin-

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.7470003948174115
Encrypted:	false
SSDEEP:	3:YRM9HfHFw65v0NMGAh8xLERDWgRnU/iEhDEgAVMxDV:Ys/lw+0NghPRzRU/RVmaDV
MD5:	229052B37E8ED63856F69D1F5D45E634
SHA1:	DE408BF93DDF318DBAB9B031233110B2FF6815F8
SHA-256:	D59FA87DCBCDB2132316F7F66B835AE54C0D0EEDDD82219C14CCE4BB5700EA25
SHA-512:	B16A51B16FBBF979BA93D2C16636D026D579C26011C72C782E7DD4799E9803B6C0A1771619C7326BDD2EB6C4E2462E08B85B3257E48643CE084ED3BF1095161E
Malicious:	false
Reputation:	low
Preview:	{"time":"2024-09-04T05:42:27.390Z","specifics":"","addonAnalytics":false,"blockMeta":false,"blockImages":false,"blockStyles":false,"widgetSettings":null}

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1619)
Category:	dropped
Size (bytes):	1951
Entropy (8bit):	5.471140438813306
Encrypted:	false
SSDEEP:	24:i4JuL+udYrBdfxSjLbaQRXTzyMqAXfvdCCd/NLZOqZAnzzew/un2DxZ/oMyUaTRs:i4wlmrorDzy9AzwdIcyUY8y08QntRGG
MD5:	45F12DE4D7B95A193ECDC5CFDE664BB9
SHA1:	EE9541CF1A95D2A885F8B143A105CAAA08CA9C9D
SHA-256:	39B8FE6364621725FF90431A34AF0F87976D95C00CBFD1D0F3711A3F1FA1A07B
SHA-512:	B9C5DF833C28B1CD4724A531347248BB02A1CBCDB04119BF44E889A6CCA9F11C335609180F4C90417F5D95994CF62505F2EDC765D6F9E26526C2C1EE36EB4EA4
Malicious:	false
Reputation:	low
Preview:	/*. Minified by jsDelivr using Terser v3.14.1.. * Original file: /npm/js-cookie@2.2.1/src/js.cookie.js. * . * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. /.!function(e){var n;if("function"==typeof define&&define.amd&&(define(e),n=!0),"object"==typeof exports&&(module.exports=e(),n=!0),!n){var t=window.Cookies,o=window.Cookies=e();o.noConflict=function(){return window.Cookies=t,o}}}(function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var o in t)n[o]=t[o]}return n}function n(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(o){function r(){}function i(n,t,i){if("undefined"!=typeof document){"number"==typeof(i=e({path:"/"},r.defaults,i)).expires&&(i.expires=new Date(1new Date+864e5*i.expires)),i.expires=i.expires?i.expires.toUTCString():"";try{var c=JSON.stringify(t);/^[\{\[]/.test(c)&&(t=c)}catch(e){}t=o.write?o.write(t,n):encodeURIComponent(St

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HNnuhkY:o
MD5:	92668B61970892753A759FEDB68D2F7E
SHA1:	4B66364467AFBAF93AA28E6741FA664109A95B13
SHA-256:	1CC6CF3D18EF129ED70600CC1BD92607DE1700F84DF7592A8F51896BF1D24DC7
SHA-512:	0D76586474A02327EEA9659048D1A1E080CAF73120A8D6D5327C0EB8005AD72297DA9675B1E9D1A4B923915A80971CBB648CEE8C31A826DCE9B56EAFEA0DE404
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmSU1BKtk2JLhIFDWD73co=?alt=proto
Preview:	CgkKBw1g+93KGgA=

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1728, components 3
Category:	dropped
Size (bytes):	289763
Entropy (8bit):	7.96307645651027
Encrypted:	false
SSDEEP:	6144:7zxByTm13m9xd2buKlcHz/Jtk6wcDpDw/BAdgCxGX0Q/b+XO:BBn3m96vqrbFVp7eC4z/b+e
MD5:	5561E7D70799427F474E2B5CB29C17B8
SHA1:	B0F5816735C09CB21AF434063B71E37FD8689034
SHA-256:	139D009AFDF0E3A5B4361E9DF9A604F0FC14AE6EFCAAEFC6A9ADF64485C083B8
SHA-512:	E2C17E6E654AF81E2FCC3958127E3C00DF139ED5EB0017B7E6D22DB9D29E6C60BE0B26D646554E5726259ABEE4710868363452BB176E4FDA4DC8C1F43570C059
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...........................".##!. %5-%'2( .?/279<<<$-BFA:F5;<9...C...........9& &99999999999999999999999999999999999999999999999999........@.....................................................................................@.alU%..(Z.U..(RR.(....."Z.........aT.....E............B...@X.R...h.!H.P!J.....X.j...B..H...VU@.HXT..A)..I.Z.(...hB..`.j@R.[.B...Z.j...R.Z............@.d[.(.....e.d.e....%XR!B..$.P.V ..U..H..P.. .....H..(...,..Q....dJ.,.A@-..J..A..QJB...@.%.B.....-@.E....eQ.-R@..%.....B.....R....Ye...).........P.@R.......@.D.....V!E...IH.R...JE.....IT........(.........VIj.RB..D($.a@D...K.IV....D)!D.(D(..( R%R..ZD).LA@..j.% Z@,( 1Il.%..?..QV..IJ.IT.).A...Z....Z.....D.AAAaj..K..,.[P.P.,...P.U..(X...H.R..Ah.("....J@.HU..(%!@(.(....B..!@.-.................. ......-..DU.`. .B........XR%X.. .@ J...DJ..B.... .!@..QPB.,.(... ....@...X...P.b.D.KV.=..b..`.AV.h...Z..Z.IV.B.B..Q..!@(..,.EAj(.lD........*.RZD.U.B...RU..`........P..(.B.......(R.........

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1810
Entropy (8bit):	4.958948333487326
Encrypted:	false
SSDEEP:	24:2d6io0vLlXtaB3tmAw0nxDQDUDQnj+nLZBqsSfAyFeaxM2fJoI665CmI0mTwL/G2:c6iFDyhbof6nLZHAj665KTwDGqV
MD5:	6444A1EAE77625BE53C4E1AD1E3C7AD8
SHA1:	1CCCD1F586DA3D3BF4D436E67D5E5E0999C3A07B
SHA-256:	DA641426010D7268BDFB9709AB0F03C175FF1AE311301188858484F911931EDC
SHA-512:	A48C4DABBEFB124908C5A4AA0D8319AEA3E34E7C00F021B5A82080B09CCAA86FC6579713F56DDAE963325216F73E670DFECAE22D3A368167552FCBE31C86E633
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="200px" height="200px" viewBox="0 0 200 200" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>8A202E65-D8A4-474A-9B79-BA9EA101B44D@1x</title>. <defs>. <filter x="-101.2%" y="-101.2%" width="302.5%" height="302.5%" filterUnits="objectBoundingBox" id="filter-1">. <feOffset dx="0" dy="2" in="SourceAlpha" result="shadowOffsetOuter1"></feOffset>. <feGaussianBlur stdDeviation="20" in="shadowOffsetOuter1" result="shadowBlurOuter1"></feGaussianBlur>. <feColorMatrix values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.2 0" type="matrix" in="shadowBlurOuter1" result="shadowMatrixOuter1"></feColorMatrix>. <feMerge>. <feMergeNode in="shadowMatrixOuter1"></feMergeNode>. <feMergeNode in="SourceGraphic"></feMergeNode>. </feMerge>. </filter>. </defs>. <g id="Desktop" stroke="none" stroke-width=

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	544945
Entropy (8bit):	4.850726532887996
Encrypted:	false
SSDEEP:	6144:snlKxrcQ4J5DB4ID/4QnA4Bp5pKET3QPbdtHD:ZKnA4Bp5pKET3QPbdtj
MD5:	25C6431F550AADC0B9699E4437C5E4A4
SHA1:	E3111D096D83848E5E9AD943B524D30DF71EBDEC
SHA-256:	7804FE7B3C65DE8EDA71291A48B46074F447BCBF57EE77082C2F492731BDBDB6
SHA-512:	868F6AB927B9500801B906EDE77FC722D1E5D064440DB0B5D053C8126454D70437CD0A861713ECBABEBA896B0DD386B589943720AFBBE9544BD76A1C2F8E145E
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/css/app.css?v=638633793483684870
Preview:	@font-face {. font-family: 'Lato';. src: url("../fonts/Lato-Black.eot");. src: url("../fonts/Lato-Black.eot?#iefix") format("embedded-opentype"), url("../fonts/Lato-Black.woff2") format("woff2"), url("../fonts/Lato-Black.woff") format("woff"), url("../fonts/Lato-Black.ttf") format("truetype"), url("../fonts/Lato-Black.svg#Lato-Black") format("svg");. font-weight: 900;. font-style: normal;. font-display: swap; }..@font-face {. font-family: 'Lato';. src: url("../fonts/Lato-Bold.eot");. src: url("../fonts/Lato-Bold.eot?#iefix") format("embedded-opentype"), url("../fonts/Lato-Bold.woff2") format("woff2"), url("../fonts/Lato-Bold.woff") format("woff"), url("../fonts/Lato-Bold.ttf") format("truetype"), url("../fonts/Lato-Bold.svg#Lato-Bold") format("svg");. font-weight: 700;. font-style: normal;. font-display: swap; }..@font-face {. font-family: 'Lato';. src: url("../fonts/Lato-Regular.eot");. src: url("../fonts/Lato-Regular.eot?#iefix") format("embedded-opentype"), url("../fo

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	5.627376897065431
Encrypted:	false
SSDEEP:	96:kSLyPOAiD4joVro2OotO4GvKKKPf/9VhjjSlqJPAAAADA4bMut9q:0PN9cVk2xtZUKKKPf/9VhjIePAAAADAb
MD5:	4C869F5FE69C19227833A37DF3106F05
SHA1:	8BC0696115298163E7FEA2316F626EA7831D0AE3
SHA-256:	D421C1B52057AEFB4C0251C75D8C92EB0DA8BB8F14B527F23E69437A10020A73
SHA-512:	2A06F9208E92AFC140E88C01E0C3393AA1143623F547DA3D59A8DE2BE76D0301E11708482833BC9097135385D18CB91A5CEEE07DAAAF66F026B39936ACCC5B03
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/favicon.ico
Preview:	...... .... .....&......... .h.......(... ...@..... ............................................................>...`...`...`...`...]...H.......................................................................................................U...................b....................................................................................................m..!...!...!...!...&...W......:...............................................................................*...2...-..."....m..!...!...!...!...&...W......:...........................+...2...5...-...................................$...`...r...g...M....m..!...!...!...!...&...W......:.......................D...a...p...y...e...G...&.......................qf..N...I...L...U......qL...!...!...!...!...&...W......:...........8...qo..W...N...J...G...L...U...e.....~...)...........0o..+...!...!...!...$...l..;...!...!...!...!...&...W......:...........Ul......!...!...!...!...!...!...+...X.....<........m..@..."...!...!...!...!.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	479
Entropy (8bit):	7.3541697718836
Encrypted:	false
SSDEEP:	12:6v/7iOdm7nK0OfyyujhwklaNcZywjpVy7oliKXdCMnKGR7:edqK0OfchxGcvjKolJXdbKGZ
MD5:	CECAA911D4B47011356DB9BC30AF7FFE
SHA1:	98B298C421B6B36F104B3BEFE7E38824E3736598
SHA-256:	B140554F1C1D7CADCFC19C8C888F08B7F90C3570473582E96BA3309DCF3B5F2C
SHA-512:	27FC06F6656C7B4D1340F61FFCBE1B20DAC801EDB80812D37B156FD7203D0655E625491061D23233FE502247CACC20F870EE79BB9F172FBC5F2F61DE44910BA4
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/icn-search.png
Preview:	.PNG........IHDR.....................sRGB.........IDAT8...O+.Q...PwAYY\w....XP>...D.U....Q..,$+.M.dc++)++.R..p....w..&]o...>....3.TB.c.a........7.."c.`.....`....j..kP_...a....d.m.a...PW.)..g."..d...u... 6.=.A.V...J..4%9........f+...X.6.."$$..)(.^.>.MB.KVM.....H...jx....7&4(.x...@..@...lX._...9].....NC .'.:f...=W}...............B..@H.!\|..W.....O>.VX..fy.....l.g..]........E7..6.wT.!.P.Q..<o...Z......-.....5.........m...p...j{2..4...]....F....6....IEND.B`.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 540x724, components 3
Category:	downloaded
Size (bytes):	275727
Entropy (8bit):	7.954525047222402
Encrypted:	false
SSDEEP:	6144:Oo74fr7qP7i064w2bwmIOlQDLMcwU6TDw3zMA3W8U2v0ypt5NAEQ:Oo74jY7i06z2bw8lQ0cwzezMa02vTdNK
MD5:	D22A8FDC46CB9D43DBD663288A943256
SHA1:	11B710C38E1A004FD78D6BDBEFB80F7177943FB3
SHA-256:	2D312B7F69CCA290B0D3669E311FE62BA66FB107DA3C6B1E0AFCE41D19B3AA3D
SHA-512:	176281EBA3DA3C88ED53AC711B4C4CA51D3ECFD318C9664F364D6B73A7CD5544A823B6105DC7F1630C4E86362F4A088A777AC63FC405B190617867FF2987A494
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/media/p2eh50z4/will-thompson-0862-hi-res.jpg
Preview:	......JFIF.....H.H.....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....J.)....\|z...#.~C.^....b.....\\|"......A..I..=.>...>..[..4T........t.^: .8..Gn..=8.^.vEE{..5~.i.....1..Is...#.@.<\|...gVN<.K.+..PV.zk....Kk...H..s...w..@....kEk\|.3z9s-].....ic.?..y_...I.........8..9.{...4..$.^..}.1*..W.....e....../<.......k........h..W...z...(A...#.@...6..r..Y.-..[.8...~..~j ..uq...........q.T....`./...}.~.....z......~....(P.3..Y..Y....s..

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3
Category:	downloaded
Size (bytes):	3197
Entropy (8bit):	7.847629160436538
Encrypted:	false
SSDEEP:	96:X0p8T36uBMMZHiihNmMedf+gAv6XfUz72:XX6ulCihN+GgAv6Xc2
MD5:	783B7EEEB343B734D39991EA2F7D3F25
SHA1:	EE941705EC8D109F84F1D4A5FB59B0520F9108E9
SHA-256:	B3015144C527A68191F36B995AFAE7A3C80DD92BBD88B9C6BCAB1E38FD5CD8AE
SHA-512:	6346F9C25A9132D28D8400B153594EB47CD5B65FA4199F654D35DA96CACBE892B47D0C84F0C8583FCF48AC1C3CA8A0ABE6C7924C86C1D4DE57F7C9D8F82D4C6C
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/eSnzhoiLwx8/default.jpg
Preview:	......JFIF......................................................................"...............................................................................Z.x.."........................................K.........................!.1."A....2Q..#DRTaq......34SUd......BCE.$bers................................4........................!.1Q......Ra...ASq.."23C..............?..TT....ov......ov...;....I.!Jr...{...\|.-L...U..,>:.8e.W..G...B..z.n_....z.T.......U......\...~.G.W...w?\......3..Ek....W?....W..Y?.{....3...U.....x.0..P..\...2.......v....^.t...QS../e}..f..o.{.......V.2..!Jj.....z..=.r...TG..q.._.....[..../.p...lIJ9NX..)..*.F.E....3;.....{kT...Ueg....GT...Z.)..._......S...wM..&..DT,....F.......]..6.o..X....\v.h...H#31X.9...[.......n...../..h....fe.......>......O...=..2......c&.F..%...p.w...F.y..S...i/!...!.us.(._.i...i..\....;;.L>..q:>C..2.B}_..t{6._.O..>..tnv.h..!....(B..+822...{j..h.&.#2....X..C..^....7..a.ctVv^.r#D..o....E.b...#6...i.T......jT.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3
Category:	downloaded
Size (bytes):	3067
Entropy (8bit):	7.84439620644915
Encrypted:	false
SSDEEP:	48:Les9ijvce8e3RrepA4CIOwY1ayKL6cOKAPcLOGtwgVykSXnqym9IeWFI4NdI9i:LgRwAVIw19ngxiGjVykSXn3m6Jac
MD5:	6552571B3CF29F18432FB3DDD61C4835
SHA1:	429D1CFE97D8C3B9816A480F557736941DBF292E
SHA-256:	3600BC41CBEFA3F9EF880DF9A495CF859E7957D4454E6635B01ABF45C3867EE2
SHA-512:	7CF4A31E93B14DED0D591C52012470F23A0D1D7E83BF0BA890E8CD86BEC711E7F473AE1FEB5865D214F050F5D996ADE24941DF1FED6EB4E4DE209672EEA5D054
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/JCcqzCo7X-M/default.jpg
Preview:	......JFIF......................................................................................................................................................Z.x.."........................................=........................!.."1A.Q.....2R.#Saq.....$3C..4Bbc................................2........................!1..AQ..aq....B."23R................?.....2....[e....T.J.z)..a...f.+mE.&.:i.d....D.)M.k..DH.H.x....H...X..=..S....#....)...B.,[.x..@vp.>#...J.x-..{......\|O.<.Dt.{q..Z..v.j.tU..).?...).?...9.{.J.EY=.....=.....79...tU..).?.....$.x.NT.x.l.M.5M.O.....>kK.=)."+!............#.......0.......T.q.u..w0i.K.VN..!...D..n.G..Uo.....$...<\|5.)...nPc.....#..+H..L.x.w..n?*...Zz...4(........QIB.^.T.b....9I.....gI..I.....0...j..K.."......`......\...gd..l.1..L3bv,e.(.....l@h.a"z....4.n:..3......0.28.y...L.'......%.....H.=.S....O.K.X6qu..3.{.....'qo..(..\....q8d.4.,...NW...9G...-r.\.5N..1$..6.......\:...<.....u.....kZ.J.X...=E..qK.K.:J..G..#Vg3.h.VT..@A.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2476
Entropy (8bit):	4.891702710978416
Encrypted:	false
SSDEEP:	48:c6gNjJhTTvWWUX1vM+cBmG11vqR5lIse2xTGQTsBmJuM:Qd3TEvMpIjlIsena
MD5:	21D6243CAF0EB27BD01C83D40FFA570C
SHA1:	ABCB4EBAC192CCC249EC89691AB7B5D82F0C03B8
SHA-256:	750A4740A0DAE1290E1E81D22B7663E8E21383E5E09C2F8AE581BDDD9B12F026
SHA-512:	B2A19EE1F377E2BABE9AD4C28CD4B2566AEE0E9623B8995B408A109769A1CEC15B38DC55A0975D320E79815F691320C21A13167788AF94277B48ECAEBD0A2376
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding.com/sketch -->. <title>BC566ED1-24CE-465D-AF83-21882FAF4D95@1x</title>. <desc>Created with sketchtool.</desc>. <defs>. <polygon id="path-1" points="0 0 19.9987778 0 19.9987778 19.9998889 0 19.9998889"></polygon>. </defs>. <g id="Welcome" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" opacity="1">. <g id="Homepage-v3-London-Copy" transform="translate(-784.000000, -3158.000000)">. <g id="Group-2" transform="translate(0.000000, 3132.000000)">. <g id="linkedin" transform="translate(784.000000, 26.000000)">. <mask id="mask-2" fill="white">. <use xlink:href="#path-1"></use>. </mask>. <g id="C

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	479
Entropy (8bit):	7.3541697718836
Encrypted:	false
SSDEEP:	12:6v/7iOdm7nK0OfyyujhwklaNcZywjpVy7oliKXdCMnKGR7:edqK0OfchxGcvjKolJXdbKGZ
MD5:	CECAA911D4B47011356DB9BC30AF7FFE
SHA1:	98B298C421B6B36F104B3BEFE7E38824E3736598
SHA-256:	B140554F1C1D7CADCFC19C8C888F08B7F90C3570473582E96BA3309DCF3B5F2C
SHA-512:	27FC06F6656C7B4D1340F61FFCBE1B20DAC801EDB80812D37B156FD7203D0655E625491061D23233FE502247CACC20F870EE79BB9F172FBC5F2F61DE44910BA4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sRGB.........IDAT8...O+.Q...PwAYY\w....XP>...D.U....Q..,$+.M.dc++)++.R..p....w..&]o...>....3.TB.c.a........7.."c.`.....`....j..kP_...a....d.m.a...PW.)..g."..d...u... 6.=.A.V...J..4%9........f+...X.6.."$$..)(.^.>.MB.KVM.....H...jx....7&4(.x...@..@...lX._...9].....NC .'.:f...=W}...............B..@H.!\|..W.....O>.VX..fy.....l.g..]........E7..6.wT.!.P.Q..<o...Z......-.....5.........m...p...j{2..4...]....F....6....IEND.B`.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 396 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8673
Entropy (8bit):	7.948323625071419
Encrypted:	false
SSDEEP:	192:m54ccslcDuDaMcSz3tk748Ha+BPc3n8EG02i1AIjdJWHPAiBMrVAFI:m5pcI7D9W7z6+a3nFGbOAI2HnKV5
MD5:	24F82465166224D77803C82B8AD42520
SHA1:	769F9248F688F206B9FD690073D81438BA03399F
SHA-256:	384FDA80DAE6F4AF91673E58153C5B003F706C053D6769C21DA586CD7FC27276
SHA-512:	2B9996E6CD1475D8FE806F35798674C6DCDD950A617298F493A5F2C269988F134E5B0E77078779DCB8C5AD502C443E43EDBB199CED3F1ADF9AFECC68D2057997
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/images/footerlogo.png
Preview:	.PNG........IHDR....................sRGB.......!.IDATx..yl.g}....8.}:I.. m..=SJ.UCe.....2A.....@..4MH..4.L....P.B%.Mm)..Q(mi.A.....v.$v...}>..>~.....4(_..>..9...z...\n..P(l..~.6.."n'..p...r..I....^8_.O.....H.'......i.1].>.X....6x...\........^.[..../..&.S.0.>..p.ao..\.......I.eF.M.}....?Nzk.^..+..!.~.I.....C.g.OWqL...dL..~..H.X.........8m...U.;...........6...`..W.]..%.d8.]....s@..l.{.3...S..@.x......#V.82..2....\!.Q$.P."w.x.....rj'..?.U.f#..a...Q.}..}..q....<.f....f.....;...8....!.&.J2..\.i.......w:r.r........Z....%x......Q.....2..\|.<.n....g.9.{,w........8....q.~......c.....@J...N/.De../#mY....M.oe.5..S7n...W..\|.e.k!y.IkB.c..............B.,.[D....GK.....g......0...u.f.6....=G.....k'...+rgi.6./.]..I......&~.....i.........,.O......[@a.x....2..B.4..S..i...A..............V../.4....&.fr?..!.... }.U..e~_&}>8..n%...s\+....\.n$....]...)....v..mp..?c..v?A_KiS9H.c.>N..I[G..........4..Ik 5..42..eWSW}..8.r.....G...$.F.n..\|..w.rO.v.2..O.....Bz.N.....y..

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	692060
Entropy (8bit):	5.359477709353989
Encrypted:	false
SSDEEP:	12288:AiURum0531OFSNie+ioYdjy2OZUCuvazMZBs0UAZ6xXG:Y/0531OFSN3+ioYpbO0vazks0UAv
MD5:	06F7A1C476AF156060222FBDFEF1BCAD
SHA1:	470729718A2170181589F05B318C8D2B210CC9D8
SHA-256:	77E70402E48FC86C1BA988FA9E0572A851DB5505BBF86266F9484DFF508072C9
SHA-512:	024BD6246A282814A154A6ED7618DF934E920CA89F626290B661239E7C784E5FF4554164AF6328A3FA3619C52F1929CD149453F6B472B95C89FAA47089EE71D9
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/js/app.js?v=638633793483684870
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	692060
Entropy (8bit):	5.359477709353989
Encrypted:	false
SSDEEP:	12288:AiURum0531OFSNie+ioYdjy2OZUCuvazMZBs0UAZ6xXG:Y/0531OFSN3+ioYpbO0vazks0UAv
MD5:	06F7A1C476AF156060222FBDFEF1BCAD
SHA1:	470729718A2170181589F05B318C8D2B210CC9D8
SHA-256:	77E70402E48FC86C1BA988FA9E0572A851DB5505BBF86266F9484DFF508072C9
SHA-512:	024BD6246A282814A154A6ED7618DF934E920CA89F626290B661239E7C784E5FF4554164AF6328A3FA3619C52F1929CD149453F6B472B95C89FAA47089EE71D9
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1518
Entropy (8bit):	5.016029588344921
Encrypted:	false
SSDEEP:	24:2dLnQKLSzEdeaxM2pmyROOHeoYOzfD3UikRllgTtn7FhdZhzSWfndPgWSCU5M:cLQOyRyQonb1mgTtn5zSIdPTSg
MD5:	9F64274BB26B8C885DEDCCF4CB331589
SHA1:	1447FFEB50D06A0D0EBF1BFC1BECEB5ADF3A1A92
SHA-256:	3E3C292639AC42ACD1EFEB25C57B20529D11DD3902E745C8679F069F33039782
SHA-512:	A225BED99020D72F1AA7DA9C3C0F48E6B4F65296412AEAFAB9DC8DB1CBE7493E417C18AFFB3EC800D62F3278E996519270498F7632E26E1473280B0AC0C4106C
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/images/YouTube.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="23px" height="17px" viewBox="0 0 23 17" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>YouTube@1x</title>. <desc>Created with Sketch.</desc>. <g id="Symbols" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Footer" transform="translate(-1329.000000, -153.000000)" fill="#FFFFFF">. <g id="Page-1-Copy" transform="translate(1329.000000, 153.000000)">. <path d="M9.14772727,11.6539036 L9.14772727,4.73602207 L15.1590909,8.19509504 L9.14772727,11.6539036 Z M22.5193523,2.55933068 C22.2548523,1.55187733 21.4754659,0.758550778 20.4859432,0.48930616 C18.6923352,-1.32177033e-05 11.5,-1.32177033e-05 11.5,-1.32177033e-05 C11.5,-1.32177033e-05 4.30766477,-1.32177033e-05 2.51405682,0.48930616 C1.52453409,0.758550778 0.745147727,1.55187733 0.480647727,2.55933068 C0,4.38

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1925
Entropy (8bit):	5.042947473848433
Encrypted:	false
SSDEEP:	24:2do9eclRLz0wOaa2OA6t3tCnxDQUUDQnG+pn9mBthMuvDeaxMxfjsLDFg8JbV+Cy:cunoLfU6HUtfxp9mvZLV+TwLqxZ
MD5:	5528B28B117326B649EE30F5627792FB
SHA1:	C6F90C52EAFAED1AB926A0F2CEBBD72DBED76251
SHA-256:	2AD6D4994A8747869703F5D831C4DE9E6581212D7291710D4A81FD9DBF49EC6C
SHA-512:	70A5F30D29794AD506355AF97444B31901443D8A28AB8395D0BAC5041F1C800B88688021503B098E5E28B4770555CCEF729CE7A924A71428850A3CA7A13925A9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="126px" height="126px" viewBox="0 0 126 126" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: sketchtool 56.3 (101010) - https://sketch.com -->.. <title>DADFBE1A-A194-49CA-890E-ADB193C74F00@1x</title>.. <desc>Created with sketchtool.</desc>.. <defs>.. <filter x="-162.0%" y="-162.0%" width="424.0%" height="424.0%" filterUnits="objectBoundingBox" id="filter-1">.. <feOffset dx="0" dy="2" in="SourceAlpha" result="shadowOffsetOuter1"></feOffset>.. <feGaussianBlur stdDeviation="20" in="shadowOffsetOuter1" result="shadowBlurOuter1"></feGaussianBlur>.. <feColorMatrix values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.2 0" type="matrix" in="shadowBlurOuter1" result="shadowMatrixOuter1"></feColorMatrix>.. <feMerge>.. <feMergeNode in="shadowMatrixOuter1"></feMergeNode>.. <feMergeNode in="Source

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2589
Entropy (8bit):	4.864382786821925
Encrypted:	false
SSDEEP:	48:ckmVq+TTv7CXcvZSApazp4eML1EJiqEq5dVHEtlmaZ4cvVZyuM:GVJTZvZzpUM/q5dVVU4cdI
MD5:	2FD48CE04C0099FD0FC8C1ACD4B70739
SHA1:	A75EADA7C1BED38AF59CA2BE34524AB6778734CB
SHA-256:	F925A9FE6FBB5D3CEAD11DA9204BD6885C400EA641367B8E814F4DEF8B9ECEAF
SHA-512:	FDD693DEC523F03F7FEF93294F0A63B182422635320576790C29D210206EBC4951EA3443810B32FFB6A62682A60FCE6EA0AA363711BFBB8733F7DEDD9DF9ACB4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="25px" height="20px" viewBox="0 0 25 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding.com/sketch -->. <title>50ABCC23-E067-458F-A693-D2B82AE55CA4@1x</title>. <desc>Created with sketchtool.</desc>. <defs>. <polygon id="path-1" points="0.00538116592 0.0737219731 24.5192825 0.0737219731 24.5192825 19.9946188 0.00538116592 19.9946188"></polygon>. </defs>. <g id="Welcome" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" opacity="1">. <g id="Homepage-v3-London-Copy" transform="translate(-684.000000, -3158.000000)">. <g id="Group-2" transform="translate(0.000000, 3132.000000)">. <g id="twitter" transform="translate(684.000000, 26.000000)">. <mask id="mask-2" fill="white">. <use xlink:href="#path-1"></use>.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	dropped
Size (bytes):	321373
Entropy (8bit):	5.493854818766851
Encrypted:	false
SSDEEP:	6144:5AOOeIqurxfiM0CCpYc4NSYYMrmgmETVFzrpQqr3K9zwrcRjI0UIBBWv9G:eObuZGpt04
MD5:	08742814270EB419F18089A9CDA3CA1A
SHA1:	D2C7101C8D2582507FA53DBEE046780C2DC1EAA1
SHA-256:	797B10B3C0390D014F5651DE778EED2167A6006CC261BBB014E8CC08464C5347
SHA-512:	0EFA219742C3861DCB72C836ECABABD13AEEE93193D2BF0976E449540A4C98B47AC88175B68440B832C65F498F6B63E717767E57586E3911B980228D8B593CAD
Malicious:	false
Reputation:	low
Preview:	!function({retentionPeriodDays:e,timestamp:t,daysBeforeNotice:i,productName:n,version:s,ignorePattern:a}){if(a.some((e=>RegExp(e).test(document.currentScript.src))))return;const r=(-1(Date.now()-t-24e60601e3)/864e5).toFixed(2);r<=i&&r>=0?console.warn(`Warning: The version ${s} of ${n} is set to lose support in ${r} days.`):r<0&&console.error(`Error: The version ${s} of ${n} not supported anymore.`)}({retentionPeriodDays:90,productName:"accessWidget",daysBeforeNotice:14,version:"v1.16.36",timestamp:1727614033054,ignorePattern:["/^(?!.v\\d+\\.\\d+\\.\\d+).*/"]}),(()=>{"use strict";var e={301:function(e,t,i){var n=this&&this.__values\|\|function(e){var t="function"==typeof Symbol&&Symbol.iterator,i=t&&e[t],n=0;if(i)return i.call(e);if(e&&"number"==typeof e.length)return{next:function(){return e&&n>=e.length&&(e=void 0),{value:e&&e[n++],done:!e}}};throw new TypeError(t?"Object is not iterable.":"Symbol.iterator is not defined.")},s=this&&this.__read\|\|function(e,t){var i="function"==typ

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3
Category:	dropped
Size (bytes):	3197
Entropy (8bit):	7.847629160436538
Encrypted:	false
SSDEEP:	96:X0p8T36uBMMZHiihNmMedf+gAv6XfUz72:XX6ulCihN+GgAv6Xc2
MD5:	783B7EEEB343B734D39991EA2F7D3F25
SHA1:	EE941705EC8D109F84F1D4A5FB59B0520F9108E9
SHA-256:	B3015144C527A68191F36B995AFAE7A3C80DD92BBD88B9C6BCAB1E38FD5CD8AE
SHA-512:	6346F9C25A9132D28D8400B153594EB47CD5B65FA4199F654D35DA96CACBE892B47D0C84F0C8583FCF48AC1C3CA8A0ABE6C7924C86C1D4DE57F7C9D8F82D4C6C
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................"...............................................................................Z.x.."........................................K.........................!.1."A....2Q..#DRTaq......34SUd......BCE.$bers................................4........................!.1Q......Ra...ASq.."23C..............?..TT....ov......ov...;....I.!Jr...{...\|.-L...U..,>:.8e.W..G...B..z.n_....z.T.......U......\...~.G.W...w?\......3..Ek....W?....W..Y?.{....3...U.....x.0..P..\...2.......v....^.t...QS../e}..f..o.{.......V.2..!Jj.....z..=.r...TG..q.._.....[..../.p...lIJ9NX..)..*.F.E....3;.....{kT...Ueg....GT...Z.)..._......S...wM..&..DT,....F.......]..6.o..X....\v.h...H#31X.9...[.......n...../..h....fe.......>......O...=..2......c&.F..%...p.w...F.y..S...i/!...!.us.(._.i...i..\....;;.L>..q:>C..2.B}_..t{6._.O..>..tnv.h..!....(B..+822...{j..h.&.#2....X..C..^....7..a.ctVv^.r#D..o....E.b...#6...i.T......jT.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1340x900, components 3
Category:	downloaded
Size (bytes):	208554
Entropy (8bit):	7.729597352884924
Encrypted:	false
SSDEEP:	6144:iRsqT111111111XgfaJBdudzAS9iTEV443:iRdWaJHg9iTEV4g
MD5:	A72D55BBD7FF48FD22DBB6C87AB26DDE
SHA1:	9A63B4DF6FA3BC7A19F7EC22C0C775E7060A91B4
SHA-256:	5941C9F6CE335BA52B6EC4C79DA96131E1B5A18B78CF5329399C322C839A1B20
SHA-512:	D92E4CF9DD5B409B6824779BF99FD85880E9B99665B7083240DAB779E779DC9FD4FAA0BDD08329DC58860A2B30A254C2BF1DC629F2076DBF1CD54911AD56369F
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/media/oo2oek0r/doha-map.jpg
Preview:	......JFIF.....H.H.....@Exif..MM........i...........................<...................8Photoshop 3.0.8BIM........8BIM.%..................B~........<...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?............?....@...........2;........V...ko...sx...n.....O.c.....6..z.....\..[.].....`g...\...+(.........N3..............K[.tf.MgY.4w.oSM.U..t..5)T.Zv........Y..\..2D.1P..K.8/c.V.........0I$...^....o...K.\|-.x..g..TX.=K......i...E...\|.?

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53433)
Category:	downloaded
Size (bytes):	54732
Entropy (8bit):	5.669871884850648
Encrypted:	false
SSDEEP:	1536:jE1zdCOSn76x9wvCz9KoqFeL8vfTTlbPTJ4Ds:hOo764vCzLqFeaTRaDs
MD5:	CD868A73DD4625BC8E0C5334E6C3F406
SHA1:	B9A97C200D5CE8A9FC7446001655FE378E12B92E
SHA-256:	B7E22A529F096DD764A9B89CF0BEE23C21DE6B0C385311DE5B97E777D884CB55
SHA-512:	C7C53BB6A464FD822D04AD77EA55698AE6C199463F2FE04B06B768AFABF9802D1A2AD11A9F4A6EB255A112E815002D0FE285309CF680E2EA468E6BBF4C371B3C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/t-IqUp8Jbddkqbic8L7iPCHeaww4UxHeW5fnd9iEy1U.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function d(y){return y}var l=this\|\|self,k=function(y){return d.call(this,y)},c=function(y,L,M,u,A,D,T,t,w,C,e,a){for(C=e=83;;)try{if(e==y)break;else if(e==u)e=l.console?M:53;else{if(e==53)return C=83,t;if(e==L)C=83,e=u;else if(e==M)l.console[D](a.message),e=53;else if(e==56)e=w&&w.createPolicy?4:78;else if(e==83)w=l.trustedTypes,t=A,e=56;else{if(e==78)return t;e==4&&(C=89,t=w.createPolicy(T,{createHTML:k,createScript:k,createScriptURL:k}),e=53)}}}catch(Q){if(C==83)throw Q;C==89&&(a=Q,e=L)}};(0,eval)(function(y,L){return(L=c(41,99,82,33,null,"error","ad"))&&y.eval(L.createScript("1"))===1?function(M){return L.createScript(M)}:function(M){return""+M}}(l)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/jso

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53433)
Category:	dropped
Size (bytes):	54732
Entropy (8bit):	5.669871884850648
Encrypted:	false
SSDEEP:	1536:jE1zdCOSn76x9wvCz9KoqFeL8vfTTlbPTJ4Ds:hOo764vCzLqFeaTRaDs
MD5:	CD868A73DD4625BC8E0C5334E6C3F406
SHA1:	B9A97C200D5CE8A9FC7446001655FE378E12B92E
SHA-256:	B7E22A529F096DD764A9B89CF0BEE23C21DE6B0C385311DE5B97E777D884CB55
SHA-512:	C7C53BB6A464FD822D04AD77EA55698AE6C199463F2FE04B06B768AFABF9802D1A2AD11A9F4A6EB255A112E815002D0FE285309CF680E2EA468E6BBF4C371B3C
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function d(y){return y}var l=this\|\|self,k=function(y){return d.call(this,y)},c=function(y,L,M,u,A,D,T,t,w,C,e,a){for(C=e=83;;)try{if(e==y)break;else if(e==u)e=l.console?M:53;else{if(e==53)return C=83,t;if(e==L)C=83,e=u;else if(e==M)l.console[D](a.message),e=53;else if(e==56)e=w&&w.createPolicy?4:78;else if(e==83)w=l.trustedTypes,t=A,e=56;else{if(e==78)return t;e==4&&(C=89,t=w.createPolicy(T,{createHTML:k,createScript:k,createScriptURL:k}),e=53)}}}catch(Q){if(C==83)throw Q;C==89&&(a=Q,e=L)}};(0,eval)(function(y,L){return(L=c(41,99,82,33,null,"error","ad"))&&y.eval(L.createScript("1"))===1?function(M){return L.createScript(M)}:function(M){return""+M}}(l)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/jso

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/0.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1340x900, components 3
Category:	downloaded
Size (bytes):	442141
Entropy (8bit):	7.928692241018938
Encrypted:	false
SSDEEP:	6144:R0hMPqgHMjfAHFjOTOLCns+cWtZBpiVQTG0lOZ8Z/NVwJm+i2jYOrIN8:RUgvFjOTzu5QTG0lOmNWu2uN8
MD5:	38EACF5D17DDE7C1063DB02DD5F2787A
SHA1:	E2407A4B2508483B6B69006F508E9C8A79A69EBE
SHA-256:	7593635935DBBA82049A6E743982F2A83F363E5AE376804BE58693EF1BFAB136
SHA-512:	B654AD1E43A4068046DAB9A5A8D05E56132105B7BF63E08FA41FDEF326E85EDABCD2CDE3BEEA6684454C59D061B7FC5CEE3344CF74F1164854FF5B3A3979CA0F
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/media/p4ykb44q/office-detail-map-1.jpg
Preview:	......JFIF.....H.H.....LExif..MM........i.......................................<...................8Photoshop 3.0.8BIM........8BIM.%..................B~........<...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?...(....H..mn....V#..(G'.. .o..f9...}r.'....e.fXuu,...$n........2...(....6...a....@..2.q.M.......0.6G#.s$...A\|..q.P.#um%.....$+..`:0.\..=;.. .....;.(....t+..j."./.'...6......2.... ......h...Yi....V..-....Hs,.P....G..-.N.M..

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1440x310, components 3
Category:	dropped
Size (bytes):	56122
Entropy (8bit):	7.960275098204318
Encrypted:	false
SSDEEP:	1536:4nvcVtnTTBq9RZPAo9ZHGJFITQgGYBfmLuWT3FiyLnH:4n0VtnTTBkRZYo9Z6FITQgGY5mjrFiyr
MD5:	CB31BDD5BA64FA327F0B1985C24FC2B5
SHA1:	C2FF53030B58F23A129F180E8B8488FEDC7CC90F
SHA-256:	D4375AB2D294076BD6D4A3BE0D63E6603351BEE58AB82FA00E042488F52DC0FD
SHA-512:	A658F68273B9EA28E088BC843EA57A2C6CB8F71763A2087E1816D9E87506C8F09CEBF590B221BE14FCF22D27C4C044449EE541AF67E82617003C8273E0DB9ED9
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	692060
Entropy (8bit):	5.359477709353989
Encrypted:	false
SSDEEP:	12288:AiURum0531OFSNie+ioYdjy2OZUCuvazMZBs0UAZ6xXG:Y/0531OFSN3+ioYpbO0vazks0UAv
MD5:	06F7A1C476AF156060222FBDFEF1BCAD
SHA1:	470729718A2170181589F05B318C8D2B210CC9D8
SHA-256:	77E70402E48FC86C1BA988FA9E0572A851DB5505BBF86266F9484DFF508072C9
SHA-512:	024BD6246A282814A154A6ED7618DF934E920CA89F626290B661239E7C784E5FF4554164AF6328A3FA3619C52F1929CD149453F6B472B95C89FAA47089EE71D9
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 94337
Category:	downloaded
Size (bytes):	42084
Entropy (8bit):	7.99323226114822
Encrypted:	true
SSDEEP:	768:1v6Z/eYrTkA7HYmyaDkk/Di4T2Yv/eiXwXyJYLwfVfsKJqroV:NSeETH7Hbyw/Diev/BXJJYLwZn9V
MD5:	465E10ECCE6684A330F79EBB313C06D7
SHA1:	A0DA2CD5493027844090859A22C44155E1029B71
SHA-256:	0035884AC8B31405CD20B78F2D03219D8580AE8A987E8719FDD197126BC0D1F6
SHA-512:	C3A18C3E304A23ACEA3D600D998A365817282C37B7B36DD1131F80456A00382A24C0B4153D11D3D2E3237B779F2BA61117F33E528898D64DABE992F51C441A75
Malicious:	false
Reputation:	low
URL:	https://static.srcspot.com/libs/avril.js
Preview:	............k{.J.-.Wz?3.mwy.t..5>=.l@.b....s.t..$.R.....OD..Jv..~...z....DF.X+2..2.....b.&..b?}.3.5...1.Yw.w..[.=\..?7.+.}!..19..k....E:..V.....oU....3c....Wk..,..W......pP.W.`L......tk(.v....2...&&:mQ.B..1Y..q.....7^.m.b.+....Z......./..9N./...o.....i.\.C..Y.Z._M....\g^...cueuW}{..CQ.oo..........B..m...6nZ...2.........<j m.6.8...1..F....,x~q..w.k.Kn.wh[M....'^-7....%.F.Y0d..gY._..mL..&...D}C..[....-_D..Q.......^.....z..q^...=...tP...s2F&..;.t..../.U...9u..60.Z....n...2vq\|-....2....F../...bi[...u...ZZ-j7Z.........cLp A+..j...5i...1oh...1...{..c..zAD.G.[..7F/...?.`.o.....V..u0&....t^_..^.o..k~....v....Z}.cT.gc.t.W.B.e`....J....8..{.m....*.g..k!.Y.;.#..N...k.c.......lMk>.7.V7.-...g...v.O.=.Z.K.........:.....[z..i.....=.O..V.........._W.{...`...g..V.....x^1..=.F.z...Y.[.U.....A.7...j......J.{\.aj.G.O...,...o.?..w.......[K?\|....16\|c2......9..C.L....`V...&..{...6FC...]j[c$#"Y.r.Q....6]..9....W.\..m.n..9%.\|2..AfC.m.1^..zm.[......1.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1728, components 3
Category:	downloaded
Size (bytes):	335330
Entropy (8bit):	7.953817989678773
Encrypted:	false
SSDEEP:	6144:uK0v8JR3vEh8p5DGODKzfHbMJ/Uo2Q49TMcqAcEiVdzrQxZmbHqP1zAc:uKjECp5ae4zMOoYTMHXnVxrQXsG1z9
MD5:	3674AFC18121BC3D68D9B828EBAC2F02
SHA1:	CD0DEC6C2FD8677D55E4B85BDCB2B20DF2081596
SHA-256:	4AFC7E9ADF4468BEB5CA70193306879DA5260BC27A0264F2FB21D80AE05A7B71
SHA-512:	4DA6674AB4EE15CFC4EAF0D3195C8DF33D8F74AEBCAB239414CFE1022254CB7D5C10019BA005228C92BBE20B00EF49348DD2042903E5F1B40D447ABB1ABF45ED
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/media/vsln2m1e/london.jpg
Preview:	......JFIF.............C...........................".##!. %*5-%'2( .?/279<<<$-BFA:F5;<9...C...........9& &99999999999999999999999999999999999999999999999999........@....................................................................................o... R...........)AJR........R....R......PPP.R............H..(....................!@.........@.@......... (.... ....( .......P.B..... !.B....................... !...!. ...)..!.....)J...J.P.R....)A.AAJ.J.AAJ.AAJB.P..AAHR..........P.H..P.B...........H........@R.........R........R..R....... .1).. ...... .................B.........@@.. ... .....B.......qAJ...J.......PR...)AJPR............PP.(((!@ . ...............)A..H.... )...................@.@.. ..R.....@..... ...............B..@@B....!. 1.)......... . !... ........x(()J.P.PPPR......(2.@........(((.(.....PR....@.........(.......R...bP. ).HR...@......(....!H....(!A.....!HP@...@P@@...............@@@@.... !.R.........@@@@@.B..@@.... ....PR.R.........()AAJR..)AA@)@)AAJ.((..!J.AJ@.......

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	692060
Entropy (8bit):	5.359477709353989
Encrypted:	false
SSDEEP:	12288:AiURum0531OFSNie+ioYdjy2OZUCuvazMZBs0UAZ6xXG:Y/0531OFSN3+ioYpbO0vazks0UAv
MD5:	06F7A1C476AF156060222FBDFEF1BCAD
SHA1:	470729718A2170181589F05B318C8D2B210CC9D8
SHA-256:	77E70402E48FC86C1BA988FA9E0572A851DB5505BBF86266F9484DFF508072C9
SHA-512:	024BD6246A282814A154A6ED7618DF934E920CA89F626290B661239E7C784E5FF4554164AF6328A3FA3619C52F1929CD149453F6B472B95C89FAA47089EE71D9
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/js/app.js?v=638633793696690455
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1623)
Category:	downloaded
Size (bytes):	2120
Entropy (8bit):	5.507213876434974
Encrypted:	false
SSDEEP:	24:QT+JuL+5VV/bbdYrBdfxSjLbaQRNTzyMqAXfvdCCd/NLZOqZAnzzew/un2DxZ/oT:a+w2Xmror1zy9AzwdIcyUY8y08QntGh
MD5:	11D89AF3414C7A4DC324BE89B1A5CE2C
SHA1:	D68A4D4193AF0419784B91622EBC4AF5ABD1042B
SHA-256:	D37A7D61B33B7277B794FC7BE203B20292EC5B9FB091DD3112603C8C48C5A7F6
SHA-512:	BD6B1B4069082433631D9551F3E20460ED292A734E6B0F0483C7EC4555829F2A5FB976B311CC621267F60F4D74C8CAE4C68A7F6EF3E47D154C810A752B6A7C03
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/js-cookie@2/src/js.cookie.min.js
Preview:	/*. Minified by jsDelivr using Terser v5.19.2.. * Original file: /npm/js-cookie@2.2.1/src/js.cookie.js. . Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. /./!. * JavaScript Cookie v2.2.1. * https://github.com/js-cookie/js-cookie. . Copyright 2006, 2015 Klaus Hartl & Fagner Brack. * Released under the MIT license. /.!function(e){var n;if("function"==typeof define&&define.amd&&(define(e),n=!0),"object"==typeof exports&&(module.exports=e(),n=!0),!n){var t=window.Cookies,o=window.Cookies=e();o.noConflict=function(){return window.Cookies=t,o}}}((function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var o in t)n[o]=t[o]}return n}function n(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(o){function r(){}function i(n,t,i){if("undefined"!=typeof document){"number"==typeof(i=e({path:"/"},r.defaults,i)).expires&&(i.expires=new Date(1new Date+864e5*

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 30300, version 1.0
Category:	downloaded
Size (bytes):	30300
Entropy (8bit):	7.993418111755878
Encrypted:	true
SSDEEP:	384:JJj2OX+0beS2DggfX+LtAcHco4RRXeHtxnYmbll0r7E8T1bO+c2m3BcPYkwLJa3T:JBjbaNZtHsnYA0k85bbTPZO6JZ
MD5:	BA676CBAF74D3DE20FEE293293FC8CFF
SHA1:	47F66FCC6BA6EC329067A28C5A715B8C02A1AF05
SHA-256:	4EB89D70A97954FF49D4ECB3C0CBC1C3ED08C42EBB48E70C7829C96C54721113
SHA-512:	D90D47C05AE8ADC93097A78535F2E7A8CD2F95F85FFFA4EE98E8EC259AB21D42B18EA52A3C4642B82E6D4F2795B7707E003F7AFAF5556ED61DF1AF6B2C3FE65C
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/fonts/Lato-Italic.woff2
Preview:	wOF2......v\......1...u.........................?FFTM....(..j.`.......e.....D.."....6.$..<. .....`.K[..Q.Y........ug#".8...L..c....H.c...........5-..e8&.......8.LlB......\.....p.-fPx......X.>..L.`..=Z...nLx......<_.......\..........l.1[...Z....S#+9y...g.(/.}~......R.PQD55O..G.f.p......"..$...x..o?...............X.X...o.0@.....N;.....2P....E.......T.F{..Rg...\..6.y.....v...3...P....?D}.G(@..].0.v`.I.......T.....P$EH. ..2.........k...A:A8.&..Hm..<.v.S...V.;..........@..#.m}.1...C...x....^...N.m.......p..54}.N...l%..C#R.]...t.F.h... ..;t......J .V.q....i.g........p..p..O0.j...........A....=s.1...\|P. .H!...C-L...QQ...p...T.6 e.z?.K...d.dw...i..M..& ..aNk.H..GX...N<j.V...(.O...N.../!....^..Mx..X.U.......,\|....P...G.7.&5......>T..mi}.nu......%....c....@.@.A..u.U_.uK.nAI.4-.$........\..H..G.g.=.....=`.z....`.....,. ....Q.t..........c.7^<`. ..V..{\|z......./..........,..f..x..q..DM.p....S,7.....).}.4....F...W.{y......8,.N.r.P.....

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1728, components 3
Category:	downloaded
Size (bytes):	289763
Entropy (8bit):	7.96307645651027
Encrypted:	false
SSDEEP:	6144:7zxByTm13m9xd2buKlcHz/Jtk6wcDpDw/BAdgCxGX0Q/b+XO:BBn3m96vqrbFVp7eC4z/b+e
MD5:	5561E7D70799427F474E2B5CB29C17B8
SHA1:	B0F5816735C09CB21AF434063B71E37FD8689034
SHA-256:	139D009AFDF0E3A5B4361E9DF9A604F0FC14AE6EFCAAEFC6A9ADF64485C083B8
SHA-512:	E2C17E6E654AF81E2FCC3958127E3C00DF139ED5EB0017B7E6D22DB9D29E6C60BE0B26D646554E5726259ABEE4710868363452BB176E4FDA4DC8C1F43570C059
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/media/id5e4qm4/losangeles.jpg
Preview:	......JFIF.............C...........................".##!. %5-%'2( .?/279<<<$-BFA:F5;<9...C...........9& &99999999999999999999999999999999999999999999999999........@.....................................................................................@.alU%..(Z.U..(RR.(....."Z.........aT.....E............B...@X.R...h.!H.P!J.....X.j...B..H...VU@.HXT..A)..I.Z.(...hB..`.j@R.[.B...Z.j...R.Z............@.d[.(.....e.d.e....%XR!B..$.P.V ..U..H..P.. .....H..(...,..Q....dJ.,.A@-..J..A..QJB...@.%.B.....-@.E....eQ.-R@..%.....B.....R....Ye...).........P.@R.......@.D.....V!E...IH.R...JE.....IT........(.........VIj.RB..D($.a@D...K.IV....D)!D.(D(..( R%R..ZD).LA@..j.% Z@,( 1Il.%..?..QV..IJ.IT.).A...Z....Z.....D.AAAaj..K..,.[P.P.,...P.U..(X...H.R..Ah.("....J@.HU..(%!@(.(....B..!@.-.................. ......-..DU.`. .B........XR%X.. .@ J...DJ..B.... .!@..QPB.,.(... ....@...X...P.b.D.KV.=..b..`.AV.h...Z..Z.IV.B.B..Q..!@(..,.EAj(.lD........*.RZD.U.B...RU..`........P..(.B.......(R.........

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2124
Entropy (8bit):	5.00266658839156
Encrypted:	false
SSDEEP:	48:c6gNjzTTvKDq+lnw8WqYnTCQeL9CgP8PLVExLCnmN28uM:QdzTmIirP8P2P
MD5:	B6FB08313F87B2F01A19660890CCC0F4
SHA1:	075806AAC2013324BDA98683CA4A79F07E6D9BE4
SHA-256:	69AD961538FD4E6151432627E5D34E5EE144D8F211AE20D1053197FE69631766
SHA-512:	5BBAAED6F0888B9643C547A92D6E618CB1EC998A6FAB2BAB75B435A8D6AD8C280A30949744033F4C6CC0789457FB64D564E9AD08231597F894745522404AA347
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/images/facebook-icon.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding.com/sketch -->. <title>63516B19-0E89-409F-8BBA-71A05BC9A140@1x</title>. <desc>Created with sketchtool.</desc>. <defs>. <polygon id="path-1" points="7.4906367e-06 2.99625468e-05 19.9920674 2.99625468e-05 19.9920674 19.9921348 7.4906367e-06 19.9921348"></polygon>. </defs>. <g id="Welcome" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Homepage-v3-London-Copy" transform="translate(-637.000000, -3158.000000)">. <g id="Group-2" transform="translate(0.000000, 3132.000000)">. <g id="facebook-selected" transform="translate(637.000000, 26.000000)">. <mask id="mask-2" fill="white">. <use xlink:href="#path-1"></use>.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	dropped
Size (bytes):	217211
Entropy (8bit):	5.5444689661426185
Encrypted:	false
SSDEEP:	3072:OIFkUeQ65WHesJKQE0+3dOhOJjt+/Kjh+qmOWzch2+4jROgGbz:Vn+ytgsGjA/ch2+4jfm
MD5:	63430EFBBB91BA6FEEDEAB7E40BCEC35
SHA1:	3B310E1BB3773A4AE42BD9B54C9EED61B70263BD
SHA-256:	7F5DC9B6FC204D2FAC0BE95309BDC44982D2F019CF3DF3EDD86CAE2808DD0076
SHA-512:	BB9201937ADF790B167836F24AD693FDC8869DA6F0E999531EE4A982FB08850B9CE9EEC10ED4F9BA468EDB29F317FDF554023A03B8039F31F6986B065CAFE2F2
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":10},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-17720203-1","tag_id":13},{"function":"__rep","vtp_containerId":"UA-17720203-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-17720203-1","tag_id":12}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1":"gtm.init"}],. "rules":[[["if",0],["add",2]],[["if",1],["add",0,3,1]]].},."runtime":[ [50,"__

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	dropped
Size (bytes):	338877
Entropy (8bit):	5.616824180269083
Encrypted:	false
SSDEEP:	3072:qBJvrYwB8VOTwDAfqZfbWtnA16zeVjH4mA3SpfJ6jXD7MBEtat9cXqDI8:qjvt0OUDAfqZfR6aVb4mROXD70EIti69
MD5:	39194FBDA3B75220D24BA59F994FCE0D
SHA1:	792E6C8BFE1102C757C9BCFFBC20AE2252CA5022
SHA-256:	E170CA1EEFEC8C4D0FAB4B1884D7B23F99BBA0E16D4FEE3D2F1F4996D287DF06
SHA-512:	30072E703ADC1DFB9FFF0E2D3EC5316B8E0921FD9B12856EED11793BE4AFD647D9E96D007C7D40B9BEAF13416381AC7D9D92345220F6DC0C7AE044F16CED221B
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function u(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.7470003948174115
Encrypted:	false
SSDEEP:	3:YRM9HfHFw65v0NMGAh8xLERDWgRnU/iEhDEgAVMxDV:Ys/lw+0NghPRzRU/RVmaDV
MD5:	229052B37E8ED63856F69D1F5D45E634
SHA1:	DE408BF93DDF318DBAB9B031233110B2FF6815F8
SHA-256:	D59FA87DCBCDB2132316F7F66B835AE54C0D0EEDDD82219C14CCE4BB5700EA25
SHA-512:	B16A51B16FBBF979BA93D2C16636D026D579C26011C72C782E7DD4799E9803B6C0A1771619C7326BDD2EB6C4E2462E08B85B3257E48643CE084ED3BF1095161E
Malicious:	false
Reputation:	low
Preview:	{"time":"2024-09-04T05:42:27.390Z","specifics":"","addonAnalytics":false,"blockMeta":false,"blockImages":false,"blockStyles":false,"widgetSettings":null}

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	downloaded
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	dropped
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	69694
Entropy (8bit):	4.663824620780257
Encrypted:	false
SSDEEP:	1536:SttRcZczYl277tjBbcAb33f4B5H6w1R1pzP7ehSk7m:SttRcZczYl277tjBbcAb33f4HLX1pzDx
MD5:	19AC38CD25A8F97EC57F6565AF8FB499
SHA1:	1BA415AC2F25FF53E13EA2CC0E8068FD9BE103A4
SHA-256:	BF8050693D044179BCF2EBA40718BFEBAEA021811DA225A5A494077250D3FBE9
SHA-512:	63467A2834996BB88E86FBE185F3964347CF3460051138ADB787B863509B0A951AEE8F462D40E7D48CEE2DEA939EE8F133C37E9DCE4F3AD01703D3600FF15149
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/quote1.json
Preview:	{"v":"5.5.8","fr":29.9700012207031,"ip":0,"op":150.000006109625,"w":800,"h":320,"nm":"Quote1","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Shape Layer 1","td":1,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[400,285,0],"ix":2},"a":{"a":0,"k":[0,0,0],"ix":1},"s":{"a":0,"k":[100,100,100],"ix":6}},"ao":0,"shapes":[{"ty":"gr","it":[{"ind":0,"ty":"sh","ix":1,"ks":{"a":0,"k":{"i":[[0,0],[0,0],[0,0],[0,0]],"o":[[0,0],[0,0],[0,0],[0,0]],"v":[[143.971,-12.93],[-143.971,-12.93],[-143.971,12.93],[143.971,12.93]],"c":true},"ix":2},"nm":"Path 1","mn":"ADBE Vector Shape - Group","hd":false},{"ty":"fl","c":{"a":0,"k":[1,1,1,1],"ix":4},"o":{"a":0,"k":100,"ix":5},"r":1,"bm":0,"nm":"Fill 1","mn":"ADBE Vector Graphic - Fill","hd":false},{"ty":"tr","p":{"a":0,"k":[10.971,-32.07],"ix":2},"a":{"a":0,"k":[0,0],"ix":1},"s":{"a":0,"k":[100,100],"ix":3},"r":{"a":0,"k":0,"ix":6},"o":{"a":0,"k":100,"ix":7},"sk":{"a":0,"k":0,"ix":4},"sa":{"a":0,"k":0,"ix":5},"nm":

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	downloaded
Size (bytes):	11017
Entropy (8bit):	7.938809303319445
Encrypted:	false
SSDEEP:	192:kz4AF6HCZKh+ltCuC8rOOmdebEVKnLfB43MhBqZdDaugCZ89fffffS0fKffu:s4QDaB84if2yBqZd69fffffNKffu
MD5:	B5D13A680F33BCA86A9DB3CD370A9F49
SHA1:	DA0D705D158822DB04DAADB92BFB9734A16D7A9B
SHA-256:	2EE530FBD47B1E493A977D59505027E83FC7A4EFD85E8F83B445D1DE9596037F
SHA-512:	434485E94DA800770344E8DC1CB118ACE2E252C33523DD491478A7899F0791ECCE549ED665DC3D946642BBAC558E200C332FE294565C4BAFFEEF8EA45E38A46B
Malicious:	false
Reputation:	low
URL:	https://img.youtube.com/vi/NBEWfKH702s/mqdefault.jpg
Preview:	......JFIF........................................................................................................................................................@..".........................................P........................!...1."AQ.a#2Rq...B...$345brs...C....%S..6DEctu.............................................................!1.QA....2aq.B..."T..............?...)J.O@R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.+..qh..e.SQ!.vy....%.I[.:cV?......l........4.o.....f..r.V.rE.u.,..q.8.!~ouu.>.....<..lA........;~&.G..Q..T^...K..0..7lH.6c.@R...<&.Lk...c%....>. ......W..."..TE.1D...&m.+..62DLI.r.~.....R..Q6)JP.R......)@)JP.R....?.\|i...^.dR..A,.,.+"I..Eh..]A.Kj..y.\|;..Kk&..]h.].q...H.U+.r.e..#.H9.,.j.X.G.)^d...%s.,.&6.)...!.t9... z.Z....h............@YC.FW.B.\.H....H...:%dUf.y.?......!RN.[.BF22.+.dg....[..O.".i"..7P.d.:..'.X.....e.Pr.Y..(.b9".65)J..R....(.)J.JR.R..62I...;.=.....2N.nI...'.....j.+r.....A.i..,.r.%.3.(.+j.c.C.&.Cx.n.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1728, components 3
Category:	dropped
Size (bytes):	335330
Entropy (8bit):	7.953817989678773
Encrypted:	false
SSDEEP:	6144:uK0v8JR3vEh8p5DGODKzfHbMJ/Uo2Q49TMcqAcEiVdzrQxZmbHqP1zAc:uKjECp5ae4zMOoYTMHXnVxrQXsG1z9
MD5:	3674AFC18121BC3D68D9B828EBAC2F02
SHA1:	CD0DEC6C2FD8677D55E4B85BDCB2B20DF2081596
SHA-256:	4AFC7E9ADF4468BEB5CA70193306879DA5260BC27A0264F2FB21D80AE05A7B71
SHA-512:	4DA6674AB4EE15CFC4EAF0D3195C8DF33D8F74AEBCAB239414CFE1022254CB7D5C10019BA005228C92BBE20B00EF49348DD2042903E5F1B40D447ABB1ABF45ED
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...........................".##!. %*5-%'2( .?/279<<<$-BFA:F5;<9...C...........9& &99999999999999999999999999999999999999999999999999........@....................................................................................o... R...........)AJR........R....R......PPP.R............H..(....................!@.........@.@......... (.... ....( .......P.B..... !.B....................... !...!. ...)..!.....)J...J.P.R....)A.AAJ.J.AAJ.AAJB.P..AAHR..........P.H..P.B...........H........@R.........R........R..R....... .1).. ...... .................B.........@@.. ... .....B.......qAJ...J.......PR...)AJPR............PP.(((!@ . ...............)A..H.... )...................@.@.. ..R.....@..... ...............B..@@B....!. 1.)......... . !... ........x(()J.P.PPPR......(2.@........(((.(.....PR....@.........(.......R...bP. ).HR...@......(....!H....(!A.....!HP@...@P@@...............@@@@.... !.R.........@@@@@.B..@@.... ....PR.R.........()AAJR..)AA@)@)AAJ.((..!J.AJ@.......

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	68476
Entropy (8bit):	5.604069316900506
Encrypted:	false
SSDEEP:	768:jou+1LK2AEU0sbzZFHmZDpvRnRpcrRzE83jUHQpvb/t4GSWTp9XzyubyN:MWbzSBnuV6QN/tf+KyN
MD5:	BCACAC27051FFC8A895EC9EC3A759D2F
SHA1:	12C9FD0CD56E42076D23E21E1A6AB9AC3ADC54FD
SHA-256:	B213B19192B2D1A7577757FD9E4EA8BC9D17192E34544B197AF156E3717A5847
SHA-512:	AFFEE0462FCEF283B924CE749071B71B72F167C90BA96943F9507499939D6555573E847B524A1624A2B0422D9897EBEF4A7F33B640AA5DC14AE7D32C641E18CE
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/d9418494/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;/. SPDX-License-Identifier: Apache-2.0././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var Fhb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.CQ(a)},Ghb=function(a){g.Ro(a);.for(var b=0;b<a.eg.length;b++){var c=a.eg[b],d=a.Ry[b];if(d!==c.version)return!0;if(!g.Po(c)\|\|c.Pm)if(c.Pm\|\|c.s_!==g.Uo)(c.P1(c)\|\|Ghb(c))&&c.Q1(c),c.Pm=!1,c.s_=g.Uo;if(d!==c.version)return!0}return!1},c4=function(a){var b=g.No(a);.a={};return a[Symbol.dispose]=function(){g.No(b)},a},Hhb=function(){return{I:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},V:[{I:"path",Fc:!0,S:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	153
Entropy (8bit):	4.7470003948174115
Encrypted:	false
SSDEEP:	3:YRM9HfHFw65v0NMGAh8xLERDWgRnU/iEhDEgAVMxDV:Ys/lw+0NghPRzRU/RVmaDV
MD5:	229052B37E8ED63856F69D1F5D45E634
SHA1:	DE408BF93DDF318DBAB9B031233110B2FF6815F8
SHA-256:	D59FA87DCBCDB2132316F7F66B835AE54C0D0EEDDD82219C14CCE4BB5700EA25
SHA-512:	B16A51B16FBBF979BA93D2C16636D026D579C26011C72C782E7DD4799E9803B6C0A1771619C7326BDD2EB6C4E2462E08B85B3257E48643CE084ED3BF1095161E
Malicious:	false
Reputation:	low
URL:	https://cdn.acsbapp.com/config/quinnemanuel.com/config.json?page=%2Foffices%2Fdoha%2F
Preview:	{"time":"2024-09-04T05:42:27.390Z","specifics":"","addonAnalytics":false,"blockMeta":false,"blockImages":false,"blockStyles":false,"widgetSettings":null}

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (739)
Category:	downloaded
Size (bytes):	83129
Entropy (8bit):	4.289909383915379
Encrypted:	false
SSDEEP:	1536:OeBrJ3Ktec8X/hkulqsZHeGpWzAz6lbw7d0OJ//PbmlEp4V2Qn1TztBoKDdFgWUf:OXQ62hKNU
MD5:	6F0AFBC97EDB374120948749034FE5F9
SHA1:	4C06B8219369095378B179D201D92D9B83879B8F
SHA-256:	8920C4D5000043A5DBDE54B81228453A59A6E15B9FE46A575DE7515C0990FC75
SHA-512:	D0AB27D8ADE46C500D09786B35531DA05B44AFC286CB95E5B3EA46712A9F45A96F03B792441B00BFF2EB7A40170B48191B228BEFB7469D224F07FE19BCFAA52F
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/
Preview:	.<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="utf-8">.. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <meta name="format-detection" content="telephone=no" />. <meta name="google-site-verification" content="tFjkM15kqPyBnUNW-LYSgstILkvq1Bxn6Kz3aTUfN_I" />. <meta name="theme-color" content="#a3bb05">. <link rel="icon" sizes="192x192" href="/useradmin-icon.png">. <meta name="ROBOTS" content="ALL" />. <meta name="Slurp" content="NOYDIR" />. <meta name="Slurp" content="NOODP" />. <meta name="msvalidate.01" content="D192DB59B1D0AF1E751FE67445203F70" />.. . . <title>Quinn Emanuel Trial Lawyers - Quinn Emanuel Urquhart & Sullivan, LLP</title>.. . <meta name="description" content="Quinn Emanuel is the largest law firm in the world devoted solely to business litigation and arbitration." />. <script type='application/ld+json'>.. {...."@context": "http://schema.org",...."@graph":[.......{

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1728, components 3
Category:	downloaded
Size (bytes):	377736
Entropy (8bit):	7.984329167044541
Encrypted:	false
SSDEEP:	6144:ZBo5VyxZCiM2Uiwkl8ph2BJeAbz0ZUOOtoR52DVUCh3WK4diSbq:zaVya2Um8pQBJr0ZUfGRKsiS+
MD5:	55CBB043DFE4DA0F1E51CA0013209F81
SHA1:	94A191472364C6B7B86EC00F14A05805F00CB0D5
SHA-256:	2685A7EB7470E1FB132C3DF1DB007A2427E212F4303C3060D00004F13671E6FF
SHA-512:	5EEB87CCC4C1F76DFE83DD52C23B13395D2F3048385EA2392298F8F85E77EBE50F51B76CBC6A096CE9DA1F6EF5E0BF8842E12A8673F08101C751D3881C0BBC7F
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/media/2eqgnp4n/newyork.jpg
Preview:	......JFIF.............C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333........@...................................................................................w...U!.U.....P2XR..TF!2"....2Y..%I%HQ.+a$.!..VJ.%i.+Y...h.......%)..).+hJ.h.."....HD.......T...$.J.bITTIA$.$.DH.%LD...X..FQ.j..@@.`$.Z.Eq2.D.$..(H."X..A%...... .!......%.X.."J...Y..........%.%.D...S.P.....ZJ.. . ..1!1......""...B......Z+.d.U.J.....Ha...H....E..a.Ta.H.@D.)Z...%.UL......!..d`V.hJ...(D....X.%...H.BT...Z.V.....H..J.I%A%..h."H.IbI`..D.d.....PB....R.d..H. ...d.`L..EK.D.H.eF"X.%,..H.".BV.h..b.%.T..Z.D.H.@.%..@...LH....."P.QX...X.$."1 ".".... ...Z1.... (.RB.H....j..M.2T..(..H..T.$..%b.......0.d......DBBB"C..Q....B.[.4H.%-J2..EB@@.DU@BI[D)..$...[ ...e,..B$DD$...$K....J..D. DJ".K3TR.%e,VD...E.DR.".@J.[".DC.[..T.,....%.Q[Ad+H..@DDDD!)`*$.QPPU.@@@..D@&$.@D.D..(@@....(.)%T...P.......(..U.Z.(...EB.V.&+U$.....!.(.!2.+T..$T

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (321), with CRLF line terminators
Category:	downloaded
Size (bytes):	44947
Entropy (8bit):	5.2319718177925445
Encrypted:	false
SSDEEP:	768:+sehRXO3vGRxgJ40qygWUWDrMNPcfUb72KMO:3ehRXOeRGG0qJWtrMNpl
MD5:	D6F41569445AA360A62A47C28CBC8C4E
SHA1:	9AB4F73FD49DADDB5F607A22B741EE767864AB3C
SHA-256:	06DC7A1634D059EBE8AA7B8F1F1F1076A8F05EEF219CE597C6A539095846D51E
SHA-512:	42D56FEFC9B30DE2EED4C00DBB8C2E25F6EB2A24495E75084EBF445B3CC914011BC47E405B3E68A4C2CED7CD89E4D4D39E35087EA4ED4000E85DC75810191ACA
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/scripts/jquery.mCustomScrollbar.js?v=638633793483684870
Preview:	/..== malihu jquery custom scrollbars plugin == ..version: 2.8.1 ..author: malihu (http://manos.malihu.gr) ..plugin home: http://manos.malihu.gr/jquery-custom-content-scroller ../..../..Copyright 2010-2013 Manos Malihutsakis ....This program is free software: you can redistribute it and/or modify ..it under the terms of the GNU General Public License as published by ..the Free Software Foundation, either version 3 of the License, or ..any later version. ....This program is distributed in the hope that it will be useful, ..but WITHOUT ANY WARRANTY; without even the implied warranty of ..MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the ..GNU General Public License for more details. ....You should have received a copy of the GNU General Public License ..along with this program. If not, see http://www.gnu.org/licenses/. ../..(function($){.../plugin script/...var methods={....init:function(options){.....var defaults={ ......set_width:false, /*optional element width: bool

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	downloaded
Size (bytes):	217204
Entropy (8bit):	5.544440377067453
Encrypted:	false
SSDEEP:	3072:OIFkUeQ65WHeVJKQE0+3dOhOJjt+/Kjh+qmOWzch2+4jROgGbz:Vn+yMgsGjA/ch2+4jfm
MD5:	B0B63F035A72EDD3DB83D3A32001173F
SHA1:	DBEC37DFCA4E3F55A607B3139077F6C4970136C6
SHA-256:	EBBFD703C0C0321029DD238746C9B4D02BD079C5CE473E7624406D94FDD6B9CE
SHA-512:	9A843FCA50F320CC1E1A94D524C24D1EC901672FB3427F2525D004A5FE2BE54CD6877B2C83DC2044A825182D597E3147D238A08E4BB07EE3091853E33A2F48B4
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-17720203-1&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":10},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-17720203-1","tag_id":13},{"function":"__rep","vtp_containerId":"UA-17720203-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-17720203-1","tag_id":12}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1":"gtm.init"}],. "rules":[[["if",0],["add",2]],[["if",1],["add",0,3,1]]].},."runtime":[ [50,"__

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20377)
Category:	dropped
Size (bytes):	327427
Entropy (8bit):	5.549921363379808
Encrypted:	false
SSDEEP:	3072:nFkUeQ65WH/6IJKQK0+3zOhOJjt+/Kjrv+aUPim6NIh7R5Ezch2+4jRHjmraa9:nn+yCseyGjrvzSCIhl50ch2+4jUT
MD5:	D39C6039180E0CA064110EE0DC38846F
SHA1:	6552C030F9BBCC2DD2290456A62A976F415A5AA6
SHA-256:	2F030009CB272D9E1594FB751C73C716E481D10FE77DBEBBC52817638DFB66CA
SHA-512:	ACA7A40B138DA7A1893015ACC320CBF976C9000B1BBA34743560F42FDAEA58C0B93B5B7A841EFA0B3ED4F455BF5BA4656816704AE6CF4EAF7646FBBE5052DE33
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"13",. . "macros":[{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-17720203-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"f

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1518
Entropy (8bit):	5.016029588344921
Encrypted:	false
SSDEEP:	24:2dLnQKLSzEdeaxM2pmyROOHeoYOzfD3UikRllgTtn7FhdZhzSWfndPgWSCU5M:cLQOyRyQonb1mgTtn5zSIdPTSg
MD5:	9F64274BB26B8C885DEDCCF4CB331589
SHA1:	1447FFEB50D06A0D0EBF1BFC1BECEB5ADF3A1A92
SHA-256:	3E3C292639AC42ACD1EFEB25C57B20529D11DD3902E745C8679F069F33039782
SHA-512:	A225BED99020D72F1AA7DA9C3C0F48E6B4F65296412AEAFAB9DC8DB1CBE7493E417C18AFFB3EC800D62F3278E996519270498F7632E26E1473280B0AC0C4106C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="23px" height="17px" viewBox="0 0 23 17" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 54.1 (76490) - https://sketchapp.com -->. <title>YouTube@1x</title>. <desc>Created with Sketch.</desc>. <g id="Symbols" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Footer" transform="translate(-1329.000000, -153.000000)" fill="#FFFFFF">. <g id="Page-1-Copy" transform="translate(1329.000000, 153.000000)">. <path d="M9.14772727,11.6539036 L9.14772727,4.73602207 L15.1590909,8.19509504 L9.14772727,11.6539036 Z M22.5193523,2.55933068 C22.2548523,1.55187733 21.4754659,0.758550778 20.4859432,0.48930616 C18.6923352,-1.32177033e-05 11.5,-1.32177033e-05 11.5,-1.32177033e-05 C11.5,-1.32177033e-05 4.30766477,-1.32177033e-05 2.51405682,0.48930616 C1.52453409,0.758550778 0.745147727,1.55187733 0.480647727,2.55933068 C0,4.38

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53452)
Category:	downloaded
Size (bytes):	54748
Entropy (8bit):	5.735072611959504
Encrypted:	false
SSDEEP:	768:jonz/MrqXAudxZRoVCOTAflnIE24Lbt3l/IdODau6aeI93o2083:jon4rqXAu3ZRo5Af3HLB1sUf94a3
MD5:	11E0FCDE461B4681160330C0AF48580C
SHA1:	4AAC03F785E4F4F2F565FA4277BC1A679F0EFE03
SHA-256:	2B0978513A91959770A3AD1DC73195B3283F08491AB00CE479B3CFC77F1DD03A
SHA-512:	E4EC4D5FD5838099445D0B864372AA36093AF9FE557BD953877D2A2FA8E69DBCAB3FA9C8F2DD0DE51000ED112C1AFBD9B68B966FC50630A497734DAF40A8E4B7
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/Kwl4UTqRlZdwo60dxzGVsyg_CEkasAzkebPPx38d0Do.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function m(U){return U}var d=function(U){return m.call(this,U)},p=this\|\|self,O=function(U,C,G,g,T,z,W,c,k,E,A,w){for(E=(A=27,35);;)try{if(A==92)break;else if(A==27)k=p.trustedTypes,c=T,A=C;else if(A==C)A=k&&k.createPolicy?g:G;else{if(A==G)return c;if(A==19)E=35,A=99;else if(A==99)A=p.console?12:U;else{if(A==U)return E=35,c;A==12?(p.console[z](w.message),A=U):A==g&&(E=64,c=k.createPolicy(W,{createHTML:d,createScript:d,createScriptURL:d}),A=U)}}}catch(J){if(E==35)throw J;E==64&&(w=J,A=19)}};(0,eval)(function(U,C){return(C=O(56,1,81,70,null,"error","ad"))&&U.eval(C.createScript("1"))===1?function(G){return C.createScript(G)}:function(G){return""+G}}(p)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;c

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 120x90, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1880
Entropy (8bit):	7.870626817139743
Encrypted:	false
SSDEEP:	48:OLAymClrPt+/LQx+AVM4aphRq0A5xo83mp:hymClOwPM4ap/Gbo82p
MD5:	56666907A7B890B83F09B8F1F0BAE8B5
SHA1:	E81BD5CF0F9C081388CE53C24EAD87FE63EB1D85
SHA-256:	FBA32179ABBB85B6AFBDFD5CF6E4D1DF40082C7232372F0F6EFF9EEBB292E3CF
SHA-512:	CBCDDF8ABD5BF1EF0ADF76099974E8E4C8F4E5C749D058F91D205ECF2F4095CBC02ADAB1755339C2E5DAC7634A1EDC0DFAABB6EC07A237155181C0089A0D6681
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/NBEWfKH702s/default.webp
Preview:	RIFFP...WEBPVP8 D........*x.Z.>m .M.!$$.P...g....Z...,.h..>?.....u..O......@...g...O:mH.R....-.?..S.....7..._i_N.....k.......?.d...X..../.......CzW....9lP.tm.`..d.].;x.L..D?}$.Z.8L..n...& ....z.wH.I....\|.E[..\|k].nq.(6..{.k..9X..u..L>...Ee0." U~.N,......C....m..+.~.._@.....e.....M}s~....uf...E..E..>.^h.HL...Z....s..B..f..B..&\..;....I..;.....$N.4E.!.C."7/z4.K..Gb..6.:.5zn`.7.i.T..$M2^I>.+.....i.........._~\|..9..:..O...J.E........m..m-..w..A.g-..T>h...j...=j....k..y....g0V..I=..jH..o....v.4=.w.6P...........S....dT.D..C0......4..............I/.3...8k..G..XaHV.oQ...h.Vb..;.....6..+(..G..u.W..#9Axl.".......5..,l..7.....>EN....4.n:.6.B.u.....4..U.4>...\H..p5R.}.K......ae.\Z9.C../...Q).$.`.J3...../.dK:.....p6..M.. .aF".<.N..]...]r...'...V..../.4.R7.d&k.v.\|.....XGT\|....a.ac...:-.T....d.....\^+s.l..8........Kp.T.....%.-.....e:.+.a>....I..1<...X...l...$.7..C...y......<...}..=c.i....$j..7.=.~..I?].1i.b.......t-....P......O].P..Z..&.....y.E....aX..3.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	84866
Entropy (8bit):	4.489330081837083
Encrypted:	false
SSDEEP:	1536:CxnOi1Wi/bpvw6k5Bcmg0YtTozUgpbVjK8cjnmbqCcxukin8/SBp68gEgCr+66m:CxnOivvk5Bcmg0UKbIDmbGxukin36bEB
MD5:	750B810D89918A6126DD75FCB81942E5
SHA1:	5AD6D2089D9FE97F8DD2B00D45D722C47AB67A89
SHA-256:	01CF6E1CB2FA56431F7B0F55E43B16B252DF3AA837877E5ADCEC40029B5F3FB1
SHA-512:	A60879CCF41C7156ECE15EAFCE9E268F709206D0F9908B1FFE55939572144FCBE6196D0EFB3E1EF75A715F9343840974E191696E14C4DF3E253F5EBAAE5E67C5
Malicious:	false
Reputation:	low
Preview:	{"v":"5.5.8","fr":29.9700012207031,"ip":0,"op":150.000006109625,"w":800,"h":320,"nm":"Quote2","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Shape Layer 4","td":1,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[400,285,0],"ix":2},"a":{"a":0,"k":[0,0,0],"ix":1},"s":{"a":0,"k":[100,100,100],"ix":6}},"ao":0,"shapes":[{"ty":"gr","it":[{"ind":0,"ty":"sh","ix":1,"ks":{"a":0,"k":{"i":[[0,0],[0,0],[0,0],[0,0]],"o":[[0,0],[0,0],[0,0],[0,0]],"v":[[392.824,-25.223],[-392.824,-25.223],[-392.824,25.223],[392.824,25.223]],"c":true},"ix":2},"nm":"Path 1","mn":"ADBE Vector Shape - Group","hd":false},{"ty":"fl","c":{"a":0,"k":[1,1,1,1],"ix":4},"o":{"a":0,"k":100,"ix":5},"r":1,"bm":0,"nm":"Fill 1","mn":"ADBE Vector Graphic - Fill","hd":false},{"ty":"tr","p":{"a":0,"k":[-1.176,-95.777],"ix":2},"a":{"a":0,"k":[0,0],"ix":1},"s":{"a":0,"k":[100,100],"ix":3},"r":{"a":0,"k":0,"ix":6},"o":{"a":0,"k":100,"ix":7},"sk":{"a":0,"k":0,"ix":4},"sa":{"a":0,"k":0,"ix":5},

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 540x724, components 3
Category:	downloaded
Size (bytes):	268023
Entropy (8bit):	7.9699060697681325
Encrypted:	false
SSDEEP:	6144:P49Y6r9GnmW7VxS/BY7kodQbjTjqprTd1SXokt4tTR:wpMmW7Vx64zGjTjmrTd1SXoI4tTR
MD5:	E840EE1BB56B017930D0249636A62082
SHA1:	B46AFB38004D892018B426F05219747B95B345A3
SHA-256:	826E65345DEF9A31532C665E078499B8949FB6F8AAFAB0449D5BA1A12741FD28
SHA-512:	FACEDF954C4EBC548E826B58DCFFB8E2C69B9D3897C24716F946C7CF51AF0D2F3F5A76A1EE9859CC88BBE9DF88BD45774E9CD1D27FE97539319E1E1D91AF4015
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/media/ungb5yj0/ellie_015.jpg
Preview:	......JFIF.....H.H.....C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..YL+....d.N01.1..Fx...y..N..B.........6x.>.....N..Ab2x..'p'$...........%.......8......OL.Y.1...........H..#....\..BI.c;T.=......F.".....O...I...$s.. .....*..r.{....Z....+...%..Nr0q..........6..78........h..GWPN..r1...03...s@..Y...rp6..#.........U .$..dn.=x ..0#......v..:{..2I..k<...X..f.......q'.....Hl.@.....8.6....`:..9.88...b...X......q.S.............n...c..s.3

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1140x640, components 3
Category:	dropped
Size (bytes):	29731
Entropy (8bit):	7.647474228837758
Encrypted:	false
SSDEEP:	384:PwT/UBJ1NLG+ofzLECsgrohzVbwe8VIMqdpEMbnCoGEYaMiRYpUHJBpr2mAopFO5:PGMJnBwFVIMw/bCoGtNpw6mdpFDVK
MD5:	EE7159C69A3876DF71653A36F89EA39C
SHA1:	E83735512ECC4B9D4ED468F1E09B36E19E00957F
SHA-256:	DC27858173A0FCE1A8C83ABBF5AB22FC2DFFA481B902776224A0D77716F5F887
SHA-512:	4F67D100E05F3977969D9A8D06C66CC65C70AB4486E39C243B1340DEC0DF354E9550945E71456DC7A0F61D2592CBE3260D5E7A8B0673ABFA678E4CE742EB1342
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333........t..........................................7..........................!1Q.2"3ARa.#BSTq.b.4Ur..CD...................................................!..1."............?..s..n..[.C.../2. <...^e.P.e.@....?6...P8...U.2..KL....QQ... ....8... .... ....".e..Tf....3d.....~...\|..@..7.dS.Fo...9....a.99...`Trs....Q..G.lAQ.......9<..X.........?#...i....(..?...O/..".r....._/....g/...G3.................`8.r...`Ts.....C....q.<..X.89.......r..{.Ui...2QQ...%.yy">.(...9......'...5Q.x.#..........._..G..\.....\.u.......?35..5..+......!..\|..Aq.'.M....l..?+..o".y.....`......E.9.!.............B.........r.J...B=l9.Z..2M#.2...$.+.....Ri...Q.I.y..o.Ss\.:.>\|c..dU8......EG......C.....9..<k.?..(....:m..^.....=rY(.vo.%....V....l.........\N<...>g....8./......q........y3...uW....u...f....V.r..d..?;......>'.;..dH...)._..

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1936 x 972, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	97998
Entropy (8bit):	7.992790908914006
Encrypted:	true
SSDEEP:	1536:fdGQEUWCltkpVVCmsbTBGbHxGrDw6UvD33GNBBih3IEiMa93d0z+siyg0BEv6TEH:fNQCkBC1lQs4rr3WNBiiMa9t0qsq0BE1
MD5:	D622529FF1939BCC7E33B66450CA52FF
SHA1:	0B72366A84B4830171FDD872A66BD65663456735
SHA-256:	2DC2E295722F8DE00C2FA33BC555E0D1BB5DE8FA06125C60BBB371D49F2D82F2
SHA-512:	0FC1DCAA6C32997155F2EC878C6FAFC461EB7E80B5FDFE1BA4ECBFAC8355B2AB16EE90E78C4869AA553894CEB977F39AECFA3D556671FBD38B405F52388586E2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTE......\|\|\|~~~.......uuu...............{{{............................\|\|\|........qqq......{{{............................\|\|\|......................................................................................................................................................................................................................................................................................................................................}}}............................................................................................................................................................................................. !!!... ___444JJJ.....aaammmIII..............................xxx888DDD+++kkk...rrr/.......tRNS.............'..0.."...%...E....",K.......*T...4>[...A.\|W......8....P..^wr.me.....s..x..E.mP.._k3{;.....A.}..c..K<.X.H.........g.......7....g.N.q...6.S-.......r_.....

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5481
Entropy (8bit):	4.50239433017837
Encrypted:	false
SSDEEP:	96:Qd0ZTQ3jPOVeNUa909QSPDMaCWMCYVmfvIsuUR:LETmVKx09HYaCWMpMvtu2
MD5:	A49AC36C3FF04EAE4A5B46A348DD5353
SHA1:	96E5084B727868C7B592686D2BA320255033E040
SHA-256:	6A578DB165E9D287C8E07CF0D997F9DE95795733EBD20D67E253CE267654C579
SHA-512:	4FE7F83FC939CC92D319AAA55877C0D997AFEDA8A0B4974A78367308CBF537C9D1D52A30C690D86148972A442EFAFF3E7852FDB9A938ABFDDB5CD71F382B950C
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/images/insta-icon.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding.com/sketch -->. <title>A72BD116-5407-4E27-B525-37908419402E@1x</title>. <desc>Created with sketchtool.</desc>. <defs>. <polygon id="path-1" points="0 0.00630952381 19.9936905 0.00630952381 19.9936905 19.997619 0 19.997619"></polygon>. </defs>. <g id="Welcome" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" opacity="1">. <g id="Homepage-v3-London-Copy" transform="translate(-735.000000, -3158.000000)">. <g id="Group-2" transform="translate(0.000000, 3132.000000)">. <g id="IG" transform="translate(735.000000, 26.000000)">. <g id="Group-3">. <mask id="mask-2" fill="white">. <use xlink:href="#path-1"></

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3
Category:	dropped
Size (bytes):	11820
Entropy (8bit):	7.954314665880945
Encrypted:	false
SSDEEP:	192:PUn/1AcF1/QB8n4KgvVpp50tCWEJcahK8m6Ngzdwy7EJ5sfm1XjoN6:PEyG1oB8vgv8tCWEJcvxwyP76
MD5:	6E9F1EFC4E4871E931871BE5F9656412
SHA1:	57D330D91FDDB67F5D09B824CFAE71EF13885B75
SHA-256:	1088331A942FCA4AB7347F29099E72ACB125F63280B39682B3124CBE5986106F
SHA-512:	70A3C2C1DC7E03FB0815644CC949419A8ADFB82061131BAF9C5A58D3A4DB106E23497C9469E8767592932B93EB05EB549C85ADB0F8584E839D83B42DFB36A4F8
Malicious:	false
Reputation:	low
Preview:	......JFIF........................................................................................................................................................@.."........................................I........................!..1."AQ..2aq...#R..3Bbr.$C......S...6.....&Dcs................................;......................!..1..AQ"2aq....#R....B.....CTb................?....F..-F.R.K..E).+.)..+X...TdP.Y.J#......-.+}2....V..Q.>'a...Z...........\|tU..H.Y(.B.....0H...2\|....g....Bc...(9.?.\.t...,.A....C[K)iD.h.Q.g.#=j&Zf.w..Q......g.4.<...........S.U......\1..}i.8....S.aFV...5.4!Ij;......t..:~.0,-d.+.iT....(.....E.P.QE.!.QE.E.QB.E.P.QE.!.QE.YH...9".....-F.e..R%K5`..-FV....~........~...u._%'.)>.r./...3P."....t....4..+.....n....#.Y.....v...kv...f..:.]....>5.chSQm.}.m...4..L1...V....j.k.oY.R./xR......T..:O....Q.%.?.....[A...i.Se`E{.d.:...;........Gx.U.5.&.q..E...+(..".&L.QE...E.P.QE.!.QE.E.QB.E.P.QE.!.QE.OH...O...Xk.I...S....B...G....9.m.J....!0.....

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1728, components 3
Category:	dropped
Size (bytes):	299595
Entropy (8bit):	7.95096264276493
Encrypted:	false
SSDEEP:	6144:OK8VA9ooLu44QcOQ1crusdGJfxGxZUvpe+53ndLmR9EamwG4279L4Qi:OxyrL3i5uusdmxiZUv0+UB2pL4Qi
MD5:	AE26E7B4DBBD8791D3426C508775925A
SHA1:	9A00880FF29798B05ADD8C7D36A238BE83FE92F9
SHA-256:	EEC853E69FCC7F83E2667D1C8ED28C2DDE4D22B92DE035E8F38BD8B6639223B7
SHA-512:	194A6B07761B046AFA381CF2693AF40C23990262CBEEE6EC3EA4965D842D74D32DFF3021BD5CE5C316C418E7FBE222053551606C42DD44AA31956D03A07314DC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...........................".##!. %*5-%'2( .?/279<<<$-BFA:F5;<9...C...........9& &99999999999999999999999999999999999999999999999999........@....................................................................................o.P.T.)J..J.J..R.....)JPPP.P...PPP.R.....)J........HP.HP.).B....1)@!AR(..B.B..B..............P.....R..D(...B...................... ........@..!.....@...@...LH..B.......B.@....B...)AJR....R.)AJ..R.).)JPPR.R.PR.........P.P......@.@........R..@.............P@.......@....................R..........@..@@..A. ..........@@B...@b.................)........F.mAJ.R...........)AJd.R...........R..PR............P.(...................H..... ....A.HR............B.....B..........R..!.. ............. .. ......................@B.....U.@...((()@()AJ.PR........(..)@)@.@.PR.".............@(...........(. . ....... .(........ ..B.B...............).J@......@...............@...!.1........).. !.. !..............Z...R......j..PR.R..)A.(()@)HR.......R..AAHP.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	389410
Entropy (8bit):	5.182496769769048
Encrypted:	false
SSDEEP:	1536:MNi8ZHMCbS/mgVEB8ILJPptpJKztM6oyi+MOn4y6Ox5juDEnXrDJc7MsBy/n+TEn:MNi8ZimgyBtSoy9uf/LcSQoYN
MD5:	A527D49E37C92AABDF019D0BE2CB8AB8
SHA1:	B10AB6200EDF90B2A77B74E4BD23C8554E8690AE
SHA-256:	5D32531834A0CCCC0A2B544CF93F6DE86021B34E1B7800D1366625180C999571
SHA-512:	0D2140BAF781129B7EC45F0564FBA8A241C04CA3BAB45836966805EAA0D0C34E5F0CF2CB31B2E28D45AE397EFEB34ED2083911C8F472F72076A3069907FEF6FE
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/d9418494/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	dropped
Size (bytes):	68476
Entropy (8bit):	5.604069316900506
Encrypted:	false
SSDEEP:	768:jou+1LK2AEU0sbzZFHmZDpvRnRpcrRzE83jUHQpvb/t4GSWTp9XzyubyN:MWbzSBnuV6QN/tf+KyN
MD5:	BCACAC27051FFC8A895EC9EC3A759D2F
SHA1:	12C9FD0CD56E42076D23E21E1A6AB9AC3ADC54FD
SHA-256:	B213B19192B2D1A7577757FD9E4EA8BC9D17192E34544B197AF156E3717A5847
SHA-512:	AFFEE0462FCEF283B924CE749071B71B72F167C90BA96943F9507499939D6555573E847B524A1624A2B0422D9897EBEF4A7F33B640AA5DC14AE7D32C641E18CE
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;/. SPDX-License-Identifier: Apache-2.0././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var Fhb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.CQ(a)},Ghb=function(a){g.Ro(a);.for(var b=0;b<a.eg.length;b++){var c=a.eg[b],d=a.Ry[b];if(d!==c.version)return!0;if(!g.Po(c)\|\|c.Pm)if(c.Pm\|\|c.s_!==g.Uo)(c.P1(c)\|\|Ghb(c))&&c.Q1(c),c.Pm=!1,c.s_=g.Uo;if(d!==c.version)return!0}return!1},c4=function(a){var b=g.No(a);.a={};return a[Symbol.dispose]=function(){g.No(b)},a},Hhb=function(){return{I:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},V:[{I:"path",Fc:!0,S:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	downloaded
Size (bytes):	220352
Entropy (8bit):	5.544396490664711
Encrypted:	false
SSDEEP:	3072:5iFkUeQ65WHebJKQE0+3zOhOJjt+/Kjh+qmOWzch2+4jRJGZb9:Yn+ySgyGjA/ch2+4jqz
MD5:	2457BBC975D2864FCAE537FC33E48BAC
SHA1:	7F4932E4A1F0470FEBEBAAA883FDEE642C77223C
SHA-256:	025F30085F23CEDAA59D98105A85C5C027843887B85E4981CAA7F136A9667BF7
SHA-512:	A88A61976E4CD6A86AA749265B62F9CA189FCDE66106719C02F85EF6CB7FB764E21E729086C1A55A50EF0E43098EB0E86B3364E35275088B4DB18EDEA19E0C4F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-17720203-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":10},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-17720203-1","tag_id":13},{"function":"__rep","vtp_containerId":"UA-17720203-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-MXPGK97YYN"]],"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-17720203-1","tag_id":12}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	306
Entropy (8bit):	6.87875956488453
Encrypted:	false
SSDEEP:	6:6v/lhP2uRv6Ekdghvhe+LY0pRiekoZZJ23N2lKdp:6v/7e6MGh9Y8p78gA
MD5:	E337F412159135A13FE0F7CC324D8AD3
SHA1:	625C023A107B1027014D1845EE81D1958841540F
SHA-256:	BAAA44F68F7F9866B98F49E5B5A2DC1040122FB6D2B23E203D753B151EB7423C
SHA-512:	FCEAD5F381D04D9864B3CD1C458979D47256F7CFA7EDF3607D1F138A04B41427C483A14540D77D1C971FFDE26C0711B65401286D5182DB1E941E5C46B1A0B007
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/img/left-arrow.png
Preview:	.PNG........IHDR.............!.wT....sRGB.........IDAT8...M..0.Fkw.R<..x..".W.]x.q.^."x....R.J.+$P.dh...3.f.$.$i..c.....IB`.].d1w4TA.2t..'..A.g.m].................j.......0.(.....!....................*#..^..S...,a.d.o....Z..q[....w....0...L.3q.....r4.$..F...?.....Z.q.K..{.~.i...\......IEND.B`.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24880, version 1.0
Category:	downloaded
Size (bytes):	24880
Entropy (8bit):	7.987937811406992
Encrypted:	false
SSDEEP:	384:G/nKzLjUb2UzlvcJ/QJ2yU9L4xjW6tUi3zao6sbfnC2KPx6caZuAXeovxBe+4:a6LjUaUzlvcJRyFxy6uVdsfLAPDoiT
MD5:	09201A1CC16B4EA1D1B7C8FDF90D5A60
SHA1:	B2F5ABE7583B81206F7F716E0CD53B31B9A07C85
SHA-256:	BD4C2248C2087EB5F44A46A67B8B4CE961D0FDE9053DBFDA30CF6AF08A6C70E6
SHA-512:	BE8E61DA30CB3343AEE4FD625964D1E9845792F358464060D3CFB5EACD7D537F3C18E1D1CCE93DEC48770312149A3F1E7712D69F20C66BB1770AF616FE231FD7
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/fonts/Lato-Light.woff2
Preview:	wOF2......a0.......@..`.........................?FFTM....v..j.`.......s.....,..`....6.$..<. .....`.r[.....n...T..zn..R....c+..a....1l..'xW.........".........BTr.D .v.cL.D..X._.mF...DF..3n.3.B..N.L.d.....nDd...f..~.7O...x}.8.Y.....T\|..g.k..8;T0D..DO...w).N..P.....d..aF..B.0o..-.i...O..d..`.....O..{..^3iT..i.$J8.w.q.N_\.O../.jd..~S...W.T..b.hoE4x.,....&.._...kG.Oh....U..-...?.;.....ws...V....Y'O.y......z.{..._QL<..h3..R"..s..s.&.............00.e.K.1...u...E..2.`......Q.......JH.....V.3g.ti....u..jq..mW...v....../%...F./.`..q~...w..$v..D...o(...........1.Z.....d..E.p..f_..Z...4.<...D..TJ.#c.c.K..7...dog..&...9.....o....Oyo..I.+.AA...n~.h2+.......6Ka.`].n.d.}...o E.."w.j.j.....d.=....N.F... g.+......u..k..#..g.D...3X}fZ.m.I...]F..cF...i...7e.......:..>.-.....+....[.}..v.I...B..Z..@Gl.k...._.Y}..x.aE(...k.....X...o:.!k_.....#._..Q....x.=..Z...!M0ID..x.~Z.......(..Z..l..k.}=.........z.#..........o....t+L..{}..p.KP..E>...W../.'.9.....(.=...J<!.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 396 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8673
Entropy (8bit):	7.948323625071419
Encrypted:	false
SSDEEP:	192:m54ccslcDuDaMcSz3tk748Ha+BPc3n8EG02i1AIjdJWHPAiBMrVAFI:m5pcI7D9W7z6+a3nFGbOAI2HnKV5
MD5:	24F82465166224D77803C82B8AD42520
SHA1:	769F9248F688F206B9FD690073D81438BA03399F
SHA-256:	384FDA80DAE6F4AF91673E58153C5B003F706C053D6769C21DA586CD7FC27276
SHA-512:	2B9996E6CD1475D8FE806F35798674C6DCDD950A617298F493A5F2C269988F134E5B0E77078779DCB8C5AD502C443E43EDBB199CED3F1ADF9AFECC68D2057997
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sRGB.......!.IDATx..yl.g}....8.}:I.. m..=SJ.UCe.....2A.....@..4MH..4.L....P.B%.Mm)..Q(mi.A.....v.$v...}>..>~.....4(_..>..9...z...\n..P(l..~.6.."n'..p...r..I....^8_.O.....H.'......i.1].>.X....6x...\........^.[..../..&.S.0.>..p.ao..\.......I.eF.M.}....?Nzk.^..+..!.~.I.....C.g.OWqL...dL..~..H.X.........8m...U.;...........6...`..W.]..%.d8.]....s@..l.{.3...S..@.x......#V.82..2....\!.Q$.P."w.x.....rj'..?.U.f#..a...Q.}..}..q....<.f....f.....;...8....!.&.J2..\.i.......w:r.r........Z....%x......Q.....2..\|.<.n....g.9.{,w........8....q.~......c.....@J...N/.De../#mY....M.oe.5..S7n...W..\|.e.k!y.IkB.c..............B.,.[D....GK.....g......0...u.f.6....=G.....k'...+rgi.6./.]..I......&~.....i.........,.O......[@a.x....2..B.4..S..i...A..............V../.4....&.fr?..!.... }.U..e~_&}>8..n%...s\+....\.n$....]...)....v..mp..?c..v?A_KiS9H.c.>N..I[G..........4..Ik 5..42..eWSW}..8.r.....G...$.F.n..\|..w.rO.v.2..O.....Bz.N.....y..

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	dropped
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1207
Entropy (8bit):	5.21495669758832
Encrypted:	false
SSDEEP:	24:2dRrmLzHzn1DeaxMxLmR/gGFTpfVkXpnq6XGH2EktHfeV0Q6Xc5:cdyDzn2mN9qFXq2EWDXQ
MD5:	F25E4690B4E3DA95A3890F8D3070F05C
SHA1:	6C28D5DAA19BD4952531A9A220BE9101764B189E
SHA-256:	0607C3D1E48E9254EE4D0857FCB70B4E5D4D1EA1A14D8DDD59BE22FB2B969308
SHA-512:	B8AD4A940DB0228DA75C6F84E1E7B92E07CE57D7EC223E61B269987C4564ACCDBAE5C3CF884E23552631ACCF2B5D447A0E11CB191E86F9B72B627CF44951B8D3
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="11px" height="12px" viewBox="0 0 11 12" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: sketchtool 57.1 (101010) - https://sketch.com -->.. <title>1435AF84-69D9-4F65-92CE-6830A4BEB60A@1x</title>.. <desc>Created with sketchtool.</desc>.. <g id="New-Design" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Attorney-List" transform="translate(-1141.000000, -1186.000000)" fill="#48A8C0" fill-rule="nonzero">.. <g id="BioCards" transform="translate(136.000000, 414.000000)">.. <g id="Bio-Card-/-Static" transform="translate(780.000000, 633.000000)">.. <path d="M235.887318,149.361496 L235.887318,150.861496 L225.181227,150.861496 L225.181227,149.361496 L235.887318,149.361496 Z M231.3111,138.999924 L231.310227,145.795924 L234.137115,142.97043 L235.197776,144.03109 L230.560627,148.668238 L225.906934

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1340x900, components 3
Category:	dropped
Size (bytes):	208554
Entropy (8bit):	7.729597352884924
Encrypted:	false
SSDEEP:	6144:iRsqT111111111XgfaJBdudzAS9iTEV443:iRdWaJHg9iTEV4g
MD5:	A72D55BBD7FF48FD22DBB6C87AB26DDE
SHA1:	9A63B4DF6FA3BC7A19F7EC22C0C775E7060A91B4
SHA-256:	5941C9F6CE335BA52B6EC4C79DA96131E1B5A18B78CF5329399C322C839A1B20
SHA-512:	D92E4CF9DD5B409B6824779BF99FD85880E9B99665B7083240DAB779E779DC9FD4FAA0BDD08329DC58860A2B30A254C2BF1DC629F2076DBF1CD54911AD56369F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....@Exif..MM........i...........................<...................8Photoshop 3.0.8BIM........8BIM.%..................B~........<...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?............?....@...........2;........V...ko...sx...n.....O.c.....6..z.....\..[.].....`g...\...+(.........N3..............K[.tf.MgY.4w.oSM.U..t..5)T.Zv........Y..\..2D.1P..K.8/c.V.........0I$...^....o...K.\|-.x..g..TX.=K......i...E...\|.?

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1099, components 3
Category:	dropped
Size (bytes):	23180
Entropy (8bit):	3.814027667079179
Encrypted:	false
SSDEEP:	384:fUDbS1r3W+kYli3MI40bkzI8B3dhqur6VirdmVviR2D4C:f+bSNRrli8wbMIq3dgur6ViJmVviAx
MD5:	67AC0AE3A6D29BED96EEE626CBAE00D3
SHA1:	B1135884DC666F41315D33623214F70702D2BD3C
SHA-256:	DFF921BE3B3994D49FC2FE075B19AA13CC2381781247451EB1B1AFB772531F31
SHA-512:	A4BB78F01F6FB21090B2400052FAFFD826CF0FC2C65869F21D939FFAA06772F8E972527B9BF819B4349B2FF6685F8EF498BF0F355BE0C90DC7525EAF33C70F49
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...................... ....&"((&"%$0=3-9.$%5H59?ADED)3KPJBO=CDA...C...........A,%,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA......K.@............................................................................ .(..E..@....@.@.......X....@.....E....P..B......P.X....A..(....(".....j...B..@X..!.(...H.P.(...........................................................r...@..(..@.(.H.,.................A....... P..Z.............J@.@!A.....@..)..(X.( d...@..........P.(....................................................,..X..... (....................(.............Z...Q..@......Q@H....(......(..(X.( B....@..........P.(.........................................................@..( .......P..,..P......@..........P...Z. .....@ .)M..( .!..h..........!@.....)...........P.(........................................................P....... .....`...(....P...@P...........E.....,.....4.@.P........P.......@...2...P).......@......................................................

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3
Category:	dropped
Size (bytes):	3067
Entropy (8bit):	7.84439620644915
Encrypted:	false
SSDEEP:	48:Les9ijvce8e3RrepA4CIOwY1ayKL6cOKAPcLOGtwgVykSXnqym9IeWFI4NdI9i:LgRwAVIw19ngxiGjVykSXn3m6Jac
MD5:	6552571B3CF29F18432FB3DDD61C4835
SHA1:	429D1CFE97D8C3B9816A480F557736941DBF292E
SHA-256:	3600BC41CBEFA3F9EF880DF9A495CF859E7957D4454E6635B01ABF45C3867EE2
SHA-512:	7CF4A31E93B14DED0D591C52012470F23A0D1D7E83BF0BA890E8CD86BEC711E7F473AE1FEB5865D214F050F5D996ADE24941DF1FED6EB4E4DE209672EEA5D054
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................Z.x.."........................................=........................!.."1A.Q.....2R.#Saq.....$3C..4Bbc................................2........................!1..AQ..aq....B."23R................?.....2....[e....T.J.z)..a...f.+mE.&.:i.d....D.)M.k..DH.H.x....H...X..=..S....#....)...B.,[.x..@vp.>#...J.x-..{......\|O.<.Dt.{q..Z..v.j.tU..).?...).?...9.{.J.EY=.....=.....79...tU..).?.....$.x.NT.x.l.M.5M.O.....>kK.=)."+!............#.......0.......T.q.u..w0i.K.VN..!...D..n.G..Uo.....$...<\|5.)...nPc.....#..+H..L.x.w..n?*...Zz...4(........QIB.^.T.b....9I.....gI..I.....0...j..K.."......`......\...gd..l.1..L3bv,e.(.....l@h.a"z....4.n:..3......0.28.y...L.'......%.....H.=.S....O.K.X6qu..3.{.....'qo..(..\....q8d.4.,...NW...9G...-r.\.5N..1$..6.......\:...<.....u.....kZ.J.X...=E..qK.K.:J..G..#Vg3.h.VT..@A.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53452)
Category:	dropped
Size (bytes):	54748
Entropy (8bit):	5.735072611959504
Encrypted:	false
SSDEEP:	768:jonz/MrqXAudxZRoVCOTAflnIE24Lbt3l/IdODau6aeI93o2083:jon4rqXAu3ZRo5Af3HLB1sUf94a3
MD5:	11E0FCDE461B4681160330C0AF48580C
SHA1:	4AAC03F785E4F4F2F565FA4277BC1A679F0EFE03
SHA-256:	2B0978513A91959770A3AD1DC73195B3283F08491AB00CE479B3CFC77F1DD03A
SHA-512:	E4EC4D5FD5838099445D0B864372AA36093AF9FE557BD953877D2A2FA8E69DBCAB3FA9C8F2DD0DE51000ED112C1AFBD9B68B966FC50630A497734DAF40A8E4B7
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function m(U){return U}var d=function(U){return m.call(this,U)},p=this\|\|self,O=function(U,C,G,g,T,z,W,c,k,E,A,w){for(E=(A=27,35);;)try{if(A==92)break;else if(A==27)k=p.trustedTypes,c=T,A=C;else if(A==C)A=k&&k.createPolicy?g:G;else{if(A==G)return c;if(A==19)E=35,A=99;else if(A==99)A=p.console?12:U;else{if(A==U)return E=35,c;A==12?(p.console[z](w.message),A=U):A==g&&(E=64,c=k.createPolicy(W,{createHTML:d,createScript:d,createScriptURL:d}),A=U)}}}catch(J){if(E==35)throw J;E==64&&(w=J,A=19)}};(0,eval)(function(U,C){return(C=O(56,1,81,70,null,"error","ad"))&&U.eval(C.createScript("1"))===1?function(G){return C.createScript(G)}:function(G){return""+G}}(p)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;c

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (14965), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	90881
Entropy (8bit):	5.276530230883681
Encrypted:	false
SSDEEP:	1536:dsrjDQ3fDRHBk9aPP2Ajh6y/xRwsM3ldxz7hgTXZ3wkevNdr3/wCjI6h8MWbAG09:urjDQ3flHBk9aPP2Ajh6y/xRwsM3ldxF
MD5:	22917C4CF92382B697EFE5A42AE55452
SHA1:	0B8B2624BB2FE2F1364F35E17659359810202A61
SHA-256:	E6C112D8D3002AE249D8CAC3B3A1125AA5BDE67D659330C9DFCC2A1B3F4A0BC3
SHA-512:	614F75460113750C5C10F218E43577D6376F89106D22F8BF40409DEAD81A5A348F4EE6C01253046690AD0C0A92F77432C7CC76E014578302CACD97CEF429E932
Malicious:	false
Reputation:	low
URL:	https://www.quinnemanuel.com/dist/css/style.css?v=638633792821681415
Preview:	./* Slider */..slick-slider.{. position: relative;.. display: block;. box-sizing: border-box;.. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;.. -webkit-touch-callout: none;. -khtml-user-select: none;. -ms-touch-action: pan-y;. touch-action: pan-y;. -webkit-tap-highlight-color: transparent;.}...slick-list.{. position: relative;.. display: block;. overflow: hidden;.. margin: 0;. padding: 0;.}..slick-list:focus.{. outline: none;.}..slick-list.dragging.{. cursor: pointer;. cursor: hand;.}...slick-slider .slick-track,..slick-slider .slick-list.{. -webkit-transform: translate3d(0, 0, 0);. -moz-transform: translate3d(0, 0, 0);. -ms-transform: translate3d(0, 0, 0);. -o-transform: translate3d(0, 0, 0);. transform: translate3d(0, 0, 0);.}...slick-track.{. position: relative;. top: 0;. left: 0;.. display: block;. margin-

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 20:33:16.069370985 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 1, 2024 20:33:25.678668976 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 1, 2024 20:33:28.247415066 CEST	49735	80	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:28.248007059 CEST	49736	80	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:28.252253056 CEST	80	49735	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:28.252863884 CEST	80	49736	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:28.252950907 CEST	49735	80	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:28.253158092 CEST	49736	80	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:28.253158092 CEST	49736	80	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:28.258064032 CEST	80	49736	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:28.785603046 CEST	80	49736	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:28.785687923 CEST	80	49736	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:28.785763025 CEST	49736	80	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:28.957113981 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:28.957206964 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:28.957293987 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:28.957479000 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:28.957515001 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.655874968 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.656352043 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.656393051 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.657876968 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.657938957 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.660480022 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.660567999 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.661099911 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.661108017 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.709750891 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.844177008 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.844218969 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.844254017 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.844285011 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.844312906 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.844332933 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.844361067 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.844361067 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.844394922 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.897142887 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.897181988 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.897241116 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.897258997 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.897290945 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.897309065 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.933383942 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.933408022 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.933444977 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.933465004 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.933495998 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.933511972 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.984947920 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.984977007 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.985018969 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.985037088 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.985071898 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.985090017 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.986787081 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.986808062 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.986865044 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.986877918 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:29.986911058 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:29.986939907 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.021287918 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.021348000 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.021369934 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.021399021 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.021451950 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.040821075 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.040904045 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.041004896 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.044929981 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.044981956 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.045167923 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.047070980 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.047080040 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.047142029 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.048038960 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.048062086 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.048410892 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.051920891 CEST	49744	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.051949024 CEST	443	49744	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.052170992 CEST	49744	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.052592993 CEST	49738	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.052628994 CEST	443	49738	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.056004047 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.056035995 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.056849957 CEST	49745	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.056901932 CEST	443	49745	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.056957006 CEST	49745	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.057691097 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.057710886 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.058171034 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.058182955 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.058959961 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.058981895 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.060425043 CEST	49744	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.060457945 CEST	443	49744	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.063519001 CEST	49745	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.063536882 CEST	443	49745	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.596052885 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.596401930 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.596424103 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.596771955 CEST	443	49744	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.597086906 CEST	49744	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.597116947 CEST	443	49744	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.597129107 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.597234011 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.597395897 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.597405910 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.597595930 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.597613096 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.597743034 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.597919941 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.597975016 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.598169088 CEST	443	49744	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.598226070 CEST	49744	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.598303080 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.598366976 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.598762989 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.598766088 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.598861933 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.599155903 CEST	49744	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.599220037 CEST	443	49744	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.599646091 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.599821091 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.599970102 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.600101948 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.600109100 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.600203037 CEST	49744	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.600218058 CEST	443	49744	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.600294113 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.606766939 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.607067108 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.607079983 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.608553886 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.608606100 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.609635115 CEST	443	49745	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.609955072 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.610032082 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.610110998 CEST	49745	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.610133886 CEST	443	49745	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.610272884 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.610280991 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.611630917 CEST	443	49745	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.611690998 CEST	49745	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.612061977 CEST	49745	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.612142086 CEST	443	49745	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.612210989 CEST	49745	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.612219095 CEST	443	49745	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.642416954 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.642515898 CEST	49744	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.643440962 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.647411108 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.654531956 CEST	49746	443	192.168.2.4	216.58.206.36
Oct 1, 2024 20:33:30.654567957 CEST	443	49746	216.58.206.36	192.168.2.4
Oct 1, 2024 20:33:30.654711008 CEST	49746	443	192.168.2.4	216.58.206.36
Oct 1, 2024 20:33:30.655070066 CEST	49746	443	192.168.2.4	216.58.206.36
Oct 1, 2024 20:33:30.655091047 CEST	443	49746	216.58.206.36	192.168.2.4
Oct 1, 2024 20:33:30.661412954 CEST	49745	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.661413908 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.824467897 CEST	443	49744	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.824542046 CEST	49744	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.824563980 CEST	443	49744	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.825033903 CEST	443	49744	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.825088024 CEST	49744	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.840625048 CEST	443	49745	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.840732098 CEST	443	49745	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.840764046 CEST	49745	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.840786934 CEST	49745	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.895565987 CEST	49744	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.895581007 CEST	443	49744	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.900396109 CEST	49745	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.900422096 CEST	443	49745	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.909651041 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.909678936 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.909708023 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.909723997 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.909735918 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.909745932 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.909754038 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.909765959 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.909809113 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.911144018 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.911221027 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.911226034 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.911268950 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.911288023 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.911322117 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.911377907 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.911393881 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.912055016 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.912080050 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.912094116 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.912108898 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.912115097 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.912149906 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.912178040 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.915366888 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.915404081 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.915431976 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.915440083 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.915468931 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.915473938 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.915481091 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.915496111 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.915523052 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.946588993 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.946610928 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.946695089 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.946711063 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.946764946 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.947716951 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.947786093 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.947808981 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.947865963 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.947877884 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.949673891 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.949690104 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.949753046 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.949767113 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.949819088 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.952825069 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.952846050 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.952910900 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.952919960 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.952981949 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.952981949 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.979818106 CEST	49747	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.979871035 CEST	443	49747	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.979990959 CEST	49747	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.980397940 CEST	49747	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.980426073 CEST	443	49747	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.990170956 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.997838974 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.997868061 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.997908115 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.997925043 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.997955084 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.997996092 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.998218060 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.998241901 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.998284101 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.998301029 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.998308897 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.998342991 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.998356104 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.998594999 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.999901056 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.999923944 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:30.999970913 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:30.999984026 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.000010967 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.000036001 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.006719112 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.006742001 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.006822109 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.006841898 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.006856918 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.006912947 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.006922007 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.007560968 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.009356022 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.032597065 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.032624006 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.032666922 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.032677889 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.032710075 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.032738924 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.033687115 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.033752918 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.033771038 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.033791065 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.033814907 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.033835888 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.034626007 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.034645081 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.034682035 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.034693956 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.034729958 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.034751892 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.034895897 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.034962893 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.034966946 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.035000086 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.035032988 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.035048008 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.036206007 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.036220074 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.036299944 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.036313057 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.036381960 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.037614107 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.037628889 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.037723064 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.037734985 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.037791014 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.039364100 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.039400101 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.039433956 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.039444923 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.039463997 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.039473057 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.039522886 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.083235979 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.083301067 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.083322048 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.083333969 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.083372116 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.083395958 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.083817005 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.083841085 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.083887100 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.083899021 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.083926916 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.083955050 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.084347010 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.084407091 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.084422112 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.084427118 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.084466934 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.084481955 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.085906029 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.085925102 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.086023092 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.086035013 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.086093903 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.118766069 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.118796110 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.118856907 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.118863106 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.118912935 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.119663954 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.119682074 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.119734049 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.119739056 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.119765997 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.119786978 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.119914055 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.119973898 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.119980097 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.120012045 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.120035887 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.120059013 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.120840073 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.120898962 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.120902061 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.120920897 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.120960951 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.120987892 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.121413946 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.121433020 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.121463060 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.121469975 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.121500015 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.121522903 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.122184992 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.122241020 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.122278929 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.122284889 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.122314930 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.122328997 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.123143911 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.123198986 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.123209000 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.123219013 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.123245955 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.123275042 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.123291016 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.165327072 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.165348053 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.165420055 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.165436029 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.165467978 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.165695906 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.169302940 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.169373035 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.169398069 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.169420958 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.169435024 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.169455051 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.170156956 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.170214891 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.170223951 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.170250893 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.170269966 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.170295000 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.170306921 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.170322895 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.170376062 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.170387983 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.170413017 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.170461893 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.171159029 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.171216965 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.171230078 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.171237946 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.171269894 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.171273947 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.171286106 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.171293974 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.171339035 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.171350956 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.171411037 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.171866894 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.171936989 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.171938896 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.171969891 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.171987057 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.172135115 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.172293901 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.172307968 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.172352076 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.172363043 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.172386885 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.172408104 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.174143076 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.174165964 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.174217939 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.174228907 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.174263000 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.174282074 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.192694902 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.194380045 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.205432892 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.205454111 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.205544949 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.205549955 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.205595970 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.205902100 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.205918074 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.205965996 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.205971956 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.206012964 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.206315994 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.206377983 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.206388950 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.206403971 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.206433058 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.206451893 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.206928968 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.206991911 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.206993103 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.207004070 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.207012892 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.207041979 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.207046032 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.207078934 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.207082033 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.207108974 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.207617044 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.207672119 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.207673073 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.207712889 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.207727909 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.207765102 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.249387980 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.249461889 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.249500036 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.249522924 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.249546051 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.249567986 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.251895905 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.251915932 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.251985073 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.252002001 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.252032995 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.254230976 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.256393909 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.256448030 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.256481886 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.256489038 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.256551981 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.256685019 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.256700993 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.256762981 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.256774902 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.256824017 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.256885052 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.256937981 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.256948948 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.256962061 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.256999016 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.257019043 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.257220030 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.257235050 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.257297993 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.257309914 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.257364988 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.258186102 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.258240938 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.258260965 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.258265972 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.258299112 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.258311987 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.258497953 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.258542061 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.258553028 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.258553028 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.258557081 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.258574009 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.258601904 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.258613110 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.258636951 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.258671999 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.258845091 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.258861065 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.258914948 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.258924961 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.258981943 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.290749073 CEST	443	49746	216.58.206.36	192.168.2.4
Oct 1, 2024 20:33:31.292480946 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.292498112 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.292572975 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.292586088 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.292638063 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.293062925 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.293076992 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.293122053 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.293133020 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.293162107 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.293184042 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.293792963 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.293858051 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.293874979 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.293888092 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.293911934 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.293931007 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.293951988 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.293966055 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.294028044 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.294039011 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.294087887 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.294298887 CEST	49746	443	192.168.2.4	216.58.206.36
Oct 1, 2024 20:33:31.294323921 CEST	443	49746	216.58.206.36	192.168.2.4
Oct 1, 2024 20:33:31.294745922 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.294801950 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.294819117 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.294825077 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.294856071 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.294878006 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.295150042 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.295216084 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.295228004 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.295239925 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.295285940 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.295377970 CEST	443	49746	216.58.206.36	192.168.2.4
Oct 1, 2024 20:33:31.295418978 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.295430899 CEST	49746	443	192.168.2.4	216.58.206.36
Oct 1, 2024 20:33:31.335552931 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.335612059 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.335640907 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.335652113 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.335669041 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.335709095 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.338275909 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.338298082 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.338351965 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.338363886 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.338392019 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.338429928 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.342480898 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.342536926 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.342564106 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.342570066 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.342602968 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.342619896 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.343031883 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.343050003 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.343101978 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.343113899 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.343163013 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.343559980 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.343573093 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.343622923 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.343633890 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.343657970 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.343909025 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.343926907 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.343960047 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.343971968 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.343995094 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.344022989 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.344084978 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.344137907 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.344147921 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.344158888 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.344192982 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.344211102 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.344405890 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.344466925 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.344469070 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.344486952 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.344525099 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.344533920 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.344683886 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.344728947 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.344742060 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.344744921 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.344750881 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.344785929 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.344793081 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.344796896 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.344832897 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.344832897 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.344832897 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.344866991 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.344867945 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.378820896 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.378835917 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.378916025 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.378931999 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.378988028 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.379160881 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.379174948 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.379225016 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.379236937 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.379285097 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.379863977 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.379920959 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.379926920 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.379942894 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.379983902 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.379992962 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.379996061 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.380043983 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.380086899 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.380131006 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.380131960 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.380178928 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.380598068 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.380651951 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.380681992 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.380690098 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.380734921 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.380968094 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.381010056 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.381015062 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.381023884 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.381052971 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.381052971 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.381088972 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.381104946 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.381127119 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.421870947 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.421940088 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.421966076 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.421984911 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.422013044 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.422028065 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.428596020 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.428652048 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.428699017 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.428708076 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.428750992 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.428778887 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.429723978 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.429775953 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.429810047 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.429816008 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.429841042 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.429847956 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.430345058 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.430396080 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.430417061 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.430423021 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.430454016 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.430517912 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.430754900 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.430811882 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.430841923 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.430845976 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.430890083 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.431298018 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.441217899 CEST	49746	443	192.168.2.4	216.58.206.36
Oct 1, 2024 20:33:31.441405058 CEST	443	49746	216.58.206.36	192.168.2.4
Oct 1, 2024 20:33:31.447782040 CEST	49742	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.447805882 CEST	443	49742	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.452254057 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.453349113 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.457938910 CEST	49740	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.457962990 CEST	443	49740	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.466118097 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.466171980 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.466212034 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.466222048 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.466250896 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.466264963 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.466710091 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.466763020 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.466779947 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.466785908 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.466834068 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.467210054 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.467266083 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.467292070 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.467295885 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.467343092 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.467792034 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.467874050 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.468041897 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.468135118 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.468198061 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.468270063 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.490951061 CEST	49746	443	192.168.2.4	216.58.206.36
Oct 1, 2024 20:33:31.490976095 CEST	443	49746	216.58.206.36	192.168.2.4
Oct 1, 2024 20:33:31.495417118 CEST	49743	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.495424986 CEST	443	49743	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.496629953 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.499188900 CEST	443	49747	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.536547899 CEST	49746	443	192.168.2.4	216.58.206.36
Oct 1, 2024 20:33:31.553631067 CEST	49747	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.554107904 CEST	49741	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.554124117 CEST	443	49741	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.672606945 CEST	49747	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.672621965 CEST	443	49747	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.673444986 CEST	49749	443	192.168.2.4	151.101.65.229
Oct 1, 2024 20:33:31.673494101 CEST	443	49749	151.101.65.229	192.168.2.4
Oct 1, 2024 20:33:31.673562050 CEST	49749	443	192.168.2.4	151.101.65.229
Oct 1, 2024 20:33:31.674205065 CEST	443	49747	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.674221039 CEST	443	49747	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.674269915 CEST	49747	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.674420118 CEST	49749	443	192.168.2.4	151.101.65.229
Oct 1, 2024 20:33:31.674448967 CEST	443	49749	151.101.65.229	192.168.2.4
Oct 1, 2024 20:33:31.674887896 CEST	49747	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.674994946 CEST	443	49747	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.675129890 CEST	49747	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.675137043 CEST	443	49747	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.724030972 CEST	49747	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.804207087 CEST	443	49747	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.804291964 CEST	49747	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.804320097 CEST	443	49747	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.804507017 CEST	443	49747	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.804595947 CEST	49747	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.991982937 CEST	49750	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.992034912 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.992101908 CEST	49750	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.993885994 CEST	49751	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.993916035 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.994056940 CEST	49751	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.994510889 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:31.994564056 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:31.994647026 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.017851114 CEST	49750	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.017870903 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.020142078 CEST	49751	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.020158052 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.020538092 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.020556927 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.021879911 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.021948099 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.022069931 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.023427963 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.023442030 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.023540974 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.023922920 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.023937941 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.024151087 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.028306007 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.028384924 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.028464079 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.028620958 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.028642893 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.028707981 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.029016018 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.029033899 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.029097080 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.029517889 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.029541016 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.029700041 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.030459881 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.030493021 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.031028986 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.031043053 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.031497002 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.031507015 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.032018900 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.032056093 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.032501936 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.032526970 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.032783031 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.032805920 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.032936096 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.032958031 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.073256016 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.073287964 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.073365927 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.074163914 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.074233055 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.074419975 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.075872898 CEST	49762	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.075894117 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.076199055 CEST	49762	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.084724903 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.084754944 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.085838079 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.085880041 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.086196899 CEST	49762	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.086227894 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.089581013 CEST	49747	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.089597940 CEST	443	49747	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.142088890 CEST	443	49749	151.101.65.229	192.168.2.4
Oct 1, 2024 20:33:32.142477989 CEST	49749	443	192.168.2.4	151.101.65.229
Oct 1, 2024 20:33:32.142546892 CEST	443	49749	151.101.65.229	192.168.2.4
Oct 1, 2024 20:33:32.144232988 CEST	443	49749	151.101.65.229	192.168.2.4
Oct 1, 2024 20:33:32.144304991 CEST	49749	443	192.168.2.4	151.101.65.229
Oct 1, 2024 20:33:32.199847937 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:32.199877977 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:32.199940920 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:32.201864004 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:32.201881886 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:32.506999016 CEST	49749	443	192.168.2.4	151.101.65.229
Oct 1, 2024 20:33:32.507288933 CEST	443	49749	151.101.65.229	192.168.2.4
Oct 1, 2024 20:33:32.514096022 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.516520977 CEST	49749	443	192.168.2.4	151.101.65.229
Oct 1, 2024 20:33:32.516546011 CEST	443	49749	151.101.65.229	192.168.2.4
Oct 1, 2024 20:33:32.527260065 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.527273893 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.528332949 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.528403044 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.542392969 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.543505907 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.545027971 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.545051098 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.545289040 CEST	49750	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.545306921 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.545665979 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.546128988 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.546192884 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.560031891 CEST	49750	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.560098886 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.560420990 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.567876101 CEST	49751	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.567893982 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.568255901 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.569034100 CEST	49749	443	192.168.2.4	151.101.65.229
Oct 1, 2024 20:33:32.569731951 CEST	49751	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.569798946 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.570401907 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.570491076 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.573235989 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.573313951 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.574572086 CEST	49750	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.574702978 CEST	49751	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.575280905 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.575308084 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.575341940 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.575356007 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.615402937 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.615411043 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.616714001 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.616729975 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.625936985 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.626332998 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.626818895 CEST	49762	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.626853943 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.627002954 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.627017975 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.630397081 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.630486012 CEST	49762	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.630640984 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.630734921 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.641227961 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.641395092 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.642122030 CEST	49762	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.642306089 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.642314911 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.642569065 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.642585993 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.642750978 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.642808914 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.642842054 CEST	49762	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.642853975 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.644306898 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.644376040 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.645093918 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.645183086 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.645539999 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.645555973 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.659324884 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.659353971 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.659420967 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.660202980 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.660216093 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.673222065 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.673259974 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.673289061 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.673324108 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.673324108 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.673360109 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.673418045 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.673429966 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.673444986 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.673470020 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.673929930 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.673962116 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.673986912 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.673989058 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.673999071 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.674040079 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.674525023 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.674695969 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.676747084 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.677148104 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.678073883 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.680761099 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.681602001 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.691941977 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.692826986 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.692831039 CEST	49762	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.692831039 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.708101988 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.708123922 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.708182096 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.708703041 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.708719015 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.709084988 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.709093094 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.709310055 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.709347010 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.709501982 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.709503889 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.709521055 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.709670067 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.709673882 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.709686995 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.710057974 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.710088015 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.710187912 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.710251093 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.710376024 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.710439920 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.710464954 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.710527897 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.710882902 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.710972071 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.711021900 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.711085081 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.711138964 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.711189985 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.711422920 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.711477995 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.713398933 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.713459969 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.713541031 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.713597059 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.719182014 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.719258070 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.719306946 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.719398975 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.719819069 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.719891071 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.720046043 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.720232964 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.720293999 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.720364094 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.720374107 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.720426083 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.720524073 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.720534086 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.720602036 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.720617056 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.720657110 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.720670938 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.720803976 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.720817089 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.723926067 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.723938942 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.761818886 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.761882067 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.761888981 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.761910915 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.761950016 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.761966944 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.761972904 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.761981010 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.762031078 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.762228966 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.762262106 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.762274027 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.762284994 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.762321949 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.762347937 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.762370110 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.762402058 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.762428999 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.763262033 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.763290882 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.763317108 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.763338089 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.763340950 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.763351917 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.763398886 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.763497114 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.763740063 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.763931036 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.764017105 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.765588999 CEST	49753	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:32.765619040 CEST	443	49753	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:32.770962954 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.771683931 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.771718025 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.772094965 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.772161961 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.772329092 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.772341013 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.772547960 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.772548914 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.772552013 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.772689104 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.772747993 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.773125887 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.773192883 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.773375988 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.773390055 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:32.779783964 CEST	443	49749	151.101.65.229	192.168.2.4
Oct 1, 2024 20:33:32.779980898 CEST	443	49749	151.101.65.229	192.168.2.4
Oct 1, 2024 20:33:32.780060053 CEST	49749	443	192.168.2.4	151.101.65.229
Oct 1, 2024 20:33:32.780106068 CEST	443	49749	151.101.65.229	192.168.2.4
Oct 1, 2024 20:33:32.780152082 CEST	443	49749	151.101.65.229	192.168.2.4
Oct 1, 2024 20:33:32.780462027 CEST	49749	443	192.168.2.4	151.101.65.229
Oct 1, 2024 20:33:32.817837954 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:32.855364084 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.855396032 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.855462074 CEST	49750	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.855470896 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.855506897 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.855532885 CEST	49750	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.855551004 CEST	49750	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.855720997 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.855743885 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.855782032 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.855787992 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.855823994 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.855853081 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.855863094 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.855874062 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.855874062 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.855906963 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.865766048 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:32.865824938 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:32.868376970 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.868395090 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.868428946 CEST	49751	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.868443012 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.868475914 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.868489981 CEST	49751	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.868489981 CEST	49751	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.868519068 CEST	49751	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.880386114 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:32.880400896 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:32.880640984 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:32.881184101 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.881234884 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.881263971 CEST	49750	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.881272078 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.881302118 CEST	49750	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.881731033 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.881763935 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.881769896 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.881795883 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.881803036 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.881829977 CEST	49750	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.881844044 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.881846905 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.882044077 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.915040970 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.915091991 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.915116072 CEST	49751	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.915126085 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.915157080 CEST	49751	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.915606022 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.915673971 CEST	49751	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.923904896 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.923940897 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.923952103 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.923969030 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.923976898 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.923993111 CEST	49762	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.924020052 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.924045086 CEST	49762	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.924068928 CEST	49762	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.924465895 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.924540997 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.924541950 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.924576998 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.924593925 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.924604893 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.924623966 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.924664021 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.924758911 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.924768925 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.931236982 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:32.948317051 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.948383093 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.948420048 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.948460102 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.948472023 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.948483944 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.948497057 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.959764004 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.959840059 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.959849119 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.963073015 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.963167906 CEST	49762	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.963179111 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.963238001 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.963313103 CEST	49762	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.964102983 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.964607000 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.964615107 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.964725018 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.964766979 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.964797974 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.964812994 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.964840889 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.964857101 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.964864969 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.964943886 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.964992046 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.967922926 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.967962027 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.967994928 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.968018055 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.968045950 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.968065023 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.968075037 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.975230932 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.975348949 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.978764057 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.978817940 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.978827000 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.980290890 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.980328083 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:32.980334997 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.982016087 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.982074022 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.982076883 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.982100010 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.982117891 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.982131958 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.982155085 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.982171059 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.982184887 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.982203960 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:32.982212067 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.982228041 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:32.987159014 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:32.987207890 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:33.018426895 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.018479109 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.018495083 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.018557072 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.018573046 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.024832010 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.024993896 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.025053978 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.025079966 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.025115013 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.025166988 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.025175095 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.025360107 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.031102896 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.031162024 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.038274050 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.038337946 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.045711040 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.045769930 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.045977116 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.046026945 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.046294928 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.046442032 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.046514034 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.046530008 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.046552896 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.046580076 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.046591043 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.046955109 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.053109884 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.053163052 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.054126978 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.054203987 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.067687035 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.074872971 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.075017929 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.075050116 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.075083971 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.075102091 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.075118065 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.077033997 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.077119112 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.077788115 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.077837944 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.077863932 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.078093052 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.078152895 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.078176022 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.078228951 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.079416990 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.079490900 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.079509974 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.079905033 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.079962015 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.080605030 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.080631018 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.080655098 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.080678940 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.080705881 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.083942890 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.083964109 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.083997965 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.084002018 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.084021091 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.084036112 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.084053993 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.084072113 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.084342003 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.087116957 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.087161064 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.087172985 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.106355906 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.106415033 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.106483936 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.106508017 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.106566906 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.106621981 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.106692076 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.110397100 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.110507011 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.110795975 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.110845089 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.110893011 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.110929012 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.110965967 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.110987902 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.111001015 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.111738920 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.111793995 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.111818075 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.111841917 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.111866951 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.111882925 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.111917019 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.113120079 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.113184929 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.114067078 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.114145994 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.120135069 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.120207071 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.120986938 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.121057034 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.127408981 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.127449036 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.127484083 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.127501011 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.127549887 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.128272057 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.128329992 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.128377914 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.128437996 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.132173061 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.132263899 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.132966042 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.132996082 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.133028984 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.134632111 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.134712934 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.135375023 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.135432005 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.135927916 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.136001110 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.142556906 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.142568111 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.142659903 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.142694950 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.142720938 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.150163889 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.150239944 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.150259972 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.150326014 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.150507927 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.150577068 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.150600910 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.156158924 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.156214952 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.156230927 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.156866074 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.156944990 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.157804012 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.160456896 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.160507917 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.162120104 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.162204981 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.162208080 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.162422895 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.162431955 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.163909912 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.163949966 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.163976908 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.164005041 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.164033890 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.168322086 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.168390989 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.168410063 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.171307087 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.171364069 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.171375990 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.171576977 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.171593904 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.174227953 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.174280882 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.174300909 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.176711082 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.176729918 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.176773071 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.176790953 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.176841974 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.176856041 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.176908970 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.177531958 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.177573919 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.177618027 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.177630901 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.177659035 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.177676916 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.178169012 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.178221941 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.178235054 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.178236008 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.178299904 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.178302050 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.178317070 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.180253029 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.182005882 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.182027102 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.185355902 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.185381889 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.185483932 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.185487986 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.185498953 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.186427116 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.186569929 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.186589003 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.191540003 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.191605091 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.191618919 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.191929102 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.192001104 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.192023039 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.192457914 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.192527056 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.194998980 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.195075035 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.196039915 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.196115971 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.198029041 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.198050976 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.198120117 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.198132992 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.198174953 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.198199034 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.198462009 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.198523998 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.198540926 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.198662996 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.198718071 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.198730946 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.202471972 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.202575922 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.202598095 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.203129053 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.203186035 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.203454971 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.203497887 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.203550100 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.203578949 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.203610897 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.203696966 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.204037905 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.204039097 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.204097033 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.204111099 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.204152107 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.204166889 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.204363108 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.204405069 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.204441071 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.204454899 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.204483986 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.204508066 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.205379963 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.205420971 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.205456972 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.205472946 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.205507040 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.206121922 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.207020044 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.207061052 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.207092047 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.207099915 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.207129002 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.207150936 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.207195997 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.207309008 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.207318068 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.209820032 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.210058928 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.210069895 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.210108995 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.210163116 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.210182905 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.210242033 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.210285902 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.210300922 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.210316896 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.210442066 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.210957050 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.211019993 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.211030006 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.215143919 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.215229988 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.215240002 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.215795040 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.215847015 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.215862989 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.217473030 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.217535019 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.217588902 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.218556881 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.218605995 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.218625069 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.219686985 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.220030069 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.220043898 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.221719980 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.221774101 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.221791983 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.222501993 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.222574949 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.222589016 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.222882032 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.222939968 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.222954035 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.224765062 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.224898100 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.224911928 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.226739883 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.226793051 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.226804018 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.227744102 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.227801085 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.227809906 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.228250980 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.228319883 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.228336096 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.230365038 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.230449915 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.230459929 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.231898069 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.231954098 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.231975079 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.233705997 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.233782053 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.233794928 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.234540939 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.234611988 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.234621048 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.234656096 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.234724045 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.234738111 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.237780094 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.237842083 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.237874031 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.238349915 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.239105940 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.239120007 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.239432096 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.239502907 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.239515066 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.241775990 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.241857052 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.241879940 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.241908073 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.242049932 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.244046926 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.244100094 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.244163990 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.244179010 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.244627953 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.244687080 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.244700909 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.245142937 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.245166063 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.245498896 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.245594025 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.248759031 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.248822927 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.248836994 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.249331951 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.249396086 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.249408960 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.249532938 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.249562979 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.249605894 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.249617100 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.249692917 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.249754906 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.249918938 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.249928951 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.250375032 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.250457048 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.250472069 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.251117945 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.251969099 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.252051115 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.252336979 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.252392054 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.252403021 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.253665924 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.253842115 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.253891945 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.253997087 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.254005909 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.254009962 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.254048109 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.254057884 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.254443884 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.254698038 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.254935026 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.256072044 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.256341934 CEST	49759	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.256370068 CEST	443	49759	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.256603003 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.256654024 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.256668091 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.257575989 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.257605076 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.257646084 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.257661104 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.257688046 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.257699966 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.262145042 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.262290001 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.262353897 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.262366056 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.262403011 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.262415886 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.263520002 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.263581038 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.263598919 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.266400099 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.266478062 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.266489983 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.268326044 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.268393993 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.268408060 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.268990993 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.269037008 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.269087076 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.269118071 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.269144058 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.269275904 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.269646883 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.269671917 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.269695997 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.269712925 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.269715071 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.269742012 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.269759893 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.269783020 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.269891977 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.270296097 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.270342112 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.270365953 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.270380020 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.270410061 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.270411015 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.270499945 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.270586967 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.270646095 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.270662069 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.270708084 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.271044016 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.271083117 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.271107912 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.271123886 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.271152020 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.271177053 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.274663925 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.275068045 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.275116920 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.275140047 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.278599024 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.278702021 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.278731108 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.278747082 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.278889894 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.280590057 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.280653000 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.280666113 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.282840014 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.283607006 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.283648968 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.283668041 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.283675909 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.283689022 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.283736944 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.286138058 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.286209106 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.286221027 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.286237955 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.286292076 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.286309004 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.286771059 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.286828995 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.286844015 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.287040949 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.287127018 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.291768074 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.291841984 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.291868925 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.292041063 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.292175055 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.292192936 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.295434952 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.296123981 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.296166897 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.296215057 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.296236038 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.296286106 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.296621084 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.296797037 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.296837091 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.296864986 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.296878099 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.296906948 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.296963930 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.297103882 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.297130108 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.297174931 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.297190905 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.297512054 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.297549963 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.297583103 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.297583103 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.297601938 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.297632933 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.297652960 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.297947884 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.297966003 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.298006058 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.298033953 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.298037052 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.298048973 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.298051119 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.298079967 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.298109055 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.299431086 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.300663948 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.300703049 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.300791979 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.300910950 CEST	49758	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.300954103 CEST	443	49758	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.302067995 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.302082062 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.302545071 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.302737951 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.302808046 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.302822113 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.307601929 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.307759047 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.307773113 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.309037924 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.309195042 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.309242964 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.312889099 CEST	49749	443	192.168.2.4	151.101.65.229
Oct 1, 2024 20:33:33.312912941 CEST	443	49749	151.101.65.229	192.168.2.4
Oct 1, 2024 20:33:33.314034939 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.314099073 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.314122915 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.315217972 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.315290928 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.315304995 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.316598892 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.316658974 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.316673040 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.332935095 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.332973003 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.333005905 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.333022118 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.333029985 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.333036900 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.333066940 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.333085060 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.333084106 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.333113909 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.333162069 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.333167076 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.333179951 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.333187103 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.333208084 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.333225012 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.333307981 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.334316015 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.334363937 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.334467888 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.334724903 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.334763050 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.334788084 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.334805012 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.334851980 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.338707924 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.343317986 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.343348980 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.343406916 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.343417883 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.343460083 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.347410917 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.347656965 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.347714901 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.347728968 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.347783089 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.347908020 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.361995935 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.362050056 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.362076998 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.362116098 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.362149000 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.362173080 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.362304926 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.362344980 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.362380981 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.362396002 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.362490892 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.362505913 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.362544060 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.362590075 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.400895119 CEST	49756	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.400938034 CEST	443	49756	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.401362896 CEST	49757	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.401405096 CEST	443	49757	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.545768976 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.545794964 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.545814037 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.545830011 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.545840025 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.545883894 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.545914888 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.558026075 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.558083057 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.558084965 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.558111906 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.558137894 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.558171988 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.558224916 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.558232069 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.579241037 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.579262018 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.579317093 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.579323053 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.579363108 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.579381943 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.607347012 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.795797110 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.795820951 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.795860052 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.795892954 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.795979977 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.795988083 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.796025991 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.796026945 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.796051025 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.796051979 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.796087980 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.796093941 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.796133041 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.796169043 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.796179056 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.796179056 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.796319008 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.796359062 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.796389103 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.796389103 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.796403885 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.796413898 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.796457052 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.796742916 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.796783924 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.796812057 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.796818018 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.796844006 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.796864033 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.802057028 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.802095890 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.802141905 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.802149057 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.802182913 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.802201033 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.804605961 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.804667950 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.804691076 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.804697037 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.804733038 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.804753065 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.806360006 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.806401014 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.806433916 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.806440115 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.806468964 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.806489944 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.809045076 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.809087038 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.809123993 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.809129953 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.809166908 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.809185982 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.811444998 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.811464071 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.811522007 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.811528921 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.811563969 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.811583042 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.813438892 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.813457966 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.813509941 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.813517094 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.813543081 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.813563108 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.836066008 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.836107016 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.836158991 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.836165905 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.836318016 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.836318016 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.836443901 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.836486101 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.836509943 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.836515903 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.836544991 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.836565018 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.837095022 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.837132931 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.837157965 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.837162971 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.837191105 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.837209940 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.837971926 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.838011026 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.838043928 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.838049889 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.838078022 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.838115931 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.838248014 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.838287115 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.838314056 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.838320017 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.838350058 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.838363886 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.855106115 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.855149031 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.855189085 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.855196953 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.855240107 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.855252028 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.855449915 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.855499983 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.855519056 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.855525017 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.855573893 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.856029987 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.856069088 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.856092930 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.856098890 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.856122017 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.856142044 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.905762911 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.922961950 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.922982931 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.923065901 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.923072100 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.923110008 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.923362970 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.923379898 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.923424959 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.923430920 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.923470020 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.923970938 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.923990965 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.924037933 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.924043894 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.924086094 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.924520969 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.924544096 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.924571991 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.924577951 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.924606085 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.924618959 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.924772978 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.924792051 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.924830914 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.924837112 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.924855947 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.924876928 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.941725969 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.941781998 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.941802979 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.941808939 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.941850901 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.942065001 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.942106009 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.942130089 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.942136049 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.942173958 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.942193985 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.942517996 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.942569971 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.942585945 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.942594051 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:33.942624092 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.942641973 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:33.944998980 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.950597048 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.950611115 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.951011896 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.951795101 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.951853991 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:33.952130079 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:33.983409882 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:33.999408007 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.008483887 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.009215117 CEST	49761	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.009238958 CEST	443	49761	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.010234118 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.010289907 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.010310888 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.010322094 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.010355949 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.010375023 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.010979891 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.011020899 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.011066914 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.011074066 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.011121035 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.011497974 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.011517048 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.011579037 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.011585951 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.011626005 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.011903048 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.011920929 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.011970043 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.011976004 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.012005091 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.012025118 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.012192011 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.012212038 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.012248039 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.012253046 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.012279034 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.012284994 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.012895107 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.012938023 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.013077974 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.013839006 CEST	49762	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.013858080 CEST	443	49762	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.014336109 CEST	49773	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.014355898 CEST	443	49773	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.014431000 CEST	49773	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.028450966 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.028476954 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.028549910 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.028557062 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.028595924 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.028870106 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.028888941 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.028928041 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.028934002 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.028961897 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.028975010 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.029402018 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.029419899 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.029459953 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.029465914 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.029515982 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.031410933 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:34.035286903 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.035306931 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.035701990 CEST	49773	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.035712004 CEST	443	49773	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.090922117 CEST	49750	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.090934038 CEST	443	49750	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.091200113 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.091232061 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.091329098 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.091762066 CEST	49752	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.091768026 CEST	443	49752	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.092003107 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.092076063 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.092139959 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.092534065 CEST	49755	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:34.092556000 CEST	443	49755	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:34.093004942 CEST	49751	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.093014956 CEST	443	49751	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.093413115 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.093420982 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.093463898 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.093727112 CEST	49754	443	192.168.2.4	142.250.185.174
Oct 1, 2024 20:33:34.093730927 CEST	443	49754	142.250.185.174	192.168.2.4
Oct 1, 2024 20:33:34.095247030 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.095267057 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.095554113 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.095585108 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.096247911 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.096260071 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.097117901 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.097161055 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.097182989 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.097189903 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.097232103 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.097652912 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.097708941 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.097717047 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.097737074 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.097765923 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.097785950 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.098205090 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.098242998 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.098270893 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.098277092 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.098320007 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.098335981 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.098603010 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.098640919 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.098680019 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.098685980 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.098699093 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.098720074 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.099104881 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.099143028 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.099205017 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.099211931 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.099220991 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.099248886 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.108493090 CEST	49769	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.108498096 CEST	443	49769	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.110863924 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.111187935 CEST	49760	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.111208916 CEST	443	49760	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.111402035 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.111411095 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.111459017 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.111953974 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.111965895 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.115495920 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.115523100 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.115581036 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.115586996 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.115623951 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.115741968 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.115758896 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.115798950 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.115804911 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.115853071 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.116141081 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.116158962 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.116190910 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.116195917 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.116220951 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.116229057 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.116235018 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.116242886 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.116272926 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.116367102 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.116410017 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.116933107 CEST	49770	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.116936922 CEST	443	49770	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.169239044 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:34.169301033 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:34.169439077 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:34.169456959 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:34.169466972 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:34.169471979 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:34.169481993 CEST	49763	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:34.169485092 CEST	443	49763	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:34.201142073 CEST	49779	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:34.201180935 CEST	443	49779	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:34.201314926 CEST	49779	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:34.201678038 CEST	49779	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:34.201692104 CEST	443	49779	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:34.215482950 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.215532064 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.215604067 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.215610981 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.215620995 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.215663910 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.215694904 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.221450090 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.221694946 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.221703053 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.227921963 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.227997065 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.228004932 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.234985113 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.235349894 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.235358000 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.240431070 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.241394043 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.241415024 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.246704102 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.246757030 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.246766090 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.301228046 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.302129984 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.304889917 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.304951906 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.304960966 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.311060905 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.311173916 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.311192989 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.339564085 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.339587927 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.339602947 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.339622974 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.339699984 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.339925051 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.339967966 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.340006113 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.340044022 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.340044022 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.340053082 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.340107918 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.342746019 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.342786074 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.342792034 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.348891020 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.349035025 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.349051952 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.355259895 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.355324030 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.355329990 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.360730886 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.360779047 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.360788107 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.366138935 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.366203070 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.366219997 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.372126102 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.372183084 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.372189045 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.377590895 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.377701044 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.377712965 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.389202118 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.389285088 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.389292955 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.391350985 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.391443968 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.391450882 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.396368027 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.396403074 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.396430969 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.396440029 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.396606922 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.400938034 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.405778885 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.405811071 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.405822039 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.405841112 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.405880928 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.410339117 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.414256096 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.414318085 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.414324999 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.426573038 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.426686049 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.426693916 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.426995039 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.427023888 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.427053928 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.427058935 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.427064896 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.427117109 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.427123070 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.427205086 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.430355072 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.434355974 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.434389114 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.434438944 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.434447050 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.434499979 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.438050985 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.442456961 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.442487955 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.442507029 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.442514896 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.442672968 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.457535982 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.457581043 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.457608938 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.457634926 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.457653999 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.457662106 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.457700014 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.457982063 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.458008051 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.458080053 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.458086967 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.458168030 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.461656094 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.464936018 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.465003967 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.465009928 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.465027094 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.465099096 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.469286919 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.472187042 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.472222090 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.472238064 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.472248077 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.472316980 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.475284100 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.478857040 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.478914022 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.478919983 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.482117891 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.482218981 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.482222080 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.482228041 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.482275963 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.484513998 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.486681938 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.486707926 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.486736059 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.486769915 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.486777067 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.486825943 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.488802910 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.488868952 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.488887072 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.491025925 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.491071939 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.491079092 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.493248940 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.493298054 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.493304014 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.495309114 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.495395899 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.495400906 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.498204947 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.498255968 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.498261929 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.499711990 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.499763966 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.499768972 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.501754999 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.501811981 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.501817942 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.503946066 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.503990889 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.503995895 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.512960911 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.513025045 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.513042927 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.513360023 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.513386011 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.513407946 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.513422012 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.513427019 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.513454914 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.513468027 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.513475895 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.513489008 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.514338970 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.514405012 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.514411926 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.516877890 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.516944885 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.516952038 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.518345118 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.518529892 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.518536091 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.520509005 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.520559072 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.520565033 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.522138119 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.522191048 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.522197008 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.524139881 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.524199009 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.524204016 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.525892019 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.525947094 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.525954008 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.527779102 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.528225899 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.528243065 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.529721975 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.529815912 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.529822111 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.531598091 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.531649113 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.531655073 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.533324003 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.533345938 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.533364058 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.533370972 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.533437967 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.535409927 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.536847115 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.536952019 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.536956072 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.536962986 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.537024021 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.538739920 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.540481091 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.540513992 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.540543079 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.540550947 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.540657043 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.542224884 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.543889046 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.543924093 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.543975115 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.543982983 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.544061899 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.547372103 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.551048994 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.551083088 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.551115990 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.551126957 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.551220894 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.555560112 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.557799101 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.557823896 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.557842970 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.557852983 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.558100939 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.558572054 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.559232950 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.559261084 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.559338093 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.559345961 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.559689999 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.559951067 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.560424089 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.560508013 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.560512066 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.560518026 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.560560942 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.563679934 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.568603992 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.568665028 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.568722010 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.568731070 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.570785999 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.573007107 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.577447891 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.577491045 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.577534914 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.577542067 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.577590942 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.580425978 CEST	443	49773	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.582217932 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.586472034 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.586605072 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.586611986 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.589169979 CEST	49773	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.589186907 CEST	443	49773	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.589557886 CEST	443	49773	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.591191053 CEST	49773	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.591254950 CEST	443	49773	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.591622114 CEST	49773	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.596167088 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.596199989 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.596219063 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.596227884 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.596369982 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.599065065 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.600199938 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.600236893 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.600280046 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.600287914 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.600378990 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.601896048 CEST	49780	443	192.168.2.4	142.250.185.150
Oct 1, 2024 20:33:34.601928949 CEST	443	49780	142.250.185.150	192.168.2.4
Oct 1, 2024 20:33:34.602015018 CEST	49780	443	192.168.2.4	142.250.185.150
Oct 1, 2024 20:33:34.602961063 CEST	49780	443	192.168.2.4	142.250.185.150
Oct 1, 2024 20:33:34.602981091 CEST	443	49780	142.250.185.150	192.168.2.4
Oct 1, 2024 20:33:34.606189013 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.606885910 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.606925964 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.606931925 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.606954098 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.607016087 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.607022047 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.611128092 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.611154079 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.611176968 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.611182928 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.611210108 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.611227989 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.611232996 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.611258984 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.611278057 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.611283064 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.611366034 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.617079020 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.617197037 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.617228031 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.617257118 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.617263079 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.617321968 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.617340088 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.638205051 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.638237000 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.638262987 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.638286114 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.638289928 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.638299942 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.638314009 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.638351917 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.638359070 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.638675928 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.638719082 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.638725042 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.638919115 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.638946056 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.639101028 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.639106989 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.639148951 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.639408112 CEST	443	49773	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.639931917 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.640857935 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.640935898 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.640958071 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.640997887 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.641016006 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.641134977 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.641139984 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.641823053 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.641838074 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.642350912 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.643565893 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.643623114 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.643629074 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.643696070 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.643718004 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.643743038 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.643754959 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.643760920 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.643810034 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.645962954 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.645989895 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.646014929 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.646039009 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.646040916 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.646049023 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.646064043 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.646105051 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.646178961 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.646830082 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.646959066 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.647098064 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.647726059 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.647749901 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.647773981 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.647813082 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.647813082 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.647821903 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.648052931 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.648076057 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.648094893 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.648102999 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.648173094 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.649101019 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.649203062 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.649252892 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.649257898 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.649389029 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.649415970 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.649508953 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.649516106 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.649677038 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.650322914 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.650474072 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.650496960 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.650510073 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.650532961 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.650614977 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.650680065 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.653316975 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.653412104 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.653439045 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.653460026 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.653465986 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.653489113 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.653506994 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.653513908 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.653554916 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.653562069 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.653601885 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.654617071 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.654659986 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.654788017 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.654814959 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.654861927 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.654861927 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.654870987 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.655236959 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.655500889 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.655534029 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.655555010 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.655559063 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.655566931 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.655596972 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.655632019 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.655639887 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.655741930 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.655754089 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.660216093 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.661479950 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.661504984 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.661549091 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.661556005 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.661581039 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.661597013 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.661602020 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.661685944 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.661691904 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.673285961 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.675206900 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.675235987 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.675263882 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.675265074 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.675273895 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.675311089 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.675321102 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.675403118 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.675407887 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.686971903 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.687015057 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.687022924 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.687179089 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.687361956 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.708986998 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.725804090 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.765580893 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.765594959 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.765791893 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.765800953 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.765950918 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.765995979 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.766127110 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.766130924 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.766663074 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.766674042 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.766736984 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.766869068 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.766881943 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.766917944 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.767009974 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.767019987 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.767067909 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.767666101 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.767678022 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.767728090 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.777400017 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.777461052 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.777870893 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.777940035 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.778352976 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.778428078 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.783632994 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.783718109 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.784409046 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.784416914 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.784607887 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.784615993 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.784760952 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.784778118 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.784955025 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.784961939 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.811433077 CEST	443	49773	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.811476946 CEST	49773	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.811487913 CEST	443	49773	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.811497927 CEST	443	49773	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.811549902 CEST	49773	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.811661959 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.811695099 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.811784029 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.812517881 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.812537909 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.815077066 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.816235065 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.816246033 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.816381931 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.816802025 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.816868067 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.816932917 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.817122936 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.817137957 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.817329884 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.817356110 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.824585915 CEST	49773	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.824594021 CEST	443	49773	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.825017929 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.825040102 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.825102091 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.825788021 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.825800896 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.826323986 CEST	49771	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:34.826334953 CEST	443	49771	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:34.834965944 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.834965944 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.834988117 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.834994078 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.834994078 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.851646900 CEST	443	49779	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:34.851722956 CEST	49779	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:34.915745974 CEST	49779	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:34.915762901 CEST	443	49779	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:34.916006088 CEST	443	49779	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:34.917669058 CEST	49779	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:34.950377941 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.950406075 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.950414896 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.950448036 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.950459003 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.950500011 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.950521946 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.950555086 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.950584888 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.963398933 CEST	443	49779	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:34.987521887 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.987531900 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.987551928 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.987561941 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.987597942 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.987613916 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.987623930 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:34.987643003 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:34.987663984 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.005093098 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.005115032 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.005122900 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.005156994 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.005157948 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.005166054 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.005184889 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.005198956 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.005237103 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.007493973 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.007514954 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.007520914 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.007553101 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.007580042 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.007617950 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.007638931 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.007659912 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.007659912 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.007659912 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.007678986 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.007905006 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.007921934 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.007929087 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.007955074 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.007966042 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.007965088 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.008007050 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.008037090 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.008037090 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.008074999 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.039411068 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.039418936 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.039463997 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.039514065 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.039521933 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.039550066 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.039561033 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.041882992 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.041894913 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.041919947 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.042016983 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.042016983 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.042025089 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.042843103 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.042851925 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.042872906 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.042897940 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.042901039 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.042907953 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.042938948 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.042947054 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.043313980 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.044929981 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.044944048 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.044972897 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.045000076 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.045021057 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.045041084 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.045068979 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.045089006 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.082150936 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.082164049 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.082187891 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.082226038 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.082241058 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.082271099 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.082304001 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.082648993 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.082716942 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.082832098 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.082894087 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.082899094 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.082961082 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.083163977 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.083179951 CEST	443	49772	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.083189964 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.083318949 CEST	49772	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.088893890 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.088912964 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.089078903 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.091131926 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.091149092 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.101675034 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.101692915 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.101768970 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.101778984 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.101824999 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.101844072 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.101897001 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.101898909 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.101907969 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.101948977 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.104198933 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.104218960 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.104279995 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.104310036 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.104357004 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.125878096 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.125896931 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.125957012 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.125963926 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.125997066 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.127767086 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.127789974 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.127850056 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.127851963 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.127861023 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.127919912 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.127926111 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.127940893 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.127991915 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.128372908 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.128396988 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.128433943 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.128439903 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.128469944 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.128489971 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.130106926 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.130121946 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.130171061 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.130178928 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.130220890 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.130333900 CEST	443	49779	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:35.130398035 CEST	443	49779	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:35.130475998 CEST	49779	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:35.133261919 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.133296013 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.133336067 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.133344889 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.133366108 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.133387089 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.135221958 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.135236979 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.135282040 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.135288954 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.135323048 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.135340929 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.188338041 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.188354969 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.188422918 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.188431025 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.188462973 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.188482046 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.189235926 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.189250946 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.189323902 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.189331055 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.189378023 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.192430019 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.192475080 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.192507029 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.192523003 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.192570925 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.192570925 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.193399906 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.193414927 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.193496943 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.193510056 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.193557978 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.215596914 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.215626001 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.215678930 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.215684891 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.215722084 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.215734005 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.216161966 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.216176033 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.216228008 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.216240883 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.216305017 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.227361917 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.227377892 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.227423906 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.227431059 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.227468014 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.227677107 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.227691889 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.227732897 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.227740049 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.227777004 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.234536886 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.234554052 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.234621048 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.234630108 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.234669924 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.235049009 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.235080004 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.235119104 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.235124111 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.235160112 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.235171080 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.236033916 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.236047983 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.236120939 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.236133099 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.236180067 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.237026930 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.237040997 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.237108946 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.237121105 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.237164974 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.240873098 CEST	443	49780	142.250.185.150	192.168.2.4
Oct 1, 2024 20:33:35.275422096 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.275449038 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.275527954 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.275537014 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.275579929 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.275783062 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.275796890 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.275855064 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.275862932 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.276817083 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.276838064 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.276871920 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.276878119 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.276901007 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.276932955 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.281307936 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.281327009 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.281407118 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.281430960 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.281490088 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.281858921 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.281873941 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.281922102 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.281934977 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.281960011 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.281985044 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.282649994 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.282664061 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.282711983 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.282722950 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.282752037 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.282772064 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.283356905 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.283371925 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.283431053 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.283442974 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.283492088 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.302604914 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.302620888 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.302685976 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.302692890 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.303055048 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.303072929 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.303107023 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.303112984 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.303133965 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.303158998 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.303843021 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.303858042 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.303906918 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.303913116 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.304775953 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.304794073 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.304830074 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.304835081 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.304861069 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.304884911 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.305104971 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.305174112 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.306710958 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.306766033 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.306771040 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.307322025 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.311722040 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.311739922 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.311811924 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.311825037 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.311872005 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.314455986 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.314476013 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.314526081 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.314534903 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.314573050 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.315220118 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.315233946 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.315283060 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.315288067 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.315310001 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.315326929 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.337388992 CEST	49780	443	192.168.2.4	142.250.185.150
Oct 1, 2024 20:33:35.346648932 CEST	49780	443	192.168.2.4	142.250.185.150
Oct 1, 2024 20:33:35.346661091 CEST	443	49780	142.250.185.150	192.168.2.4
Oct 1, 2024 20:33:35.347620964 CEST	443	49780	142.250.185.150	192.168.2.4
Oct 1, 2024 20:33:35.347637892 CEST	443	49780	142.250.185.150	192.168.2.4
Oct 1, 2024 20:33:35.347676992 CEST	49780	443	192.168.2.4	142.250.185.150
Oct 1, 2024 20:33:35.348938942 CEST	49780	443	192.168.2.4	142.250.185.150
Oct 1, 2024 20:33:35.348994970 CEST	443	49780	142.250.185.150	192.168.2.4
Oct 1, 2024 20:33:35.356348991 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.356369972 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.356448889 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.356462955 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.356512070 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.358901024 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.358925104 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.358933926 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.358963013 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.358971119 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.358971119 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.359000921 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.359013081 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.359042883 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.359062910 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.360935926 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.370172024 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.370187044 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.370270014 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.370281935 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.370342970 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.370779037 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.370793104 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.370863914 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.370877028 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.370929003 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.371423960 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.371440887 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.371514082 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.371514082 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.371526957 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.371575117 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.371798038 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.371813059 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.371879101 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.371890068 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.371938944 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.392905951 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.392921925 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.393464088 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.397243023 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.397270918 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.397313118 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.397320986 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.397346973 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.397356987 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.400223017 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.400284052 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.400296926 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.400320053 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.400352955 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.400382042 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.408586979 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.408776045 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.408816099 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.445929050 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.445955992 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.446021080 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.446027994 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.446074963 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.451440096 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.455197096 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.459901094 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.462982893 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.471077919 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.486413956 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.486438990 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.486490011 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.486504078 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.486536026 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.486571074 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.487463951 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.487484932 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.487549067 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.487555981 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.487607956 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.503051043 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.503068924 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.503523111 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.504367113 CEST	49775	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.504386902 CEST	443	49775	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.504991055 CEST	49788	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.505017042 CEST	443	49788	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.505076885 CEST	49788	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.515248060 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.515259981 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.515778065 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.516084909 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.516149998 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.517718077 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.517724991 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.517793894 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.517812014 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.520235062 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.520298004 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.525741100 CEST	49780	443	192.168.2.4	142.250.185.150
Oct 1, 2024 20:33:35.525748968 CEST	443	49780	142.250.185.150	192.168.2.4
Oct 1, 2024 20:33:35.531256914 CEST	49788	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.531270981 CEST	443	49788	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.532015085 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.532119036 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.532165051 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.532202959 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.532210112 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.532224894 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.532243013 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.532269955 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.532659054 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.532919884 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.533247948 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.533274889 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.533315897 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.533323050 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.533351898 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.533365965 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.560420990 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.560791016 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.560893059 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.560923100 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.561979055 CEST	49779	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:35.561996937 CEST	443	49779	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:35.562021017 CEST	49779	443	192.168.2.4	184.28.90.27
Oct 1, 2024 20:33:35.562026978 CEST	443	49779	184.28.90.27	192.168.2.4
Oct 1, 2024 20:33:35.565275908 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.566605091 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.573548079 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.573566914 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.573636055 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.573646069 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.573715925 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.574347973 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.574367046 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.574419975 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.574429989 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.574464083 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.575120926 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.575139999 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.575177908 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.575186014 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.575216055 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.575241089 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.575864077 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.575882912 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.575918913 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.575926065 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.575961113 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.576028109 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.602574110 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.607408047 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.607408047 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.619096041 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.619149923 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.619199038 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.619208097 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.619371891 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.619371891 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.619596004 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.619642973 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.619669914 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.619676113 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.619704008 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.619714975 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.620615959 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.620656013 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.620682001 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.620687962 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.620716095 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.620732069 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.621506929 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.621553898 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.621575117 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.621581078 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.621607065 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.621624947 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.632266045 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.633802891 CEST	49780	443	192.168.2.4	142.250.185.150
Oct 1, 2024 20:33:35.660646915 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.660691023 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.660779953 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.660779953 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.660787106 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.660990953 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.661003113 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.661032915 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.661062956 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.661092043 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.661079884 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.661122084 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.661158085 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.661186934 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.661464930 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.661530018 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.661556959 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.661587000 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.661622047 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.661643028 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.661647081 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.661712885 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.661796093 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.662058115 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.662137985 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.662142992 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.662164927 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.662190914 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.662200928 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.662240028 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.662244081 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.662261963 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.662278891 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.662307024 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.662322044 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.662338018 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.663798094 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.663813114 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.664130926 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.665287018 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.665340900 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.666153908 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.669729948 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.670201063 CEST	49777	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.670209885 CEST	443	49777	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.674556971 CEST	49776	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.674606085 CEST	443	49776	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.684804916 CEST	49789	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.684842110 CEST	443	49789	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.684911966 CEST	49789	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.685425997 CEST	49789	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.685436964 CEST	443	49789	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.685926914 CEST	49790	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.685935974 CEST	443	49790	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.685991049 CEST	49790	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.686525106 CEST	49790	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.686534882 CEST	443	49790	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.686590910 CEST	49778	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.686598063 CEST	443	49778	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.689918041 CEST	49791	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.689940929 CEST	443	49791	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.689995050 CEST	49791	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.692389965 CEST	49791	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.692404985 CEST	443	49791	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.699915886 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.699944973 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.700000048 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.700009108 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.700048923 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.711402893 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.741396904 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.741457939 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.741508007 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.741532087 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.741595030 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.741661072 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.741671085 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.742599964 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.742645979 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.742698908 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.742707014 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.743746996 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.743793011 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.743802071 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.745428085 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.745560884 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.745635986 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.745642900 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.745671034 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.745717049 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.745737076 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.747505903 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.747545004 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.747553110 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.748711109 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.748768091 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.748776913 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.749857903 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.749881983 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.749919891 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.749923944 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.749953985 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.749963045 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.749985933 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.750011921 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.751563072 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.751662970 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.751683950 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.753755093 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.753889084 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.753897905 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.754857063 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.755012989 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.755021095 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.757703066 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.757759094 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.757772923 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.760097980 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.760164976 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.760173082 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.761178017 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.761229992 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.761238098 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.764000893 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.764077902 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.764096975 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.766366959 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.766408920 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.766418934 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.767484903 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.767569065 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.767577887 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.770365000 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.770448923 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.770462990 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.772624016 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.772674084 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.772681952 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.773986101 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.774060011 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.774075985 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.776524067 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.776599884 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.776614904 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.786210060 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.786236048 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.786288023 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.786294937 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.786348104 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.786353111 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.787746906 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.787779093 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.787806988 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.787813902 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.787847996 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.793977022 CEST	49794	53	192.168.2.4	1.1.1.1
Oct 1, 2024 20:33:35.796957016 CEST	49795	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:35.796983004 CEST	443	49795	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:35.797123909 CEST	49795	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:35.797756910 CEST	49795	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:35.797770023 CEST	443	49795	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:35.798820972 CEST	53	49794	1.1.1.1	192.168.2.4
Oct 1, 2024 20:33:35.798894882 CEST	49794	53	192.168.2.4	1.1.1.1
Oct 1, 2024 20:33:35.799217939 CEST	49794	53	192.168.2.4	1.1.1.1
Oct 1, 2024 20:33:35.799217939 CEST	49794	53	192.168.2.4	1.1.1.1
Oct 1, 2024 20:33:35.803992987 CEST	53	49794	1.1.1.1	192.168.2.4
Oct 1, 2024 20:33:35.804105043 CEST	53	49794	1.1.1.1	192.168.2.4
Oct 1, 2024 20:33:35.819470882 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.836268902 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.836271048 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.836734056 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.837023973 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.837461948 CEST	49797	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.837505102 CEST	443	49797	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.837569952 CEST	49797	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.837811947 CEST	49797	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.837827921 CEST	443	49797	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.838000059 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.838027954 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.838044882 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.838056087 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.838162899 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.838324070 CEST	49798	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.838335037 CEST	443	49798	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.838388920 CEST	49798	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.838799000 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.838963985 CEST	49798	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.838975906 CEST	443	49798	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.839731932 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.839828968 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.839886904 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.839895964 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.840163946 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.840214014 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.840260983 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.840277910 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.840292931 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.840337992 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.840343952 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.840362072 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.840401888 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.840404987 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.840429068 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.840476036 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.840476036 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.841675997 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.841732025 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.841759920 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.841766119 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.841793060 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.841815948 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.842576027 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.842602015 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.842638969 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.842648983 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.842694044 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.843400955 CEST	49801	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.843421936 CEST	443	49801	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.843543053 CEST	49801	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.843931913 CEST	49801	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.843944073 CEST	443	49801	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.844372988 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.844396114 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.844420910 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.844429970 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.844470024 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.844873905 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.846060038 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.846702099 CEST	49802	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.846709967 CEST	443	49802	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.846803904 CEST	49802	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.847379923 CEST	49802	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.847394943 CEST	443	49802	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.847932100 CEST	49803	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.847954988 CEST	443	49803	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.848021984 CEST	49803	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.848129988 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.848191977 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.848207951 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.848414898 CEST	49803	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.848423958 CEST	443	49803	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.848948956 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.849659920 CEST	49804	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.849677086 CEST	443	49804	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.849826097 CEST	49804	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.850410938 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.850434065 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.850467920 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.850478888 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.850521088 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.851546049 CEST	49804	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.851558924 CEST	443	49804	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.853625059 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.853678942 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.853693008 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.855206013 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.855252981 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.855262041 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.856571913 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.859882116 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.859968901 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.859983921 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.861426115 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.861498117 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.861505032 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.862857103 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.862901926 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.862910032 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.866748095 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.866822958 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.866889000 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.866904020 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.867221117 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.867855072 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.867881060 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.867913961 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.867923975 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.867964983 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.869337082 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.869369030 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.869402885 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.869412899 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.869453907 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.872977972 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.873181105 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.873224974 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.873255968 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.873262882 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.873301029 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.873887062 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.875365973 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.875942945 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.875983000 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.876008987 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.876014948 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.876038074 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.876056910 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.876499891 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.876537085 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.876563072 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.876568079 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.876588106 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.876610041 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.879338026 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.879416943 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.879432917 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.879765987 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.879792929 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.879837036 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.879844904 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.879888058 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.881103039 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.881136894 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.881149054 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.881156921 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.881206036 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.884603024 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.884656906 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.884670973 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.885551929 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.886955976 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.890404940 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.890460968 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.890474081 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.891263008 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.891289949 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.891325951 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.891335964 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.891376019 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.892784119 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.892838001 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.892848015 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.898673058 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.898757935 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.898793936 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.898818016 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.899333000 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.902014971 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.902578115 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.902606964 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.902637005 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.902647972 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.902688980 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.903839111 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.903866053 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.903891087 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.903901100 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.903944016 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.904210091 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.904877901 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.907573938 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.907623053 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.907636881 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.908196926 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.909631968 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.909699917 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.909708023 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.913367987 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.913424015 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.913438082 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.923830032 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.923876047 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.923899889 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.923907995 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.923938990 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.923957109 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.923965931 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.924654007 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.924855947 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.926459074 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.926480055 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.926522017 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.926529884 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.926572084 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.926579952 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.926632881 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.926677942 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.928069115 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.928095102 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.928116083 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.928128958 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.928129911 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.928144932 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.928167105 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.928185940 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.928200960 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.928209066 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.928236961 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.928260088 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.928456068 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.928497076 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.928517103 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.928528070 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.928533077 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.928554058 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.928575993 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.928605080 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.928643942 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.928651094 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.928668022 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.928720951 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.928734064 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.928977966 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.928986073 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.929126024 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.929265022 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.929322004 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.929335117 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.929898977 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.929938078 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.929970026 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.929975986 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.930016041 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.930861950 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.930901051 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.930937052 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.930943012 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.930970907 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.930991888 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.933283091 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.933340073 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.933348894 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.935184956 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.935261965 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.935276031 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.938961029 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.939023972 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.939033031 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.940062046 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.942905903 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.942970991 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.942985058 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.943011045 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.943020105 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.944773912 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.947189093 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.947252035 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.947253942 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.947261095 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.947266102 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.949589968 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.951335907 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.951348066 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.951554060 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.953087091 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.953140974 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.953147888 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.953183889 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.953196049 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.955049992 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.955074072 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.955090046 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.955123901 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.955136061 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.955152035 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.955182076 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.955281019 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.957154036 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.957209110 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.957216024 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.957253933 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.957267046 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.961062908 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.962017059 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.962059975 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.962093115 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.962101936 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.962130070 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.962145090 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.962146997 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.962606907 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.962645054 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.962677002 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.962682009 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.962704897 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.962723017 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.963347912 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.963413954 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.963437080 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.963495016 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.963957071 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.964107990 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.964149952 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.964186907 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.964188099 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.964193106 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.964194059 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.964201927 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.964222908 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.964243889 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.965394974 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.965435028 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.965451002 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.965451002 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.965456963 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.967207909 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.969647884 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.969705105 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.969715118 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.969743013 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.969748974 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.971162081 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.971247911 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.971256018 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.973686934 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.975095987 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.975157976 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.975164890 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.975167990 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.975178003 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.978084087 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.978236914 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.978245020 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.978997946 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.979053974 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.979063034 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.982027054 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.982103109 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.982110977 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.982774973 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.982834101 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.982842922 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.986021996 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.986109972 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.986124992 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.986593962 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.986640930 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.986649036 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.990008116 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.990076065 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.990091085 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.990200996 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.990365982 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.990375042 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.991733074 CEST	49781	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.991744995 CEST	443	49781	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.993607998 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.993679047 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.993721008 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.993860006 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.993908882 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.993917942 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.997092009 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.997097969 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.997112989 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.997159004 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.997170925 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:35.997181892 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.997200012 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.997220039 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:35.997478962 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:35.997525930 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:35.997534037 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.001677990 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.001720905 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.001729012 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.001836061 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.001887083 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.001900911 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.004841089 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.004895926 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.004904032 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.004911900 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.004967928 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.004981995 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.007905006 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.008675098 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.008688927 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.011632919 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.011687994 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.011701107 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.017332077 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.017375946 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.017394066 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.017407894 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.017438889 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.017448902 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.017700911 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.017745018 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.017765045 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.017772913 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.017797947 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.017812967 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.017904043 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.017968893 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.017987967 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.018054008 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.018410921 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.018450975 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.018480062 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.018486023 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.018546104 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.018546104 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.019243002 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.019273043 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.019285917 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.019294977 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.019325972 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.019365072 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.019373894 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.019411087 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.019625902 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.019905090 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.019932985 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.019953966 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.019962072 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.020044088 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.021039963 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.021100998 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.021116972 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.022363901 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.022417068 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.022429943 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.022867918 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.022911072 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.022918940 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.022933006 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.022980928 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.023027897 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.023035049 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.023232937 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.023241043 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.023293972 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.023299932 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.023300886 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.023312092 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.025258064 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.025304079 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.025311947 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.025573969 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.025624037 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.025635958 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.027734041 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.027762890 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.027796030 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.027805090 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.027848005 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.028177023 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.028239012 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.028251886 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.029489040 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.030163050 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.030225992 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.030239105 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.031599045 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.031630993 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.031646013 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.031652927 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.031754017 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.032146931 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.032221079 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.032227993 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.032247066 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.032341957 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.034111977 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.034363031 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.035789013 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.035847902 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.035856009 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.036570072 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.036621094 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.036633968 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.038100004 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.038127899 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.038182974 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.038192987 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.038240910 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.039062023 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.039139032 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.039149046 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.039164066 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.039239883 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.040061951 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.041188002 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.042079926 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.042145014 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.042160034 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.044251919 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.044317961 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.044331074 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.045608044 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.045690060 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.045697927 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.045706987 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.045775890 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.047878027 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.047898054 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.047950029 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.047957897 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.047987938 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.048002958 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.048552990 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.048625946 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.048634052 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.048656940 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.048706055 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.049879074 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.052778959 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.052829027 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.052855968 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.052864075 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.052913904 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.053306103 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.053349018 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.053369045 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.053375959 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.053404093 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.053426027 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.053471088 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.053487062 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.053505898 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.053529024 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.053536892 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.053673029 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.053690910 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.053735018 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.053750038 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.053771019 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.053822041 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.053905964 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.053962946 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.053987026 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.053992987 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.054011106 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.054034948 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.054073095 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.054111958 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.054348946 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.054389954 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.054415941 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.054424047 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.054461002 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.054467916 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.054529905 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.054555893 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.054758072 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.054768085 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.054810047 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.055188894 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.055226088 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.055253029 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.055270910 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.056003094 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.056034088 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.056037903 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.056050062 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.056060076 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.056092978 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.056106091 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.056107044 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.058646917 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.058815956 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.058870077 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.058882952 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.059855938 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.059895992 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.060003996 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.060081959 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.060187101 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.060189009 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.060195923 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.060204983 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.060270071 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.060393095 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.061897993 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.062078953 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.063574076 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.063602924 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.063632011 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.063839912 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.063855886 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.063982010 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.064047098 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.064062119 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.065601110 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.065655947 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.065664053 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.065913916 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.065969944 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.065996885 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.067190886 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.067238092 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.067245960 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.067847013 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.067897081 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.067909956 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.069017887 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.069073915 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.069082022 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.069792986 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.069840908 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.069854021 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.070780039 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.071083069 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.071090937 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.071662903 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.071779013 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.071785927 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.071800947 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.071860075 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.071871042 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.072587967 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.072637081 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.072647095 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.072680950 CEST	443	49788	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.072937012 CEST	49788	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.072957993 CEST	443	49788	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.073302031 CEST	443	49788	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.073802948 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.073833942 CEST	49788	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.073856115 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.073872089 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.073895931 CEST	443	49788	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.074011087 CEST	49788	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.074296951 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.074345112 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.074352980 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.075556993 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.075615883 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.075628996 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.076033115 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.076075077 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.076082945 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.077409983 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.077481031 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.077508926 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.077791929 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.079219103 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.079284906 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.079287052 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.079293013 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.079298973 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.079457998 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.081136942 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.081197023 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.081202984 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.081207037 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.081216097 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.081383944 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.082859993 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.082906961 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.082911015 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.082916975 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.082968950 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.082984924 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.083014965 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.083023071 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.084553957 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.084964991 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.085026979 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.085026979 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.085035086 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.085040092 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.086235046 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.086533070 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.086582899 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.086592913 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.086630106 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.086647987 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.086863995 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.086884022 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.086952925 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.086961985 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.087013960 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.087826014 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.087871075 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.087878942 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.088877916 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.088891983 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.088967085 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.088973045 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.089015007 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.089241982 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.089303970 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.089317083 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.094326973 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.094369888 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.094377041 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.096700907 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.096757889 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.096771955 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.097274065 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.097297907 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.097328901 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.097337008 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.097362995 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.097374916 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.097518921 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.097560883 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.097568989 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.097723961 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.097800970 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.097812891 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.097901106 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.097961903 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.097975016 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.097985029 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.098023891 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.098031998 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.098222017 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.098284006 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.098293066 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.098576069 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.098629951 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.098642111 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.098715067 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.098875046 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.098886967 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.100336075 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.100455999 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.100469112 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.102026939 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.102081060 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.102092981 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.103256941 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.103298903 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.103328943 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.103339911 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.103363037 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.103382111 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.103513956 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.103564978 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.103579044 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.104022980 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.104060888 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.104089975 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.104095936 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.104114056 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.104137897 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.104562044 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.104602098 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.104620934 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.104629040 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.104650974 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.104666948 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.105032921 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.105076075 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.105097055 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.105103970 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.105125904 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.105143070 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.107867956 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.107958078 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.107985020 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.108011007 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.108011007 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.108021975 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.108042002 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.108068943 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.108078957 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.108104944 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.108166933 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.108175039 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.108795881 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.108850002 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.108858109 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.108867884 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.108922958 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.108937025 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.109038115 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.109088898 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.109097004 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.109669924 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.109750986 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.109761953 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.111148119 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.111200094 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.111212015 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.111711979 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.111747980 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.111754894 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.111763000 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.111812115 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.111819983 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.112814903 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.112915039 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.112926960 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.114525080 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.114546061 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.114566088 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.114567041 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.114574909 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.114619017 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.114619970 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.114625931 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.114633083 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.115484953 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.115520954 CEST	49788	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.115530968 CEST	443	49788	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.115542889 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.115555048 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.116981983 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.117168903 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.117181063 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.118453979 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.118478060 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.118498087 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.118514061 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.118577003 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.118602991 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.118612051 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.118618965 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.118640900 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.118710041 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.118762016 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.118773937 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.119771957 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.119860888 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.119872093 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.121222973 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.121273994 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.121285915 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.122996092 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.123064041 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.123075962 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.124619961 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.124644041 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.124675989 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.124701023 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.124838114 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.124850035 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.124891996 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.124947071 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.125133991 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.125181913 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.125195026 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.125380039 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.125441074 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.125452042 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.129586935 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.129724979 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.129772902 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.129787922 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.129841089 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.129852057 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.129946947 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.130001068 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.130012035 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.130837917 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.130867004 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.130889893 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.130898952 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.130906105 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.130932093 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.131305933 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.131720066 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.131728888 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.137480021 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.137494087 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.137514114 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.137551069 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.137557030 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.137598038 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.137845039 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.137892962 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.139460087 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.139499903 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.139528036 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.139537096 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.139568090 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.139595032 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.139836073 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.139877081 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.139908075 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.139915943 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.139938116 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.139955044 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.140254021 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.140290976 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.140319109 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.140324116 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.140357018 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.140369892 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.140777111 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.140815020 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.140839100 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.140845060 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.140862942 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.140882015 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.141249895 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.141299009 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.141311884 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.141411066 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.141490936 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.141501904 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.141514063 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.141582012 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.141602993 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.141627073 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.141654015 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.141690969 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.141702890 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.141710997 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.141726017 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.141902924 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.141949892 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.141958952 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.143851995 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.143922091 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.143934965 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.144013882 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.144083977 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.144085884 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.144088984 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.144109011 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.144129038 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.144136906 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.144155025 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.144175053 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.144308090 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.144434929 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.144457102 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.144674063 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.144684076 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.150006056 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.150065899 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.150074005 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.150113106 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.150175095 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.150183916 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.150223970 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.150285959 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.150298119 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.150362968 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.150388956 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.150434017 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.150443077 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.150470018 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.150476933 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.150492907 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.150562048 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.150573969 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.154011965 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.154036045 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.154069901 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.154088974 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.154093981 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.154104948 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.154122114 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.154145002 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.154151917 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.157354116 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.157443047 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.157444954 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.157469034 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.157526016 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.157548904 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.157685041 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.157733917 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.157747984 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.158441067 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.158463001 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.158503056 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.158514023 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.158545971 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.158555031 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.158564091 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.158847094 CEST	443	49782	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.158961058 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.160440922 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.160516977 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.160578012 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.160590887 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.160671949 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.160733938 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.160746098 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.163358927 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.163369894 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.164143085 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.164227962 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.164239883 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.164320946 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.164375067 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.164386034 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.164514065 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.166387081 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.166399002 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.169989109 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.170082092 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.170135975 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.170147896 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.170228004 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.170283079 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.170295000 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.170342922 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.170352936 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.175201893 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.175292969 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.175304890 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.175441027 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.175493002 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.175507069 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.181190014 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.181382895 CEST	49782	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.181988955 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.182001114 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.182060003 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.185780048 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.186005116 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.186068058 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.186080933 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.186161995 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.186239004 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.186290979 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.186302900 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.186412096 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.187297106 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.187475920 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.187522888 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.187536001 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.187630892 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.187690973 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.187702894 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.190285921 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.190329075 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.190355062 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.190361023 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.190390110 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.190398932 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.190466881 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.190514088 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.190526962 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.190574884 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.190584898 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.190638065 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.190663099 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.190692902 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.190694094 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.190726042 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.190733910 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.190737963 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.190742016 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.190762997 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.190788984 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.190874100 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.191147089 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.191184044 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.191215038 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.191220045 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.191242933 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.191267014 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.191621065 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.191663980 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.191679955 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.191689014 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.191704988 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.191726923 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.198288918 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.198488951 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.198549032 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.198564053 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.198643923 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.198693037 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.198720932 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.202809095 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.202888966 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.202939987 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.202955008 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.203037024 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.203095913 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.203107119 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.203152895 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.203164101 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.206964016 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.207047939 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.207047939 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.207071066 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.207120895 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.207145929 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.207288027 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.207365990 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.207437992 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.207452059 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.207571983 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.210015059 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.210338116 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.211251974 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.211419106 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.211469889 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.211492062 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.211513996 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.211565018 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.211596012 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.217770100 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.217787981 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.217844963 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.218276024 CEST	49787	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.218290091 CEST	443	49787	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.226356983 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.226402998 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.226432085 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.226438999 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.226453066 CEST	443	49791	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.226475954 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.226499081 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.226919889 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.226959944 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.226972103 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.226986885 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.227009058 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.227016926 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.227243900 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.227283001 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.227303028 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.227309942 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.227324963 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.227338076 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.227350950 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.227528095 CEST	443	49786	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.227576971 CEST	49786	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.228560925 CEST	443	49789	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.229089975 CEST	443	49790	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.229657888 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.229815960 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.229906082 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.229964972 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.229979992 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.230035067 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.230045080 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.230139017 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.230221987 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.230333090 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.230413914 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.230454922 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.230469942 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.231142998 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.231153965 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.232222080 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.232302904 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.232358932 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.232372999 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.232466936 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.232505083 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.232517004 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.232577085 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.232587099 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.238540888 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.238624096 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.238689899 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.238703966 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.238785982 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.238846064 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.238857031 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.238899946 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.238910913 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.245985985 CEST	49790	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.245999098 CEST	443	49790	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.246104002 CEST	53	49794	1.1.1.1	192.168.2.4
Oct 1, 2024 20:33:36.246201992 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.246283054 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.246339083 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.246355057 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.246449947 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.246460915 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.246500015 CEST	49789	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.246507883 CEST	443	49789	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.246555090 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.246603012 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.246614933 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.246675968 CEST	49791	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.246690989 CEST	443	49791	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.246903896 CEST	443	49789	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.247961044 CEST	443	49791	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.248006105 CEST	443	49790	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.248039007 CEST	49791	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.248083115 CEST	49790	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.248675108 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.248739958 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.248753071 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.248863935 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.248919964 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.248930931 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.249044895 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.249099016 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.249110937 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.252666950 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.252748013 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.252813101 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.252825975 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.252903938 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.252957106 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.252968073 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.253015995 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.253026962 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.259237051 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.259326935 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.259332895 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.259351015 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.259438038 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.259449959 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.259563923 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.263343096 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.263355970 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.263372898 CEST	443	49795	35.190.8.230	192.168.2.4
Oct 1, 2024 20:33:36.264110088 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.264228106 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.264286995 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.264316082 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.264359951 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.264369965 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.274368048 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.274512053 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.274580956 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.274595976 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.274693012 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.274744987 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.274756908 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.274813890 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.274823904 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.274900913 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.274952888 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.274965048 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.275635958 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.275738955 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.275791883 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.275805950 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.275887012 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.275935888 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.275947094 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.276016951 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.276027918 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.279059887 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.279128075 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.279140949 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.279165030 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.279213905 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.279244900 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.286799908 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.286884069 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.286973953 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.286982059 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.287005901 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.287062883 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.287087917 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.287242889 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.287295103 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.287309885 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.290704966 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.291333914 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.291513920 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.291569948 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.291582108 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.291676044 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.291728973 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.291739941 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.295283079 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.295363903 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.295427084 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.295439959 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.295521021 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.295577049 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.295588017 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.295634985 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.295644999 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.297077894 CEST	443	49788	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.297112942 CEST	443	49788	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.297138929 CEST	49788	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.297149897 CEST	443	49788	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.297240973 CEST	443	49788	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.297290087 CEST	49788	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.299869061 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.299947977 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.299999952 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.300014019 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.300096989 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.300146103 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.300157070 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.300211906 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.300221920 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.337611914 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.337738037 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.337807894 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.337831020 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.337915897 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.337973118 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.337984085 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.338042974 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.338053942 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.338175058 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.338267088 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.338341951 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.338351011 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.338382959 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.338432074 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.338459015 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.338601112 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.338648081 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.338660002 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.338694096 CEST	49794	53	192.168.2.4	1.1.1.1
Oct 1, 2024 20:33:36.338716984 CEST	49795	443	192.168.2.4	35.190.8.230
Oct 1, 2024 20:33:36.338718891 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.338723898 CEST	49789	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.338730097 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.338809013 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.338857889 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.338870049 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.338974953 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.339037895 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.339049101 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.339148998 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.339198112 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.339209080 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.339291096 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.339371920 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.339458942 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.339462996 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.339484930 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.339531898 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.339557886 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.339607000 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.339634895 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.339775085 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.339818954 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.339832067 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.339936972 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.339984894 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.339998960 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.340078115 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.340158939 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.340208054 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.340221882 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.340301991 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.340349913 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.340363026 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.340405941 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.340415955 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.347793102 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.347892046 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.347956896 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.347973108 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.348056078 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.348120928 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.348133087 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.348172903 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.348182917 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.348273039 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.348326921 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.348359108 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.348438025 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.348496914 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.348509073 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.348587036 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.349728107 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.349740028 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.352438927 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.352535963 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.352595091 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.352611065 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.352691889 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.352740049 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.352751970 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.352809906 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.352818966 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.362411022 CEST	443	49797	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.362934113 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.363003016 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.363017082 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.363111973 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.363177061 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.363189936 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.363265991 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.363320112 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.363332033 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.363565922 CEST	443	49798	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.363651991 CEST	49790	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.363804102 CEST	443	49790	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.364207029 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.364264011 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.364275932 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.364296913 CEST	443	49801	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.364361048 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.364456892 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.364511967 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.364525080 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.367331982 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.367345095 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.367837906 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.367896080 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.367925882 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.367942095 CEST	49791	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.368005037 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.368041039 CEST	443	49791	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.368093967 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.368103027 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.368124962 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.368175030 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.368200064 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.368721008 CEST	443	49802	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.371594906 CEST	49789	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.371741056 CEST	443	49789	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.378626108 CEST	49794	53	192.168.2.4	1.1.1.1
Oct 1, 2024 20:33:36.379714012 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.379785061 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.379797935 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.379875898 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.379930973 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.379956007 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.379976034 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.380115986 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.380166054 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.380177975 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.380224943 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.380235910 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.380357027 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.380424023 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.380434036 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.380453110 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.380502939 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.383790016 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.383964062 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.384021044 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.384032965 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.384097099 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.384151936 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.384162903 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.384206057 CEST	53	49794	1.1.1.1	192.168.2.4
Oct 1, 2024 20:33:36.384237051 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.384288073 CEST	49794	53	192.168.2.4	1.1.1.1
Oct 1, 2024 20:33:36.384301901 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.384314060 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.384831905 CEST	443	49804	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.388242960 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.388338089 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.388396025 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.388410091 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.388489962 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.388541937 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.388554096 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.388601065 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.396953106 CEST	443	49803	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.407310009 CEST	49801	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.407632113 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.407804966 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.407876015 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.407885075 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.407907963 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.407963991 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.407988071 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.408112049 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.408183098 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.408229113 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.408241987 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.408304930 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.408359051 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.408370018 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.408421993 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.408432007 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.409245968 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.409296989 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.409310102 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.409388065 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.409447908 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.409459114 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.409560919 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.409631968 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.409682035 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.409693003 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.411329031 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.415509939 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.415656090 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.415721893 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.415735006 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.415816069 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.415870905 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.415883064 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.424582005 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.424664974 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.424730062 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.424745083 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.424824953 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.424881935 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.424892902 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.424958944 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.424968004 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.425569057 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.425767899 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.425820112 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.425832987 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.425913095 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.425965071 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.425991058 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.426035881 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.426047087 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.436064959 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.436163902 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.436227083 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.436240911 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.436316967 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.436372995 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.436384916 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.436436892 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.436446905 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.436553955 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.436608076 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.436620951 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.436698914 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.436749935 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.436760902 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.436836958 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.439338923 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.439351082 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.451618910 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.451697111 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.451772928 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.451793909 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.451817036 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.451870918 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.451893091 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.451937914 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.451972961 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.452137947 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.452195883 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.452213049 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.452323914 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.452383041 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.452394009 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.452476978 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.452609062 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.452663898 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.452677011 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.452776909 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.452832937 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.452843904 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.452908039 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.452919006 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.452982903 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.453037977 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.453048944 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.455990076 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.456068993 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.456131935 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.456145048 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.456226110 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.456279039 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.456290007 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.456341028 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.456351042 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.462801933 CEST	49790	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.462816000 CEST	443	49790	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.466089010 CEST	49791	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.466104984 CEST	443	49791	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.468059063 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.468142986 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.468210936 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.468224049 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.468331099 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.468386889 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.468398094 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.468457937 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.468470097 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.468553066 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.468605042 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.468616009 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.468739033 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.468787909 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.468800068 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.468892097 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.469645977 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.469656944 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.472341061 CEST	49789	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.472426891 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.472524881 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.472588062 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.472600937 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.472691059 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.472738028 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.472748995 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.472801924 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.472811937 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.476887941 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.476975918 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.477042913 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.477051973 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.477073908 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.477128029 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.477174044 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.477226973 CEST	49783	443	192.168.2.4	216.58.206.78
Oct 1, 2024 20:33:36.477258921 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.486547947 CEST	49803	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.486552954 CEST	443	49803	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.486666918 CEST	49804	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.486675978 CEST	443	49804	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.487644911 CEST	443	49803	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.487653971 CEST	443	49803	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.487721920 CEST	49803	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.487778902 CEST	443	49804	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.487793922 CEST	443	49804	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.487838030 CEST	49804	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.489669085 CEST	49802	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.489681005 CEST	443	49802	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.489823103 CEST	49801	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.489826918 CEST	443	49801	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.489945889 CEST	49798	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.489993095 CEST	443	49798	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.490041018 CEST	49797	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.490056992 CEST	443	49797	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.490587950 CEST	443	49798	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.490719080 CEST	443	49802	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.490731001 CEST	443	49802	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.490766048 CEST	49802	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.490813017 CEST	443	49801	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.490869045 CEST	49801	443	192.168.2.4	72.32.67.24
Oct 1, 2024 20:33:36.491375923 CEST	443	49797	72.32.67.24	192.168.2.4
Oct 1, 2024 20:33:36.496133089 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.496256113 CEST	443	49783	216.58.206.78	192.168.2.4
Oct 1, 2024 20:33:36.496324062 CEST	49783	443	192.168.2.4	216.58.206.78

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 1, 2024 20:33:28.232912064 CEST	192.168.2.4	1.1.1.1	0x6dc9	Standard query (0)	quinnemanuel.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:28.233037949 CEST	192.168.2.4	1.1.1.1	0x8860	Standard query (0)	quinnemanuel.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:28.944782019 CEST	192.168.2.4	1.1.1.1	0xde60	Standard query (0)	www.quinnemanuel.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:28.944933891 CEST	192.168.2.4	1.1.1.1	0xfbfc	Standard query (0)	www.quinnemanuel.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:30.644810915 CEST	192.168.2.4	1.1.1.1	0xb044	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:30.644993067 CEST	192.168.2.4	1.1.1.1	0x39f8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:30.966530085 CEST	192.168.2.4	1.1.1.1	0x82d6	Standard query (0)	www.quinnemanuel.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:30.967021942 CEST	192.168.2.4	1.1.1.1	0x6629	Standard query (0)	www.quinnemanuel.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:31.480355024 CEST	192.168.2.4	1.1.1.1	0x84a9	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:31.480766058 CEST	192.168.2.4	1.1.1.1	0xb9a0	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 1, 2024 20:33:31.990951061 CEST	192.168.2.4	1.1.1.1	0x4b6f	Standard query (0)	static.srcspot.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:31.991297007 CEST	192.168.2.4	1.1.1.1	0xfe37	Standard query (0)	static.srcspot.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:31.992656946 CEST	192.168.2.4	1.1.1.1	0x2858	Standard query (0)	img.youtube.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:31.993037939 CEST	192.168.2.4	1.1.1.1	0xdeca	Standard query (0)	img.youtube.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:32.000555992 CEST	192.168.2.4	1.1.1.1	0x4f2f	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.005455017 CEST	192.168.2.4	1.1.1.1	0xccfe	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:34.589788914 CEST	192.168.2.4	1.1.1.1	0x39ae	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.590457916 CEST	192.168.2.4	1.1.1.1	0x284	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:35.691123962 CEST	192.168.2.4	1.1.1.1	0xba5d	Standard query (0)	cdn.mouseflow.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.691287994 CEST	192.168.2.4	1.1.1.1	0xf77e	Standard query (0)	cdn.mouseflow.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:35.784199953 CEST	192.168.2.4	1.1.1.1	0x57e	Standard query (0)	static.srcspot.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.784445047 CEST	192.168.2.4	1.1.1.1	0xb92d	Standard query (0)	static.srcspot.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:35.786078930 CEST	192.168.2.4	1.1.1.1	0xadaf	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.786263943 CEST	192.168.2.4	1.1.1.1	0x99cf	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 1, 2024 20:33:35.831449032 CEST	192.168.2.4	1.1.1.1	0xf622	Standard query (0)	img.youtube.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.831540108 CEST	192.168.2.4	1.1.1.1	0xd5d9	Standard query (0)	img.youtube.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:36.761315107 CEST	192.168.2.4	1.1.1.1	0xde2	Standard query (0)	acsbapp.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:36.761450052 CEST	192.168.2.4	1.1.1.1	0xa94a	Standard query (0)	acsbapp.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:37.545300007 CEST	192.168.2.4	1.1.1.1	0x24e3	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:37.545452118 CEST	192.168.2.4	1.1.1.1	0x21de	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:38.098198891 CEST	192.168.2.4	1.1.1.1	0xa394	Standard query (0)	cdn.acsbapp.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:38.098578930 CEST	192.168.2.4	1.1.1.1	0xd3fe	Standard query (0)	cdn.acsbapp.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:38.630997896 CEST	192.168.2.4	1.1.1.1	0x3d66	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:38.631234884 CEST	192.168.2.4	1.1.1.1	0xbeac	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:38.633548975 CEST	192.168.2.4	1.1.1.1	0xfaad	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:38.634263039 CEST	192.168.2.4	1.1.1.1	0xc910	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 20:33:38.829787970 CEST	192.168.2.4	1.1.1.1	0x89bd	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:38.832885981 CEST	192.168.2.4	1.1.1.1	0x71c3	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:40.707292080 CEST	192.168.2.4	1.1.1.1	0x5770	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:40.707890987 CEST	192.168.2.4	1.1.1.1	0xadc0	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:42.426511049 CEST	192.168.2.4	1.1.1.1	0x96c2	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.427028894 CEST	192.168.2.4	1.1.1.1	0xec48	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 20:33:42.429008007 CEST	192.168.2.4	1.1.1.1	0x439c	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.429284096 CEST	192.168.2.4	1.1.1.1	0xff30	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:42.438080072 CEST	192.168.2.4	1.1.1.1	0xd0ce	Standard query (0)	cdn.mouseflow.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.438875914 CEST	192.168.2.4	1.1.1.1	0x57be	Standard query (0)	cdn.mouseflow.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:42.439732075 CEST	192.168.2.4	1.1.1.1	0xd721	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.440176964 CEST	192.168.2.4	1.1.1.1	0x2834	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 20:33:48.642868996 CEST	192.168.2.4	1.1.1.1	0xe3e5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:48.643162012 CEST	192.168.2.4	1.1.1.1	0x372b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:48.671454906 CEST	192.168.2.4	1.1.1.1	0x3070	Standard query (0)	acsbapp.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:48.671607018 CEST	192.168.2.4	1.1.1.1	0xe4d	Standard query (0)	acsbapp.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:48.675090075 CEST	192.168.2.4	1.1.1.1	0x5d52	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:48.675726891 CEST	192.168.2.4	1.1.1.1	0x1952	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:48.684322119 CEST	192.168.2.4	1.1.1.1	0x90a5	Standard query (0)	cdn.acsbapp.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:48.684916019 CEST	192.168.2.4	1.1.1.1	0x2acd	Standard query (0)	cdn.acsbapp.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:48.685798883 CEST	192.168.2.4	1.1.1.1	0x97ff	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:48.686381102 CEST	192.168.2.4	1.1.1.1	0x9960	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:51.726780891 CEST	192.168.2.4	1.1.1.1	0x53fb	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:51.726907015 CEST	192.168.2.4	1.1.1.1	0xe4ed	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 20:33:52.363138914 CEST	192.168.2.4	1.1.1.1	0x87d1	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:52.363382101 CEST	192.168.2.4	1.1.1.1	0xa89	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 1, 2024 20:33:52.861048937 CEST	192.168.2.4	1.1.1.1	0x22a2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:52.861048937 CEST	192.168.2.4	1.1.1.1	0xc148	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 20:34:07.356564045 CEST	192.168.2.4	1.1.1.1	0x8edb	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.356714010 CEST	192.168.2.4	1.1.1.1	0x61ce	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 1, 2024 20:34:08.780316114 CEST	192.168.2.4	1.1.1.1	0xd901	Standard query (0)	pi.pardot.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:08.780447960 CEST	192.168.2.4	1.1.1.1	0x94b9	Standard query (0)	pi.pardot.com	65	IN (0x0001)	false
Oct 1, 2024 20:34:10.639472008 CEST	192.168.2.4	1.1.1.1	0xeefc	Standard query (0)	news.quinnemanuel.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:10.640121937 CEST	192.168.2.4	1.1.1.1	0x128c	Standard query (0)	news.quinnemanuel.com	65	IN (0x0001)	false
Oct 1, 2024 20:34:12.803088903 CEST	192.168.2.4	1.1.1.1	0x3810	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:12.803529024 CEST	192.168.2.4	1.1.1.1	0x237	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 1, 2024 20:34:12.803980112 CEST	192.168.2.4	1.1.1.1	0x58aa	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:12.804261923 CEST	192.168.2.4	1.1.1.1	0x88c2	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 20:34:21.414726973 CEST	192.168.2.4	1.1.1.1	0x6835	Standard query (0)	pi.pardot.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:21.414895058 CEST	192.168.2.4	1.1.1.1	0xbb5a	Standard query (0)	pi.pardot.com	65	IN (0x0001)	false
Oct 1, 2024 20:34:26.979378939 CEST	192.168.2.4	1.1.1.1	0xca4d	Standard query (0)	news.quinnemanuel.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:26.979648113 CEST	192.168.2.4	1.1.1.1	0x458b	Standard query (0)	news.quinnemanuel.com	65	IN (0x0001)	false
Oct 1, 2024 20:34:41.814316988 CEST	192.168.2.4	1.1.1.1	0xf9e8	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:41.814829111 CEST	192.168.2.4	1.1.1.1	0xc595	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 1, 2024 20:34:46.232650995 CEST	192.168.2.4	1.1.1.1	0x4159	Standard query (0)	cdn.mouseflow.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:46.235812902 CEST	192.168.2.4	1.1.1.1	0x8960	Standard query (0)	cdn.mouseflow.com	65	IN (0x0001)	false
Oct 1, 2024 20:35:04.471472979 CEST	192.168.2.4	1.1.1.1	0x6388	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:35:04.471638918 CEST	192.168.2.4	1.1.1.1	0xe926	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 1, 2024 20:33:28.246861935 CEST	1.1.1.1	192.168.2.4	0x6dc9	No error (0)	quinnemanuel.com		72.32.67.24	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:28.954567909 CEST	1.1.1.1	192.168.2.4	0xde60	No error (0)	www.quinnemanuel.com		72.32.67.24	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:30.652311087 CEST	1.1.1.1	192.168.2.4	0xb044	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:30.652652025 CEST	1.1.1.1	192.168.2.4	0x39f8	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 20:33:30.976227045 CEST	1.1.1.1	192.168.2.4	0x82d6	No error (0)	www.quinnemanuel.com		72.32.67.24	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:31.487418890 CEST	1.1.1.1	192.168.2.4	0x84a9	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:31.487418890 CEST	1.1.1.1	192.168.2.4	0x84a9	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:31.487418890 CEST	1.1.1.1	192.168.2.4	0x84a9	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:31.487418890 CEST	1.1.1.1	192.168.2.4	0x84a9	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:31.487418890 CEST	1.1.1.1	192.168.2.4	0x84a9	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:31.487997055 CEST	1.1.1.1	192.168.2.4	0xb9a0	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:31.999198914 CEST	1.1.1.1	192.168.2.4	0x4b6f	No error (0)	static.srcspot.com		35.190.8.230	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	img.youtube.com	ytimg.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.000004053 CEST	1.1.1.1	192.168.2.4	0x2858	No error (0)	ytimg.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.002474070 CEST	1.1.1.1	192.168.2.4	0xdeca	No error (0)	img.youtube.com	ytimg.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.009197950 CEST	1.1.1.1	192.168.2.4	0x4f2f	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:32.012691975 CEST	1.1.1.1	192.168.2.4	0xccfe	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:32.012691975 CEST	1.1.1.1	192.168.2.4	0xccfe	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:34.596908092 CEST	1.1.1.1	192.168.2.4	0x39ae	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.699229002 CEST	1.1.1.1	192.168.2.4	0xba5d	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:35.700115919 CEST	1.1.1.1	192.168.2.4	0xf77e	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:35.791261911 CEST	1.1.1.1	192.168.2.4	0x57e	No error (0)	static.srcspot.com		35.190.8.230	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.793266058 CEST	1.1.1.1	192.168.2.4	0x99cf	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	img.youtube.com	ytimg.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838381052 CEST	1.1.1.1	192.168.2.4	0xf622	No error (0)	ytimg.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:35.838942051 CEST	1.1.1.1	192.168.2.4	0xd5d9	No error (0)	img.youtube.com	ytimg.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:36.246104002 CEST	1.1.1.1	192.168.2.4	0x3df9	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:36.769282103 CEST	1.1.1.1	192.168.2.4	0xde2	No error (0)	acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:36.769282103 CEST	1.1.1.1	192.168.2.4	0xde2	No error (0)	acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:36.769282103 CEST	1.1.1.1	192.168.2.4	0xde2	No error (0)	acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:36.772041082 CEST	1.1.1.1	192.168.2.4	0xa94a	No error (0)	acsbapp.com			65	IN (0x0001)	false
Oct 1, 2024 20:33:37.552675962 CEST	1.1.1.1	192.168.2.4	0x21de	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:37.552932978 CEST	1.1.1.1	192.168.2.4	0x24e3	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:38.109635115 CEST	1.1.1.1	192.168.2.4	0xd3fe	No error (0)	cdn.acsbapp.com			65	IN (0x0001)	false
Oct 1, 2024 20:33:38.110392094 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	cdn.acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:38.110392094 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	cdn.acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:38.110392094 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	cdn.acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:38.637849092 CEST	1.1.1.1	192.168.2.4	0xbeac	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:38.639403105 CEST	1.1.1.1	192.168.2.4	0x3d66	No error (0)	analytics.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:38.640218973 CEST	1.1.1.1	192.168.2.4	0xfaad	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:38.640218973 CEST	1.1.1.1	192.168.2.4	0xfaad	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:38.640218973 CEST	1.1.1.1	192.168.2.4	0xfaad	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:38.640218973 CEST	1.1.1.1	192.168.2.4	0xfaad	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:38.837064028 CEST	1.1.1.1	192.168.2.4	0x89bd	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:38.837064028 CEST	1.1.1.1	192.168.2.4	0x89bd	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:38.839788914 CEST	1.1.1.1	192.168.2.4	0x71c3	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:38.839788914 CEST	1.1.1.1	192.168.2.4	0x71c3	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:40.714261055 CEST	1.1.1.1	192.168.2.4	0x5770	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:40.714261055 CEST	1.1.1.1	192.168.2.4	0x5770	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:40.714576960 CEST	1.1.1.1	192.168.2.4	0xadc0	No error (0)	www.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:40.714576960 CEST	1.1.1.1	192.168.2.4	0xadc0	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:41.178699017 CEST	1.1.1.1	192.168.2.4	0x21cf	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:41.178699017 CEST	1.1.1.1	192.168.2.4	0x21cf	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.433521032 CEST	1.1.1.1	192.168.2.4	0x96c2	No error (0)	googleads.g.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.434451103 CEST	1.1.1.1	192.168.2.4	0xec48	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 1, 2024 20:33:42.436189890 CEST	1.1.1.1	192.168.2.4	0xff30	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436189890 CEST	1.1.1.1	192.168.2.4	0xff30	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.436218023 CEST	1.1.1.1	192.168.2.4	0x439c	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.445848942 CEST	1.1.1.1	192.168.2.4	0x57be	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:42.446492910 CEST	1.1.1.1	192.168.2.4	0xd721	No error (0)	static.doubleclick.net		142.250.181.230	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:42.446784973 CEST	1.1.1.1	192.168.2.4	0xd0ce	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:47.553003073 CEST	1.1.1.1	192.168.2.4	0x51a4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:47.553003073 CEST	1.1.1.1	192.168.2.4	0x51a4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:48.873013973 CEST	1.1.1.1	192.168.2.4	0xe3e5	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:48.873039007 CEST	1.1.1.1	192.168.2.4	0x372b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 20:33:48.873330116 CEST	1.1.1.1	192.168.2.4	0x3070	No error (0)	acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:48.873330116 CEST	1.1.1.1	192.168.2.4	0x3070	No error (0)	acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:48.873330116 CEST	1.1.1.1	192.168.2.4	0x3070	No error (0)	acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:48.873343945 CEST	1.1.1.1	192.168.2.4	0x97ff	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:48.873343945 CEST	1.1.1.1	192.168.2.4	0x97ff	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:48.873578072 CEST	1.1.1.1	192.168.2.4	0xe4d	No error (0)	acsbapp.com			65	IN (0x0001)	false
Oct 1, 2024 20:33:48.873590946 CEST	1.1.1.1	192.168.2.4	0x9960	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:48.873590946 CEST	1.1.1.1	192.168.2.4	0x9960	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:48.873601913 CEST	1.1.1.1	192.168.2.4	0x90a5	No error (0)	cdn.acsbapp.com		104.22.0.204	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:48.873601913 CEST	1.1.1.1	192.168.2.4	0x90a5	No error (0)	cdn.acsbapp.com		172.67.11.155	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:48.873601913 CEST	1.1.1.1	192.168.2.4	0x90a5	No error (0)	cdn.acsbapp.com		104.22.1.204	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:48.873733997 CEST	1.1.1.1	192.168.2.4	0x5d52	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:48.873810053 CEST	1.1.1.1	192.168.2.4	0x2acd	No error (0)	cdn.acsbapp.com			65	IN (0x0001)	false
Oct 1, 2024 20:33:48.873822927 CEST	1.1.1.1	192.168.2.4	0x1952	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:33:51.735719919 CEST	1.1.1.1	192.168.2.4	0x53fb	No error (0)	static.doubleclick.net		142.250.185.198	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:52.382170916 CEST	1.1.1.1	192.168.2.4	0x87d1	No error (0)	play.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:52.868304014 CEST	1.1.1.1	192.168.2.4	0x22a2	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:33:52.870016098 CEST	1.1.1.1	192.168.2.4	0xc148	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 20:34:01.614070892 CEST	1.1.1.1	192.168.2.4	0x3139	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:01.614070892 CEST	1.1.1.1	192.168.2.4	0x3139	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:07.377943993 CEST	1.1.1.1	192.168.2.4	0x8edb	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:08.790949106 CEST	1.1.1.1	192.168.2.4	0xd901	No error (0)	pi.pardot.com	pi-ue1.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:08.790949106 CEST	1.1.1.1	192.168.2.4	0xd901	No error (0)	pi-ue1.pardot.com	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:08.790949106 CEST	1.1.1.1	192.168.2.4	0xd901	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		3.92.120.28	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:08.790949106 CEST	1.1.1.1	192.168.2.4	0xd901	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		18.208.125.13	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:08.790949106 CEST	1.1.1.1	192.168.2.4	0xd901	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		3.215.172.219	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:08.790949106 CEST	1.1.1.1	192.168.2.4	0xd901	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		52.54.96.194	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:08.790949106 CEST	1.1.1.1	192.168.2.4	0xd901	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		34.237.219.119	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:08.805669069 CEST	1.1.1.1	192.168.2.4	0x94b9	No error (0)	pi.pardot.com	pi-ue1.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:08.805669069 CEST	1.1.1.1	192.168.2.4	0x94b9	No error (0)	pi-ue1.pardot.com	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:10.842981100 CEST	1.1.1.1	192.168.2.4	0xeefc	No error (0)	news.quinnemanuel.com	go.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:10.842981100 CEST	1.1.1.1	192.168.2.4	0xeefc	No error (0)	go.pardot.com	pi.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:10.842981100 CEST	1.1.1.1	192.168.2.4	0xeefc	No error (0)	pi.pardot.com	pi-ue1.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:10.842981100 CEST	1.1.1.1	192.168.2.4	0xeefc	No error (0)	pi-ue1.pardot.com	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:10.842981100 CEST	1.1.1.1	192.168.2.4	0xeefc	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		3.215.172.219	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:10.842981100 CEST	1.1.1.1	192.168.2.4	0xeefc	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		52.54.96.194	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:10.842981100 CEST	1.1.1.1	192.168.2.4	0xeefc	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		3.92.120.28	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:10.842981100 CEST	1.1.1.1	192.168.2.4	0xeefc	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		18.208.125.13	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:10.842981100 CEST	1.1.1.1	192.168.2.4	0xeefc	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		34.237.219.119	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:10.990264893 CEST	1.1.1.1	192.168.2.4	0x128c	No error (0)	news.quinnemanuel.com	go.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:10.990264893 CEST	1.1.1.1	192.168.2.4	0x128c	No error (0)	go.pardot.com	pi.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:10.990264893 CEST	1.1.1.1	192.168.2.4	0x128c	No error (0)	pi.pardot.com	pi-ue1.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:10.990264893 CEST	1.1.1.1	192.168.2.4	0x128c	No error (0)	pi-ue1.pardot.com	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:12.811539888 CEST	1.1.1.1	192.168.2.4	0x3810	No error (0)	play.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:12.812433004 CEST	1.1.1.1	192.168.2.4	0x88c2	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 1, 2024 20:34:12.812783003 CEST	1.1.1.1	192.168.2.4	0x58aa	No error (0)	googleads.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:21.423402071 CEST	1.1.1.1	192.168.2.4	0x6835	No error (0)	pi.pardot.com	pi-ue1.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:21.423402071 CEST	1.1.1.1	192.168.2.4	0x6835	No error (0)	pi-ue1.pardot.com	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:21.423402071 CEST	1.1.1.1	192.168.2.4	0x6835	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		3.92.120.28	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:21.423402071 CEST	1.1.1.1	192.168.2.4	0x6835	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		34.237.219.119	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:21.423402071 CEST	1.1.1.1	192.168.2.4	0x6835	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		3.215.172.219	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:21.423402071 CEST	1.1.1.1	192.168.2.4	0x6835	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		18.208.125.13	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:21.423402071 CEST	1.1.1.1	192.168.2.4	0x6835	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		52.54.96.194	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:21.441551924 CEST	1.1.1.1	192.168.2.4	0xbb5a	No error (0)	pi.pardot.com	pi-ue1.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:21.441551924 CEST	1.1.1.1	192.168.2.4	0xbb5a	No error (0)	pi-ue1.pardot.com	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:27.032334089 CEST	1.1.1.1	192.168.2.4	0x458b	No error (0)	news.quinnemanuel.com	go.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:27.032334089 CEST	1.1.1.1	192.168.2.4	0x458b	No error (0)	go.pardot.com	pi.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:27.032334089 CEST	1.1.1.1	192.168.2.4	0x458b	No error (0)	pi.pardot.com	pi-ue1.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:27.032334089 CEST	1.1.1.1	192.168.2.4	0x458b	No error (0)	pi-ue1.pardot.com	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:27.263793945 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	news.quinnemanuel.com	go.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:27.263793945 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	go.pardot.com	pi.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:27.263793945 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	pi.pardot.com	pi-ue1.pardot.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:27.263793945 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	pi-ue1.pardot.com	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:27.263793945 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		18.208.125.13	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:27.263793945 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		3.215.172.219	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:27.263793945 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		52.54.96.194	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:27.263793945 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		34.237.219.119	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:27.263793945 CEST	1.1.1.1	192.168.2.4	0xca4d	No error (0)	pi-ue1-public-lb-f0209c6950285322.elb.us-east-1.amazonaws.com		3.92.120.28	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:29.477577925 CEST	1.1.1.1	192.168.2.4	0x742	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:29.477577925 CEST	1.1.1.1	192.168.2.4	0x742	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:41.821526051 CEST	1.1.1.1	192.168.2.4	0xf9e8	No error (0)	analytics.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:43.290775061 CEST	1.1.1.1	192.168.2.4	0x447d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:43.290775061 CEST	1.1.1.1	192.168.2.4	0x447d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 20:34:46.239761114 CEST	1.1.1.1	192.168.2.4	0x4159	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:34:46.244191885 CEST	1.1.1.1	192.168.2.4	0x8960	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:35:04.478445053 CEST	1.1.1.1	192.168.2.4	0x6388	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:35:04.478445053 CEST	1.1.1.1	192.168.2.4	0x6388	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:35:04.478718996 CEST	1.1.1.1	192.168.2.4	0xe926	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 20:35:04.478718996 CEST	1.1.1.1	192.168.2.4	0xe926	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	72.32.67.24	80	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 20:33:28.253158092 CEST	431	OUT	GET / HTTP/1.1 Host: quinnemanuel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 20:33:28.785603046 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Location: https://www.quinnemanuel.com/ Server: Microsoft-IIS/8.0 X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com h Data Raw: Data Ascii:
Oct 1, 2024 20:33:28.785687923 CEST	774	IN	Data Raw: 74 70 73 3a 2f 2f 73 74 61 74 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 6e 61 6c 79 74 69 63 73 2e 67 Data Ascii: tps://stats.g.doubleclick.net https://www.google-analytics.com https://analytics.google.com https://cdn.linkedin.oribi.io https://cdn.acsbapp.com/ https://acsbapp.com https://accesswidget-log-receiver.acsbapp.com/; font-src 'self' https://font
Oct 1, 2024 20:34:13.805282116 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 1, 2024 20:34:58.918828964 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	72.32.67.24	80	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 20:34:13.326025963 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:29 UTC	663	OUT	GET / HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:29 UTC	2014	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:42 GMT Connection: close Content-Length: 83129
2024-10-01 18:33:29 UTC	14370	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="format-detection" content="telephone=no" /> <meta name="google-site-verific
2024-10-01 18:33:29 UTC	16384	IN	Data Raw: 74 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 22 20 Data Ascii: ts</a></li> </ul> </div> </div> </div> </div> </li> <li class="dropdown"
2024-10-01 18:33:29 UTC	16384	IN	Data Raw: 61 6d 70 3b 62 79 4e 65 77 73 54 79 70 65 3d 31 37 34 38 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 6f 73 74 2d 63 61 74 65 67 6f 72 79 22 3e 41 77 61 72 64 73 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 6f 73 74 2d 74 69 74 6c 65 22 3e 51 75 69 6e 6e 20 45 6d 61 6e 75 65 6c 20 57 69 6e 73 20 43 68 61 6d 62 65 72 73 20 55 53 41 20 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 74 69 67 61 74 69 6f 6e 20 4c 61 77 20 46 69 72 6d 20 6f 66 20 74 68 65 20 59 65 61 72 20 32 30 32 34 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: amp;byNewsType=1748"> <span class="post-category">Awards </span> <span class="post-title">Quinn Emanuel Wins Chambers USA Commercial Litigation Law Firm of the Year 2024</span>
2024-10-01 18:33:29 UTC	16384	IN	Data Raw: 74 69 6f 6e 20 63 6c 61 73 73 3d 22 6e 65 77 2d 68 70 2d 6f 66 66 63 69 65 73 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 6d 62 2d 33 20 70 62 2d 33 20 6d 62 2d 6d 64 2d 35 20 70 62 2d 6d 64 2d 33 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 2e 2e 2f 64 69 73 74 2f 69 6d 67 2f 67 72 61 70 68 69 63 2d 6d 61 70 2e 70 6e 67 3f 76 3d 38 22 20 61 6c 74 3d 22 67 72 61 70 68 69 63 2d 6d 61 70 22 20 77 69 64 74 68 3d 22 39 36 38 22 20 68 65 69 67 68 74 3d 22 34 38 36 22 20 63 6c 61 Data Ascii: tion class="new-hp-offcies"> <div class="container"> <div class="row mb-3 pb-3 mb-md-5 pb-md-3"> <div class="col-12 text-center"><img src="../dist/img/graphic-map.png?v=8" alt="graphic-map" width="968" height="486" cla
2024-10-01 18:33:29 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 73 6c 69 63 6b 2e 24 73 6c 69 64 65 73 2e 67 65 74 28 6e 65 78 74 53 6c 69 64 65 29 29 2e 66 69 6e 64 28 22 73 76 67 22 29 2e 72 65 6d 6f 76 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 74 74 69 65 5f 62 61 6e 6e 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 6e 65 77 61 74 51 65 53 6c 69 64 65 27 29 2e 73 6c 69 63 6b 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 41 72 72 6f 77 73 3a 20 27 23 62 74 6e 53 6c 69 64 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 74 73 3a 20 66 61 6c 73 65 2c 0a Data Ascii: $(slick.$slides.get(nextSlide)).find("svg").remove(); lottie_banner(); }); $('#newatQeSlide').slick({ appendArrows: '#btnSlide', dots: false,
2024-10-01 18:33:30 UTC	3223	IN	Data Raw: 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 70 6f 70 75 70 2d 6d 61 69 6e 2d 73 65 63 74 69 6f 6e 20 2e 72 69 67 68 74 2d 63 6f 6c 20 2e 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 70 6f 70 75 70 2d 6d 61 69 6e 2d 73 65 63 74 69 6f 6e 20 2e 6c 65 66 74 2d 63 6f 6c 20 2e 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d Data Ascii: text-align: center; } .popup-main-section .right-col .heading { display: none; } .popup-main-section .left-col .heading { display: block; padding-bottom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:30 UTC	578	OUT	GET /dist/css/style.css?v=638633792821681415 HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:30 UTC	2108	IN	HTTP/1.1 200 OK Content-Type: text/css Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Tue, 10 Sep 2024 12:21:28 GMT Accept-Ranges: bytes ETag: "a7a4f6f57b3db1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:43 GMT Connection: close Content-Length: 90881
2024-10-01 18:33:30 UTC	14276	IN	Data Raw: 0a 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 0a 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a Data Ascii: /* Slider */.slick-slider{ position: relative; display: block; box-sizing: border-box; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none; user-select: none; -webkit-touch-callout:
2024-10-01 18:33:30 UTC	16384	IN	Data Raw: 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 66 66 66 20 35 30 25 2c 20 23 65 65 65 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 46 46 46 46 46 46 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 45 45 45 45 45 45 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 29 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 3a 31 Data Ascii: gradient(to bottom, #fff 50%, #eee 100%);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#FFFFFFFF', endColorstr='#FFEEEEEE', GradientType=0)}.select2-container--classic .select2-selection--single:focus{border:1
2024-10-01 18:33:30 UTC	16384	IN	Data Raw: 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 09 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 09 7d 0d 0a 09 0d 0a 09 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 6f 6e 44 72 61 67 5f 65 78 70 61 6e 64 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 5f 62 61 72 2c 20 2f 2a 20 61 75 74 6f 2d 65 78 70 61 6e 64 65 64 20 73 63 72 6f 6c 6c 62 61 72 20 2a 2f 0d 0a 09 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 6f 6e 44 Data Ascii: 2s ease-in-out;transition: opacity .2s ease-in-out, background-color .2s ease-in-out;}.mCSB_scrollTools_vertical.mCSB_scrollTools_onDrag_expand .mCSB_dragger_bar, /* auto-expanded scrollbar */.mCSB_scrollTools_vertical.mCSB_scrollTools_onD
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 6f 6e 44 72 61 67 5f 65 78 70 61 6e 64 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 43 6f 6e 74 61 69 6e 65 72 3a 68 6f 76 65 72 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 52 61 69 6c 2c 20 0d 0a 09 2e 6d 43 53 2d 72 6f 75 6e 64 65 64 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 6f 6e 44 72 61 67 5f 65 78 70 61 6e 64 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 5f 6f 6e 44 72 61 67 5f 65 78 70 61 6e 64 65 64 20 2b 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 52 61 69 6c 2c 20 0d 0a 09 2e 6d 43 53 2d 72 6f 75 6e 64 65 64 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c Data Ascii: l.mCSB_scrollTools_onDrag_expand .mCSB_draggerContainer:hover .mCSB_draggerRail, .mCS-rounded-dark.mCSB_scrollTools_vertical.mCSB_scrollTools_onDrag_expand .mCSB_dragger.mCSB_dragger_onDrag_expanded + .mCSB_draggerRail, .mCS-rounded-dark.mCSB_scroll
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 0a 09 09 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 7d 0d 0a 09 0d 0a 09 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 52 61 69 6c 2c 20 0d 0a 09 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 52 61 69 6c 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 7d 0d 0a 09 0d 0a 09 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 2c 20 0d 0a 09 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c Data Ascii: right: auto;}.mCS-minimal.mCSB_scrollTools .mCSB_draggerRail, .mCS-minimal-dark.mCSB_scrollTools .mCSB_draggerRail{ background-color: transparent; }.mCS-minimal.mCSB_scrollTools_vertical .mCSB_dragger, .mCS-minimal-dark.mCSB_scroll
2024-10-01 18:33:31 UTC	11069	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 72 61 6e 67 65 2e 74 6f 64 61 79 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 72 61 6e 67 65 2e 74 6f 64 61 79 2e 64 69 73 61 62 6c 65 64 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 72 61 6e 67 65 2e 74 6f 64 61 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 72 61 6e 67 65 2e 74 6f 64 61 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 33 Data Ascii: -webkit-border-radius:0;-moz-border-radius:0;border-radius:0}.datepicker table tr td.range.today,.datepicker table tr td.range.today.disabled,.datepicker table tr td.range.today.disabled:hover,.datepicker table tr td.range.today:hover{background-color:#f3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:30 UTC	576	OUT	GET /dist/css/app.css?v=638633792821681415 HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:30 UTC	2109	IN	HTTP/1.1 200 OK Content-Type: text/css Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Tue, 10 Sep 2024 12:21:27 GMT Accept-Ranges: bytes ETag: "3d6adcf57b3db1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:43 GMT Connection: close Content-Length: 544945
2024-10-01 18:33:30 UTC	14275	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 61 74 6f 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 4c 61 74 6f 2d 42 6c 61 63 6b 2e 65 6f 74 22 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 4c 61 74 6f 2d 42 6c 61 63 6b 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 4c 61 74 6f 2d 42 6c 61 63 6b 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 4c 61 74 6f 2d 42 6c 61 63 6b 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 22 2e 2e 2f Data Ascii: @font-face { font-family: 'Lato'; src: url("../fonts/Lato-Black.eot"); src: url("../fonts/Lato-Black.eot?#iefix") format("embedded-opentype"), url("../fonts/Lato-Black.woff2") format("woff2"), url("../fonts/Lato-Black.woff") format("woff"), url("../
2024-10-01 18:33:30 UTC	16384	IN	Data Raw: 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 38 2e 33 33 33 33 33 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 2e 33 33 33 33 33 25 3b 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 32 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 31 36 2e 36 36 36 36 37 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 37 25 3b 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 33 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 32 35 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 35 25 3b 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 34 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 33 33 2e 33 33 33 33 33 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 25 3b 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 35 20 7b 0a 20 Data Ascii: flex: 0 0 8.33333%; max-width: 8.33333%; } .col-sm-2 { flex: 0 0 16.66667%; max-width: 16.66667%; } .col-sm-3 { flex: 0 0 25%; max-width: 25%; } .col-sm-4 { flex: 0 0 33.33333%; max-width: 33.33333%; } .col-sm-5 {
2024-10-01 18:33:30 UTC	16384	IN	Data Raw: 74 72 6f 6c 2d 72 61 6e 67 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0a 0a 2e 63 6f 6c 2d 66 6f 72 6d 2d 6c 61 62 65 6c 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 63 61 6c 63 28 30 2e 33 37 35 72 65 6d 20 2b 20 31 70 78 29 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 30 2e 33 37 35 72 65 6d 20 2b 20 31 70 78 29 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 20 7d 0a 0a 2e 63 6f 6c 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 6c 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 63 61 6c 63 28 30 2e 35 72 65 Data Ascii: trol-range { display: block; width: 100%; }.col-form-label { padding-top: calc(0.375rem + 1px); padding-bottom: calc(0.375rem + 1px); margin-bottom: 0; font-size: inherit; line-height: 1.5; }.col-form-label-lg { padding-top: calc(0.5re
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 0a 20 20 20 20 2e 73 68 6f 77 20 3e 20 2e 62 74 6e 2d 69 6e 66 6f 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 30 2e 32 72 65 6d 20 72 67 62 61 28 35 38 2c 20 31 37 36 2c 20 31 39 35 2c 20 30 2e 35 29 3b 20 7d 0a 0a 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 31 32 35 32 39 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 63 31 30 37 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 66 66 63 31 30 37 3b 20 7d 0a 20 20 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 63 6f Data Ascii: d):not(.disabled).active:focus, .show > .btn-info.dropdown-toggle:focus { box-shadow: 0 0 0 0.2rem rgba(58, 176, 195, 0.5); }.btn-warning { color: #212529; background-color: #ffc107; border-color: #ffc107; } .btn-warning:hover { co
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 20 23 36 63 37 35 37 64 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 20 7d 0a 0a 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 74 65 78 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 32 35 72 65 6d 20 31 2e 35 72 65 6d 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 31 32 35 32 39 3b 20 7d 0a 0a 2e 62 74 6e 2d 67 72 6f 75 70 2c 0a 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 20 7d 0a 20 20 2e 62 74 6e 2d 67 72 6f 75 70 20 3e 20 2e 62 74 6e 2c 0a 20 20 Data Ascii: #6c757d; white-space: nowrap; }.dropdown-item-text { display: block; padding: 0.25rem 1.5rem; color: #212529; }.btn-group,.btn-group-vertical { position: relative; display: inline-flex; vertical-align: middle; } .btn-group > .btn,
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 6f 6c 6f 72 3a 20 23 34 38 41 38 43 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 72 65 6d 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 30 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 30 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 30 2e 31 35 73 20 65 61 73 65 2d 69 6e Data Ascii: olor: #48A8C0; border: 0; border-radius: 1rem; -webkit-transition: background-color 0.15s ease-in-out, border-color 0.15s ease-in-out, box-shadow 0.15s ease-in-out; transition: background-color 0.15s ease-in-out, border-color 0.15s ease-in
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 72 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 30 2e 37 35 72 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 30 2e 36 32 35 72 65 6d 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 30 3b 20 7d 0a 0a 2e 63 61 72 64 2d 68 65 61 64 65 72 2d 70 69 6c 6c 73 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 30 2e 36 32 35 72 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 30 2e 36 32 35 72 65 6d 3b 20 7d 0a 0a 2e 63 61 72 64 2d 69 6d 67 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 Data Ascii: rem; margin-bottom: -0.75rem; margin-left: -0.625rem; border-bottom: 0; }.card-header-pills { margin-right: -0.625rem; margin-left: -0.625rem; }.card-img-overlay { position: absolute; top: 0; right: 0; bottom: 0; left: 0; padding
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 75 70 2d 69 74 65 6d 20 7b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 20 30 3b 20 7d 0a 20 20 20 20 20 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 78 6c 20 3e 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 20 2b 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 61 63 74 69 76 65 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 20 31 70 78 3b 20 7d 20 7d 0a 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 66 6c 75 73 68 20 7b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 20 7d 0a 20 Data Ascii: up-item { border-top-width: 1px; border-left-width: 0; } .list-group-horizontal-xl > .list-group-item + .list-group-item.active { margin-left: -1px; border-left-width: 1px; } }.list-group-flush { border-radius: 0; }
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 65 20 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 2c 0a 2e 63 61 72 6f 75 73 65 6c 2d 66 61 64 65 20 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 20 7b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 30 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 73 20 30 2e 36 73 3b 20 7d 0a 20 20 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 72 65 64 75 63 65 29 20 7b 0a 20 20 20 20 2e 63 61 72 6f 75 73 65 6c 2d 66 61 64 65 20 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 2c 0a 20 20 20 20 2e 63 61 72 6f 75 73 65 6c 2d 66 61 64 65 20 2e 61 63 74 69 76 65 2e 63 Data Ascii: e .active.carousel-item-left,.carousel-fade .active.carousel-item-right { z-index: 0; opacity: 0; transition: opacity 0s 0.6s; } @media (prefers-reduced-motion: reduce) { .carousel-fade .active.carousel-item-left, .carousel-fade .active.c
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 2d 30 20 7b 0a 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 20 2e 66 6c 65 78 2d 6d 64 2d 73 68 72 69 6e 6b 2d 31 20 7b 0a 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 20 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 73 74 61 72 74 20 7b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 20 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 65 6e 64 20 7b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 20 2e 6a 75 73 74 69 66 79 2d 63 6f 6e Data Ascii: -0 { flex-shrink: 0 !important; } .flex-md-shrink-1 { flex-shrink: 1 !important; } .justify-content-md-start { justify-content: flex-start !important; } .justify-content-md-end { justify-content: flex-end !important; } .justify-con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:30 UTC	571	OUT	GET /css/style-dropdown-rich-text.css HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:30 UTC	2107	IN	HTTP/1.1 200 OK Content-Type: text/css Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Thu, 25 Jun 2020 21:09:38 GMT Accept-Ranges: bytes ETag: "b8bce7ef344bd61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:43 GMT Connection: close Content-Length: 207
2024-10-01 18:33:30 UTC	207	IN	Data Raw: 0d 0a 0d 0a 2f 2a 2a 75 6d 62 5f 6e 61 6d 65 3a 68 31 2a 2f 0d 0a 68 31 20 7b 0d 0a 09 68 31 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 2a 75 6d 62 5f 6e 61 6d 65 3a 68 32 2a 2f 0d 0a 68 32 20 7b 0d 0a 09 68 32 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 2a 75 6d 62 5f 6e 61 6d 65 3a 68 33 2a 2f 0d 0a 68 33 20 7b 0d 0a 09 68 33 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 2a 75 6d 62 5f 6e 61 6d 65 3a 68 34 2a 2f 0d 0a 68 34 20 7b 0d 0a 09 68 34 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 2a 75 6d 62 5f 6e 61 6d 65 3a 68 35 2a 2f 0d 0a 68 35 20 7b 0d 0a 09 68 35 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 2a 75 6d 62 5f 6e 61 6d 65 3a 70 2a 2f 0d 0a 70 20 7b 0d 0a 09 70 3b 0d 0a 7d Data Ascii: /*umb_name:h1/h1 {h1;}/*umb_name:h2/h2 {h2;}/*umb_name:h3/h3 {h3;}/*umb_name:h4/h4 {h4;}/*umb_name:h5/h5 {h5;}/*umb_name:p/p {p;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:30 UTC	560	OUT	GET /dist/js/app.js?v=638633792821681415 HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:30 UTC	2124	IN	HTTP/1.1 200 OK Content-Type: application/javascript Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Wed, 20 Apr 2022 04:29:57 GMT Accept-Ranges: bytes ETag: "c192494a6f54d81:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:43 GMT Connection: close Content-Length: 692060
2024-10-01 18:33:30 UTC	14260	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-10-01 18:33:30 UTC	16384	IN	Data Raw: 74 72 48 61 6e 64 6c 65 3a 7b 7d 2c 66 69 6e 64 3a 7b 7d 2c 72 65 6c 61 74 69 76 65 3a 7b 22 3e 22 3a 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 66 69 72 73 74 3a 21 30 7d 2c 22 20 22 3a 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 7d 2c 22 2b 22 3a 7b 64 69 72 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 66 69 72 73 74 3a 21 30 7d 2c 22 7e 22 3a 7b 64 69 72 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 7d 7d 2c 70 72 65 46 69 6c 74 65 72 3a 7b 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 3d 65 5b 31 5d 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 2c 65 5b 33 5d 3d 28 65 5b 33 5d 7c 7c 65 5b 34 5d 7c 7c 65 5b 35 5d 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 2c 22 Data Ascii: trHandle:{},find:{},relative:{">":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(e){return e[1]=e[1].replace(te,ne),e[3]=(e[3]\|\|e[4]\|\|e[5]\|\|"").replace(te,ne),"
2024-10-01 18:33:30 UTC	16384	IN	Data Raw: 29 7b 6f 5b 30 5d 5b 33 5d 2e 61 64 64 28 6c 28 30 2c 65 2c 6d 28 72 29 3f 72 3a 52 2c 65 2e 6e 6f 74 69 66 79 57 69 74 68 29 29 2c 6f 5b 31 5d 5b 33 5d 2e 61 64 64 28 6c 28 30 2c 65 2c 6d 28 74 29 3f 74 3a 52 29 29 2c 6f 5b 32 5d 5b 33 5d 2e 61 64 64 28 6c 28 30 2c 65 2c 6d 28 6e 29 3f 6e 3a 4d 29 29 7d 29 2e 70 72 6f 6d 69 73 65 28 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 3f 53 2e 65 78 74 65 6e 64 28 65 2c 61 29 3a 61 7d 7d 2c 73 3d 7b 7d 3b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 6f 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 5b 32 5d 2c 72 3d 74 5b 35 5d 3b 61 5b 74 5b 31 5d 5d 3d 6e 2e 61 64 64 2c 72 26 26 6e 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: ){o[0][3].add(l(0,e,m(r)?r:R,e.notifyWith)),o[1][3].add(l(0,e,m(t)?t:R)),o[2][3].add(l(0,e,m(n)?n:M))}).promise()},promise:function(e){return null!=e?S.extend(e,a):a}},s={};return S.each(o,function(e,t){var n=t[2],r=t[5];a[t[1]]=n.add,r&&n.add(function(){
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 72 2e 6e 61 6d 65 73 70 61 63 65 3a 72 2e 6f 72 69 67 54 79 70 65 2c 72 2e 73 65 6c 65 63 74 6f 72 2c 72 2e 68 61 6e 64 6c 65 72 29 2c 74 68 69 73 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 66 6f 72 28 69 20 69 6e 20 65 29 74 68 69 73 2e 6f 66 66 28 69 2c 74 2c 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 72 65 74 75 72 6e 21 31 21 3d 3d 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 28 6e 3d 74 2c 74 3d 76 6f 69 64 20 30 29 2c 21 31 3d 3d 3d 6e 26 26 28 6e 3d 45 65 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 65 2c 6e 2c 74 29 7d 29 7d 7d 29 3b 76 61 72 20 4e 65 3d 2f 3c 73 63 72 69 70 74 7c 3c 73 74 79 6c Data Ascii: r.namespace:r.origType,r.selector,r.handler),this;if("object"==typeof e){for(i in e)this.off(i,t,e[i]);return this}return!1!==t&&"function"!=typeof t\|\|(n=t,t=void 0),!1===n&&(n=Ee),this.each(function(){S.event.remove(this,e,n,t)})}});var Ne=/<script\|<styl
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 74 6f 70 3b 64 65 6c 65 74 65 20 65 2e 73 74 6f 70 2c 74 28 6f 29 7d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 69 26 26 28 6f 3d 65 2c 65 3d 69 2c 69 3d 76 6f 69 64 20 30 29 2c 65 26 26 74 68 69 73 2e 71 75 65 75 65 28 69 7c 7c 22 66 78 22 2c 5b 5d 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 21 30 2c 74 3d 6e 75 6c 6c 21 3d 69 26 26 69 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 2c 6e 3d 53 2e 74 69 6d 65 72 73 2c 72 3d 59 2e 67 65 74 28 74 68 69 73 29 3b 69 66 28 74 29 72 5b 74 5d 26 26 72 5b 74 5d 2e 73 74 6f 70 26 26 61 28 72 5b 74 5d 29 3b 65 6c 73 65 20 66 6f 72 28 74 20 69 6e 20 72 29 72 5b 74 5d 26 26 72 5b 74 5d 2e 73 74 6f 70 26 Data Ascii: tion(e){var t=e.stop;delete e.stop,t(o)};return"string"!=typeof i&&(o=e,e=i,i=void 0),e&&this.queue(i\|\|"fx",[]),this.each(function(){var e=!0,t=null!=i&&i+"queueHooks",n=S.timers,r=Y.get(this);if(t)r[t]&&r[t].stop&&a(r[t]);else for(t in r)r[t]&&r[t].stop&
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 28 61 3d 73 2e 65 72 72 6f 72 29 29 29 3a 28 61 3d 6c 2c 21 65 26 26 6c 7c 7c 28 6c 3d 22 65 72 72 6f 72 22 2c 65 3c 30 26 26 28 65 3d 30 29 29 29 2c 54 2e 73 74 61 74 75 73 3d 65 2c 54 2e 73 74 61 74 75 73 54 65 78 74 3d 28 74 7c 7c 6c 29 2b 22 22 2c 69 3f 78 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 79 2c 5b 6f 2c 6c 2c 54 5d 29 3a 78 2e 72 65 6a 65 63 74 57 69 74 68 28 79 2c 5b 54 2c 6c 2c 61 5d 29 2c 54 2e 73 74 61 74 75 73 43 6f 64 65 28 77 29 2c 77 3d 76 6f 69 64 20 30 2c 67 26 26 6d 2e 74 72 69 67 67 65 72 28 69 3f 22 61 6a 61 78 53 75 63 63 65 73 73 22 3a 22 61 6a 61 78 45 72 72 6f 72 22 2c 5b 54 2c 76 2c 69 3f 6f 3a 61 5d 29 2c 62 2e 66 69 72 65 57 69 74 68 28 79 2c 5b 54 2c 6c 5d 29 2c 67 26 26 28 6d 2e 74 72 69 67 67 65 72 28 22 61 6a 61 78 43 6f Data Ascii: (a=s.error))):(a=l,!e&&l\|\|(l="error",e<0&&(e=0))),T.status=e,T.statusText=(t\|\|l)+"",i?x.resolveWith(y,[o,l,T]):x.rejectWith(y,[T,l,a]),T.statusCode(w),w=void 0,g&&m.trigger(i?"ajaxSuccess":"ajaxError",[T,v,i?o:a]),b.fireWith(y,[T,l]),g&&(m.trigger("ajaxCo
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 3d 3d 3d 6f 7d 29 3b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 74 2c 6f 2c 6e 29 7b 76 61 72 20 69 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 3a 74 2e 73 6c 69 63 65 28 30 2c 4e 28 74 2c 27 6e 61 6d 65 27 2c 6e 29 29 3b 72 65 74 75 72 6e 20 69 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 6e 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e Data Ascii: ,function(e){return e[t]===o});return e.indexOf(n)}function P(t,o,n){var i=void 0===n?t:t.slice(0,N(t,'name',n));return i.forEach(function(t){t['function']&&console.warn('`modifier.function` is deprecated, use `modifier.fn`!');var n=t['function']\|\|t.fn;t.
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 2e 64 65 66 61 75 6c 74 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 Data Ascii: n(t){return t.offsetHeight},triggerTransitionEnd:function(t){o.default(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var i
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 67 65 74 44 69 6d 65 6e 73 69 6f 6e 28 29 3b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 6e 5d 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 5b 6e 5d 2b 22 70 78 22 2c 64 2e 72 65 66 6c 6f 77 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 69 6e 67 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 65 20 73 68 6f 77 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 41 72 72 61 79 2e 6c 65 6e 67 74 68 3b 69 66 28 69 3e 30 29 Data Ascii: efaultPrevented()){var n=this._getDimension();this._element.style[n]=this._element.getBoundingClientRect()[n]+"px",d.reflow(this._element),o.default(this._element).addClass("collapsing").removeClass("collapse show");var i=this._triggerArray.length;if(i>0)
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 74 29 2e 68 61 73 43 6c 61 73 73 28 22 66 61 64 65 22 29 29 7b 76 61 72 20 73 3d 64 2e 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 29 3b 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 29 2e 6f 6e 65 28 64 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 61 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 73 29 7d 65 6c 73 65 20 61 28 29 7d 65 6c 73 65 20 74 26 26 74 28 29 7d 2c 65 2e 5f 61 64 6a 75 73 74 44 69 61 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d Data Ascii: t).hasClass("fade")){var s=d.getTransitionDurationFromElement(this._backdrop);o.default(this._backdrop).one(d.TRANSITION_END,a).emulateTransitionEnd(s)}else a()}else t&&t()},e._adjustDialog=function(){var t=this._element.scrollHeight>document.documentElem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:30 UTC	611	OUT	GET /media/phyidkre/qe-logo.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:30 UTC	2114	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Tue, 09 Jun 2020 11:33:59 GMT Accept-Ranges: bytes ETag: "9bda3fde513ed61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:43 GMT Connection: close Content-Length: 52948
2024-10-01 18:33:30 UTC	14270	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 38 35 70 78 22 20 68 65 69 67 68 74 3d 22 33 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 35 20 33 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 36 31 20 28 38 39 35 38 31 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 20 3c 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="285px" height="34px" viewBox="0 0 285 34" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 61 (89581) - https://sketch.com --> <t
2024-10-01 18:33:30 UTC	16384	IN	Data Raw: 2e 32 32 33 30 33 32 20 31 38 35 2e 35 37 36 31 37 37 2c 36 2e 34 33 37 38 30 38 20 43 31 38 35 2e 34 39 35 34 36 35 2c 36 2e 36 35 32 35 38 34 20 31 38 35 2e 34 35 35 31 30 39 2c 37 2e 32 30 39 33 36 20 31 38 35 2e 34 35 35 31 30 39 2c 38 2e 31 30 38 38 32 20 4c 31 38 35 2e 34 35 35 31 30 39 2c 39 2e 37 39 38 39 38 34 20 4c 31 38 30 2e 38 34 37 30 30 31 2c 39 2e 37 39 38 39 38 34 20 4c 31 38 30 2e 38 34 37 30 30 31 2c 38 2e 37 31 36 38 39 36 20 43 31 38 30 2e 38 34 37 30 30 31 2c 37 2e 34 36 38 35 39 36 20 31 38 30 2e 39 39 30 36 34 31 2c 36 2e 35 30 36 32 30 38 20 31 38 31 2e 32 37 38 36 30 35 2c 35 2e 38 32 39 37 33 32 20 43 31 38 31 2e 35 36 36 35 36 39 2c 35 2e 31 35 33 32 35 36 20 31 38 32 2e 31 34 33 38 36 35 2c 34 2e 35 35 35 34 34 20 31 38 33 2e Data Ascii: .223032 185.576177,6.437808 C185.495465,6.652584 185.455109,7.20936 185.455109,8.10882 L185.455109,9.798984 L180.847001,9.798984 L180.847001,8.716896 C180.847001,7.468596 180.990641,6.506208 181.278605,5.829732 C181.566569,5.153256 182.143865,4.55544 183.
2024-10-01 18:33:31 UTC	16384	IN	Data Raw: 31 39 36 31 36 2c 33 32 2e 30 38 38 38 39 34 39 20 43 31 30 2e 31 39 38 39 38 31 39 2c 33 32 2e 33 35 38 36 39 30 32 20 39 2e 39 37 34 39 35 39 39 37 2c 33 32 2e 35 36 30 32 31 34 32 20 39 2e 37 30 37 33 33 30 37 35 2c 33 32 2e 36 39 35 31 31 31 38 20 43 39 2e 34 34 30 35 35 36 35 38 2c 33 32 2e 38 33 30 38 33 32 20 39 2e 31 33 33 35 39 35 32 37 2c 33 32 2e 38 39 38 32 38 30 39 20 38 2e 37 38 36 34 34 36 38 33 2c 33 32 2e 38 39 38 32 38 30 39 20 43 38 2e 33 39 30 35 36 30 37 39 2c 33 32 2e 38 39 38 32 38 30 39 20 38 2e 30 36 33 30 37 38 33 39 2c 33 32 2e 38 33 33 32 39 39 37 20 37 2e 38 30 32 32 38 39 35 34 2c 33 32 2e 37 30 34 39 38 32 34 20 43 37 2e 35 34 32 33 35 35 37 33 2c 33 32 2e 35 37 36 36 36 35 31 20 37 2e 33 34 39 39 37 30 35 31 2c 33 32 2e 34 Data Ascii: 19616,32.0888949 C10.1989819,32.3586902 9.97495997,32.5602142 9.70733075,32.6951118 C9.44055658,32.830832 9.13359527,32.8982809 8.78644683,32.8982809 C8.39056079,32.8982809 8.06307839,32.8332997 7.80228954,32.7049824 C7.54235573,32.5766651 7.34997051,32.4
2024-10-01 18:33:31 UTC	5910	IN	Data Raw: 35 36 36 35 35 20 31 31 33 2e 34 39 33 37 37 31 2c 32 34 2e 37 35 39 34 32 37 35 20 43 31 31 33 2e 37 35 37 31 32 35 2c 32 34 2e 36 36 32 33 36 37 20 31 31 34 2e 30 33 37 35 38 2c 32 34 2e 36 31 34 36 35 39 33 20 31 31 34 2e 33 33 37 37 30 31 2c 32 34 2e 36 31 34 36 35 39 33 20 43 31 31 34 2e 37 39 37 37 31 35 2c 32 34 2e 36 31 34 36 35 39 33 20 31 31 35 2e 31 39 30 31 38 31 2c 32 34 2e 37 32 32 34 31 32 39 20 31 31 35 2e 35 31 33 33 38 38 2c 32 34 2e 39 33 38 37 34 32 37 20 43 31 31 35 2e 38 33 36 35 39 35 2c 32 35 2e 31 35 35 38 39 35 20 31 31 36 2e 30 33 34 31 31 31 2c 32 35 2e 34 30 36 37 37 31 38 20 31 31 36 2e 31 30 35 30 38 2c 32 35 2e 36 38 39 37 32 37 39 20 43 31 31 36 2e 31 37 36 39 30 34 2c 32 35 2e 39 37 32 36 38 34 20 31 31 36 2e 32 31 33 36 Data Ascii: 56655 113.493771,24.7594275 C113.757125,24.662367 114.03758,24.6146593 114.337701,24.6146593 C114.797715,24.6146593 115.190181,24.7224129 115.513388,24.9387427 C115.836595,25.155895 116.034111,25.4067718 116.10508,25.6897279 C116.176904,25.972684 116.2136

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:30 UTC	599	OUT	GET /dist/img/0.gif HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:30 UTC	2107	IN	HTTP/1.1 200 OK Content-Type: image/gif Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 07 Sep 2020 17:44:40 GMT Accept-Ranges: bytes ETag: "9116e98f3e85d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:43 GMT Connection: close Content-Length: 43
2024-10-01 18:33:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:31 UTC	358	OUT	GET /dist/img/0.gif HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:31 UTC	2107	IN	HTTP/1.1 200 OK Content-Type: image/gif Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 07 Sep 2020 17:44:40 GMT Accept-Ranges: bytes ETag: "9116e98f3e85d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:43 GMT Connection: close Content-Length: 43
2024-10-01 18:33:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	151.101.65.229	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:32 UTC	556	OUT	GET /npm/js-cookie@2/src/js.cookie.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:32 UTC	754	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2120 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 2.2.1 X-JSD-Version-Type: version ETag: W/"848-1opNQZOvBBl4S5FiLrxK9avRBCs" Accept-Ranges: bytes Age: 7290 Date: Tue, 01 Oct 2024 18:33:32 GMT X-Served-By: cache-fra-eddf8230099-FRA, cache-ewr-kewr1740031-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-01 18:33:32 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4d 69 6e 69 66 69 65 64 20 62 79 20 6a 73 44 65 6c 69 76 72 20 75 73 69 6e 67 20 54 65 72 73 65 72 20 76 35 2e 31 39 2e 32 2e 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 20 66 69 6c 65 3a 20 2f 6e 70 6d 2f 6a 73 2d 63 6f 6f 6b 69 65 40 32 2e 32 2e 31 2f 73 72 63 2f 6a 73 2e 63 6f 6f 6b 69 65 2e 6a 73 0a 20 2a 0a 20 2a 20 44 6f 20 4e 4f 54 20 75 73 65 20 53 52 49 20 77 69 74 68 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 66 69 6c 65 73 21 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 73 64 65 6c 69 76 72 2e 63 6f 6d 2f 75 73 69 6e 67 2d 73 72 69 2d 77 69 74 68 2d 64 79 6e 61 6d 69 63 2d 66 69 6c 65 73 0a 20 2a 2f 0a 2f 2a 21 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 Data Ascii: /** * Minified by jsDelivr using Terser v5.19.2. * Original file: /npm/js-cookie@2.2.1/src/js.cookie.js * * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files //! * JavaScript
2024-10-01 18:33:32 UTC	742	IN	Data Raw: 72 20 66 3d 22 22 3b 66 6f 72 28 76 61 72 20 75 20 69 6e 20 69 29 69 5b 75 5d 26 26 28 66 2b 3d 22 3b 20 22 2b 75 2c 21 30 21 3d 3d 69 5b 75 5d 26 26 28 66 2b 3d 22 3d 22 2b 69 5b 75 5d 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 29 29 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 6e 2b 22 3d 22 2b 74 2b 66 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 7b 7d 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3f 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 20 22 29 3a 5b 5d 2c 63 3d 30 3b 63 3c 69 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 69 5b 63 5d 2e Data Ascii: r f="";for(var u in i)i[u]&&(f+="; "+u,!0!==i[u]&&(f+="="+i[u].split(";")[0]));return document.cookie=n+"="+t+f}}function c(e,t){if("undefined"!=typeof document){for(var r={},i=document.cookie?document.cookie.split("; "):[],c=0;c<i.length;c++){var f=i[c].

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:32 UTC	624	OUT	GET /dist/fonts/Lato-Regular.woff2 HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.quinnemanuel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:32 UTC	2124	IN	HTTP/1.1 200 OK Content-Type: application/x-font-woff2 Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Thu, 29 Dec 2022 04:49:56 GMT Accept-Ranges: bytes ETag: "4d180ff401bd91:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:44 GMT Connection: close Content-Length: 29188
2024-10-01 18:33:32 UTC	14260	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 72 04 00 12 00 00 00 01 2f 08 00 00 71 9d 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 2a 1b a8 76 1c 81 6a 06 60 00 87 06 08 2e 09 8d 65 11 0c 0a 83 e1 70 83 c0 6b 0b 84 2a 00 01 36 02 24 03 88 3c 04 20 05 a3 23 07 86 60 0c 4b 5b 19 1b 51 c3 b6 e9 d4 bc db c1 dc 6c f5 ef 1a 05 ca 6d 27 dc 0e 65 b9 c7 de 6c c9 d8 96 35 ec 76 10 4e fe de af 20 fb ff 4f 4a 2a 72 54 9a f9 a4 9d 99 c3 39 1e 32 31 6c 92 89 4a 62 c8 90 bb e0 58 99 c8 55 63 ab 30 6b 57 42 a4 f4 39 92 4e 9a a2 12 95 a8 c4 04 15 33 36 7a 5e 5f 28 9e 8a 77 c8 e8 33 98 ff b0 c2 ac a0 65 8c 55 44 a8 fe bc 46 75 63 c4 b2 30 6e f2 fc 63 86 7d 47 52 b5 ee 7a 74 05 e5 07 93 d8 e1 20 0a 3d 0e 1d 8b dd cc 0f ba e8 26 2a a9 ed 6d Data Ascii: wOF2r/q?FFTMvj`.epk6$< #`K[Qlm'el5vN OJrT921lJbXUc0kWB9N36z^_(w3eUDFuc0nc}GRzt =&m
2024-10-01 18:33:32 UTC	14928	IN	Data Raw: b1 1b 3c ff 3f 99 f4 28 48 40 44 92 35 ac 38 97 3d af f1 ea 87 f4 c0 9d f9 71 59 ce fb 63 44 c1 db 6a fd eb ec a1 59 d9 b4 d9 9c e5 cc 75 d8 23 c5 2b e2 9e 18 37 1d 92 d6 e4 4c 53 eb 8c ec bd a5 99 71 db 0c f5 5b 12 75 9a 59 29 45 06 ee ac 38 99 91 70 b8 c3 ea 4b 05 bb 3c 5c 54 48 d8 62 5e fc 0f 49 c4 8d cf f1 8d e7 95 86 f0 64 d8 2a 46 32 a1 41 28 d5 e1 eb d5 8f 4f 75 9e 52 6d 45 11 cc e6 5d 51 f3 c0 38 94 6b 2c 70 0e e5 3a 67 86 df fd eb ee a9 d1 16 15 b1 74 ea a9 2a 97 6d cf 49 2d 5e 59 11 89 e9 53 ee f4 c1 79 2a 83 79 b6 ce 7a 73 40 89 b0 03 53 4e 57 92 bf 7a 2a 49 e5 c2 71 72 f6 7e 3e 27 b2 24 c9 10 2e 50 fb 0d 46 fc c5 2b 0f 5b 9e b1 01 e5 1a 52 d6 2c 87 19 6c 0a 5a 29 03 d8 50 fb b2 e2 13 37 2b f2 e5 80 06 57 b2 94 59 ad 8c a0 ab f6 dc 73 ac 59 46 Data Ascii: <?(H@D58=qYcDjYu#+7LSq[uY)E8pK<\THb^IdF2A(OuRmE]Q8k,p:gtmI-^YSyyzs@SNWzIqr~>'$.PF+[R,lZ)P7+WYsYF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:32 UTC	622	OUT	GET /dist/fonts/Lato-Black.woff2 HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.quinnemanuel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:32 UTC	2125	IN	HTTP/1.1 200 OK Content-Type: application/x-font-woff2 Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Thu, 29 Dec 2022 04:49:52 GMT Accept-Ranges: bytes ETag: "739a3cfd401bd91:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:44 GMT Connection: close Content-Length: 28284
2024-10-01 18:33:32 UTC	14259	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6e 7c 00 12 00 00 00 01 19 40 00 00 6e 15 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 2a 1b a8 76 1c 81 6a 06 60 00 87 06 08 2e 09 8d 65 11 08 0a 83 b5 5c 83 92 2c 0b 84 2a 00 01 36 02 24 03 88 3c 04 20 05 a3 74 07 86 60 0c 4b 5b 27 04 71 01 77 f6 6c 02 b7 c3 78 88 ae 1d f0 6c 44 04 1b 07 88 80 c9 bc ec 00 b9 b0 71 30 a0 4d dc 9b fd ff 7f da 32 19 a3 dd 0e ea 36 06 8a f9 86 5a 90 43 82 3b 9c 44 a0 85 cd de 62 04 b6 dd 33 cd dc 8f cc 89 9f f3 d3 52 79 9d 50 e0 30 03 bf 1b 9c 9e fc a0 e1 54 4e e5 4c 66 f1 bb 60 a0 63 2f 49 3e a8 44 25 aa 92 fc 16 9e 1a bd ee 07 9a 9b 79 6d 14 3d 58 f7 65 1d b1 64 1d 8e 6e d3 45 cf bc d0 71 d5 68 ec de f0 07 b1 1d b2 6e 65 c5 37 04 1e 04 9b 75 5e Data Ascii: wOF2n\|@n?FFTMvj`.e\,6$< t`K['qwlxlDq0M26ZC;Db3RyP0TNLf`c/I>D%ym=XednEqhne7u^
2024-10-01 18:33:32 UTC	14025	IN	Data Raw: 13 27 da c9 52 f3 d3 61 c6 a1 33 bc 35 cf 93 4d f7 84 d5 74 04 cf d5 27 37 aa 5e ba 24 92 9d 17 ba 3d 34 1c e8 81 20 a2 b5 62 b1 e1 cd 62 88 d3 52 44 02 01 25 0f db d8 2b 1d bc cb a8 26 76 d5 22 ad 73 be 8f 46 3e 72 f6 6f 0f da ab d0 38 3d be 85 eb f4 d9 47 cf cb a6 df 64 e7 75 7a 4f e4 ba 91 ef da 51 51 bf 6c f1 79 84 0d 1b 95 d2 3b ca e6 9e 1f f9 07 16 92 40 db b6 79 fc c0 fc c7 af a7 f9 8e aa 1b 61 a7 f3 8d 2c c6 fe f8 8a d6 c0 28 75 5b a0 a6 02 f0 ac ec 0e 02 18 5c 1d 15 5b c5 1f bb b8 14 be 1d 1c cf c3 63 05 c3 d6 c0 50 b6 fb 7a 63 73 ca 65 91 64 1f e3 22 0b fc ed af 3c 13 5b 95 3a 26 ae ef 08 99 ab aa 14 cf 34 b6 1f 0a c9 2c 39 aa f6 8f f4 96 4d c4 13 0e 8a 74 b1 9b 7a 7a 62 3b 75 fa b8 ce d0 55 dc 26 f7 7f f2 27 f2 36 b1 f4 af b9 f9 fd eb 61 ab ad Data Ascii: 'Ra35Mt'7^$=4 bbRD%+&v"sF>ro8=GduzOQQly;@ya,(u[\[cPzcsed"<[:&4,9Mtzzb;uU&'6a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49752	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:32 UTC	622	OUT	GET /dist/fonts/Lato-Light.woff2 HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.quinnemanuel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:32 UTC	2125	IN	HTTP/1.1 200 OK Content-Type: application/x-font-woff2 Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Thu, 29 Dec 2022 04:49:55 GMT Accept-Ranges: bytes ETag: "fecacafe401bd91:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:44 GMT Connection: close Content-Length: 24880
2024-10-01 18:33:32 UTC	14259	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 61 30 00 12 00 00 00 01 18 40 00 00 60 c7 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 2a 1b a8 76 1c 81 6a 06 60 00 87 06 08 1a 09 82 73 11 0c 0a 83 be 2c 83 9d 60 0b 84 2a 00 01 36 02 24 03 88 3c 04 20 05 a4 00 07 86 60 0c 72 5b 8c 04 91 0a e5 6e b7 88 9f 54 81 14 7a 6e db 84 0b 52 b5 82 16 8c 63 2b b8 1d 61 ed ad 9b 19 b3 11 31 6c 1c b0 27 78 57 cb fe ff ff ff ff ff ff ec a4 22 c3 a5 d9 96 b6 1b 00 87 df 1f f1 aa 42 54 72 c8 44 20 c3 76 84 63 4c ae 44 ce c8 58 04 5f d7 6d 46 9f 07 d2 44 46 87 90 33 6e b4 33 f9 42 15 a2 4e e5 4c f0 64 0e d1 fd e8 98 c8 6e 44 64 ee f6 e1 66 fb b0 7e 0c 37 4f 92 85 bd 78 7d d5 38 1b 59 e0 fa 14 d9 c4 54 7c 15 ec 67 b5 6b 95 09 38 3b 54 30 44 87 Data Ascii: wOF2a0@`?FFTMvj`s,`6$< `r[nTznRc+a1l'xW"BTrD vcLDX_mFDF3n3BNLdnDdf~7Ox}8YT\|gk8;T0D
2024-10-01 18:33:32 UTC	10621	IN	Data Raw: a6 33 1c 05 d7 92 c8 c3 f6 80 83 2a 66 16 c9 79 3e 98 48 db 96 3a 72 71 d7 84 65 97 b0 7a 30 67 d9 ed ce 59 a1 6b 67 8f c8 ba f5 83 1d a9 43 61 6c 5e 45 89 b4 15 8b b3 9e 56 b7 d3 55 0d d8 59 9b 15 3b a7 6a 6c 67 a8 35 1d 0c 75 23 76 ce 6a c3 ce aa 1b 3a e8 e4 97 b5 8a 0f 7a 10 5d f2 ff f5 63 4e c6 fb fb 40 c1 e5 dc d1 aa a2 ad 38 03 29 11 9d 68 46 c8 f8 59 75 81 2a bf 97 a0 83 81 db 22 31 77 23 df 8d 78 ef e6 e9 33 64 04 9a ba 7a 8b 16 b5 62 17 3e 45 0e 6c 63 43 0f ed 9a d7 08 c2 0a 61 bb e7 79 df 02 b9 df bf d6 c6 79 fb 79 b8 d0 83 bb e6 0f 1f de 35 cf bf 17 c0 fe ee b5 96 15 ca db ca 31 a5 d0 b8 51 c6 4c 7e 32 94 dd 90 1f 47 22 e5 c7 f5 42 d9 c9 fc cc 68 23 8d 6b 4a d1 47 7e 23 28 f9 9c 96 f0 80 c1 08 f4 a1 27 8f 50 a8 47 4f 96 d1 e8 f3 bf 3e 44 a1 1e Data Ascii: 3fy>H:rqez0gYkgCal^EVUY;jlg5u#vj:z]cN@8)hFYu"1w#x3dzb>ElcCayyy51QL~2G"Bh#kJG~#('PGO>D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49753	35.190.8.230	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:32 UTC	535	OUT	GET /libs/avril.js HTTP/1.1 Host: static.srcspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:32 UTC	791	IN	HTTP/1.1 200 OK x-goog-generation: 1704277977015252 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 42084 Content-Encoding: gzip x-goog-hash: crc32c=+kYaSA== x-goog-hash: md5=Rl4Q7M5mhKMw9567MTwG1w== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 42084 X-GUploader-UploadID: AD-8ljs6NjUjo81qPd_LJuYSRVkg5vN6gXU8MYg4v1ejXBH5hnb2IKi2GMW-TBEh-y9_CTWimdk Server: UploadServer Date: Tue, 01 Oct 2024 18:24:01 GMT Expires: Tue, 01 Oct 2024 18:39:01 GMT Cache-Control: no-transform, public, max-age=900 Age: 571 Last-Modified: Wed, 03 Jan 2024 10:32:57 GMT ETag: "465e10ecce6684a330f79ebb313c06d7" Content-Type: application/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:32 UTC	599	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 6b 7b e2 4a 92 2d fc 57 7a 3f 33 bd 6d 77 79 a6 74 e5 d2 35 3e 3d dc 6c 40 e2 62 c0 16 a6 c6 73 1e 74 05 84 24 10 52 0a e8 de f3 db 4f 44 a6 04 4a 76 d5 f4 7e bf bc 1f 7a b7 85 a4 bc 44 46 ac 58 2b 32 a1 c8 32 fe d3 ff 15 8e 62 a5 26 08 a2 62 3f 7d bf 33 d4 9d 35 0e fc 85 31 1a 59 77 8f 77 81 e6 88 86 2a 5b b3 3d 5c 90 a9 3f 37 c6 2b fb 7d 21 c0 95 31 39 7f b1 6b be 1b bd c0 45 3a f5 b3 56 10 b5 8c ea 1a 6f 55 82 8a a1 0a 33 63 8c f7 8c d1 57 6b d8 8a de 2c a7 85 57 ca c2 1a 0c fa f6 70 50 a3 57 86 60 4c 94 b6 f1 8a 1d 18 e3 74 6b 28 cf 76 7f ea d7 e1 32 aa f9 e2 26 26 3a 6d 51 1d 42 fb 89 31 59 c2 d5 71 b1 8c ed a9 ff 8e 37 5e c7 6d a3 62 c3 2b d1 01 2e 93 5a 94 05 fa b3 d5 c7 e6 8e 2f f3 f0 39 4e e1 2f f3 b8 b2 f4 96 Data Ascii: k{J-Wz?3mwyt5>=l@bst$RODJv~zDFX+22b&b?}351Yww*[=\?7+}!19kE:VoU3cWk,WpPW`Ltk(v2&&:mQB1Yq7^mb+.Z/9N/
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 2f 11 9a a0 3f d2 60 cc 6f f0 e7 b2 e5 0b ad 56 14 b2 75 30 26 0b eb b5 15 c9 74 5e 5f ed be d0 5e 83 6f e2 f8 6b 7e c5 9d fa e3 03 76 d5 9e fa e9 d6 ae 5a 7d bc 63 54 83 67 63 bc 74 8c 57 ba 42 15 65 60 a8 b5 8e f1 4a e7 a2 2e ac a1 38 da b9 d4 7b dc 8d 6d bc c2 90 a8 d5 2a eb 67 af e5 6b 21 de 59 ea 3b 98 23 1a 80 4e ab da de 9c 6b be 63 a8 b4 89 11 98 be ff 6c 4d 6b 3e a1 37 b7 56 37 f0 2d b0 15 fa 67 96 04 ce 76 ea 4f e8 9d 85 3d cd be 5a ba 4b db 1f bd b8 86 da b7 c1 dd 15 3a ff 9d dd 1f bc 5b 7a 86 c6 69 ad ce 0a 04 a0 3d a0 4f aa ef 56 7f b0 b5 d0 cb e8 e5 fa d5 9c 82 5f 57 e8 7b ea c4 9a d4 60 a1 c6 eb 67 0c a5 56 a4 19 af f4 c6 78 5e 31 94 a1 3d 9e 46 0d 7a a9 9c e0 59 bb 5b f3 55 f4 a5 a9 1f c7 41 b4 37 14 0a 11 6a 10 1a 95 fd 91 85 4a f3 a5 7b Data Ascii: /?`oVu0&t^_^ok~vZ}cTgctWBe`J.8{m*gk!Y;#NkclMk>7V7-gvO=ZK:[zi=OV_W{`gVx^1=FzY[UA7jJ{
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 60 16 d4 fc ac 81 f1 f3 7a 9a 43 f8 01 35 c5 d1 4f 21 0b 57 4f ad 3d 9d bf 0a 7e 24 ec 37 f6 0b 73 ce 33 00 de a2 83 93 dc 04 91 1c 08 0b f6 0e b0 14 c0 96 a5 c6 10 7f e5 3e 63 58 7e 31 46 d4 68 d3 68 02 03 8c 36 2c bb 88 e9 0e 12 df 19 db 5b 12 db 02 f4 5b 43 ca a5 6d ac ec 7e 0a ce d2 c7 89 1c cd 0d b8 4c 88 a4 24 0d 22 6f d3 95 6d 3d 37 f4 76 df 8a 30 ab 27 22 31 31 f2 58 70 4e 90 4f 89 82 a1 a2 d3 ed 92 af 98 4c 86 39 db 1c 01 f7 6c 45 5f 56 14 4e 37 d3 a8 0b cb 9f 51 92 97 41 56 a0 98 44 39 ef 0e 3c f7 7d ea 7f 85 e9 d0 d7 da 60 95 95 3d a9 45 47 16 64 6d 63 dc b7 df 0c ca c4 c6 2d f0 17 d9 7a 0b 68 9a 04 66 ba 33 c6 cf d6 cb 81 21 76 3c cc 20 df 17 04 19 88 0c 98 c3 61 62 a2 dd 02 cb bc 4e 20 a8 a9 ff be d6 9a bb a9 ff 1c a3 e1 40 e0 bc 6d 16 2b 6b Data Ascii: `zC5O!WO=~$7s3>cX~1Fhh6,[[Cm~L$"om=7v0'"11XpNOL9lE_VN7QAVD9<}`=EGdmc-zhf3!v< abN @m+k
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 3f f0 2b 7b c8 a6 f9 0b 8a b9 83 bc 31 cf f3 52 e0 2f 02 6b 92 ab 46 20 11 af 41 d4 5d d1 b2 21 20 90 b2 c7 32 57 95 2a 3e 17 1e 6a 61 8d 07 5f 83 18 34 0f fa 3b 0b 58 73 1a 35 01 dd 02 56 37 03 c3 02 27 3b d1 a2 8c 55 f3 b5 0e d2 79 da c4 36 ee f6 bd 16 e5 b3 80 24 0d 70 20 20 f3 23 1a 27 a0 76 93 af 58 04 cb 0b 40 5b f3 65 67 bd 30 a0 30 5a 86 aa d5 98 9b 1d fb a3 dd aa 95 2f cd 57 7b ba 8a 47 2c a1 20 ff 7e 99 46 63 26 42 27 67 0d ac 14 52 ff 3e d4 fc b6 b5 dc 59 13 bc b0 d2 25 90 c8 05 83 35 60 18 eb a0 97 d8 4c 66 8d 26 36 90 19 cf 4f d1 4b 03 b1 1d 02 27 a0 c4 7f f2 0c 6a ab 8f 00 88 6b bb 9e fa af 99 9e e4 c1 3b 99 d8 d3 a9 9f c2 90 10 80 c0 87 be 3a fb ee 90 36 37 b4 46 31 cd 7e 74 86 95 00 12 f0 d4 cd 81 52 dd c7 e0 be 67 e3 15 47 eb b7 7c 0f d9 Data Ascii: ?+{1R/kF A]! 2W*>ja_4;Xs5V7';Uy6$p #'vX@[eg00Z/W{G, ~Fc&B'gR>Y%5`Lf&6OK'jk;:67F1~tRgG\|
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: df b3 ea 7e b3 e7 04 c1 d4 af 62 08 c8 a0 a0 5a 7e 9e 85 fd 78 61 bd 50 0b 61 36 0b 9d 51 0d 37 61 99 ae 9f ac b0 b2 e1 6c 32 b4 e9 c9 6b 77 68 51 91 e1 e2 3e 04 f1 d0 38 32 d7 f0 d5 a0 0f 28 4e 89 c6 34 9a a5 ab af 6c 55 8d 57 60 e8 ce f9 2b 18 92 be 04 72 24 88 0e bb 0f aa 5c ab b8 fb 1a 9d 88 84 57 90 fe 77 6b 80 81 1e 5b 08 ff c3 9e af ac 21 eb 0a 14 b9 d1 c4 1a 51 35 c7 8b be 07 e4 91 29 a1 89 b3 dd 81 c6 cf a5 02 95 94 7b 9b 5d 4d a6 07 98 f1 cb 3e 67 03 e4 e4 f5 6d 9a 37 23 90 55 10 51 36 13 f2 a3 9d 35 3d d8 48 c1 df 19 5c a2 dc 81 ec dd b2 59 ca 58 e0 13 3a 2b 22 4c e2 ba 31 6a eb c8 a0 01 ba 23 dc b2 84 d0 05 4a be cb e3 42 35 97 c0 01 64 b6 cb 08 82 74 e0 42 ba 18 31 85 b4 b5 a6 83 b4 4a a5 34 50 d2 09 fc af 45 c3 2c 83 0c ba 36 56 2c 28 a8 0b Data Ascii: ~bZ~xaPa6Q7al2kwhQ>82(N4lUW`+r$\Wwk[!Q5){]M>gm7#UQ65=H\YX:+"L1j#JB5dtB1J4PE,6V,(
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 07 41 b4 a2 d8 d2 b6 dd 0f a3 12 0e 18 5a 7e 01 7c f4 41 06 61 34 2f 4e 6b dc cc a3 3e bb b0 de ec 96 c5 78 91 b9 38 22 12 15 a1 fa da 0e 5d b0 5a 9b 6d 2c f8 bd fd 34 72 80 a2 dd 51 06 d7 84 fc b4 f7 98 2f 4e ec 69 cb d7 c0 09 63 f4 52 50 cb c0 1d 67 47 c6 34 de ad b7 7d 1f fd 14 77 92 d2 94 1c 71 31 72 39 33 56 da 58 d4 cf e5 0c f8 8f 00 4b 7e cc 6b 3f 4b 08 de 2a 0b 33 b4 a5 0e 9d 93 23 fa 6a 7b 29 82 30 57 31 ad 47 c0 8b e3 43 9b 6d db d7 c6 c0 8b 57 b4 c4 e9 f4 6d bb df 8a a2 7c f7 e0 75 e4 63 1c 00 5f 2f 0e f4 74 b3 a1 d5 cb d8 8a 56 21 6c 12 4c 06 f4 b4 88 fa a2 83 46 1c 04 74 e3 34 f0 dd f5 61 cb 22 69 1d 44 53 b0 80 18 b0 e8 59 61 d9 e2 1d 70 1e 8f e9 1c 32 15 60 e7 9d 55 66 6d 3c 7f d0 ed 32 e7 7b 06 07 88 66 2b 27 60 59 0a 00 b2 dd 5a c5 cf f6 Data Ascii: AZ~\|Aa4/Nk>x8"]Zm,4rQ/NicRPgG4}wq1r93VXK~k?K*3#j{)0W1GCmWm\|uc_/tV!lLFt4a"iDSYap2`Ufm<2{f+'`YZ
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: b9 b0 58 a7 43 af 6f 42 58 ac 1e b9 cf c9 db 32 3e 13 f8 fc ef bf 3d fe 38 8e 7e f9 e5 fb e7 b7 df 70 c6 0e 17 7b 30 fb cf 47 f7 69 f9 c5 79 f4 9e 7e d8 e6 77 97 86 a7 c7 87 e2 6d c0 7a fb 60 e0 9c 7f 14 b0 eb ab b3 6e c0 ac ab f5 e1 fb dd 62 ee cf 77 21 3c bd 79 64 1f 38 f6 eb fb f1 03 3e 80 01 89 8f b8 4c 74 60 ec 66 6f f6 11 cf b0 ed 4b 43 e0 ab d4 42 77 a1 93 4d 93 65 e2 dc 7d fb 2d 7f 78 39 1b 76 81 4e 7e 3e dd fd d7 51 b5 b2 2f ff 75 94 84 bf e0 9f f7 f8 9f 07 7a f9 f7 d2 ad bb fc bd c9 5b 7b f7 36 c1 f7 be c3 e7 d5 7f c0 7f a4 cf 7f ff 52 ba f8 f6 37 fa c2 6f d0 d7 37 80 82 5d 1c 25 51 72 da c1 ca 42 64 24 9b b7 d3 1b 3f 44 86 4d 30 c2 3f 4d 1c af 73 dc dd f3 03 fc c2 f7 fb f0 e8 63 dc 27 ce 81 7a 36 37 71 2e f2 1e 1e fe f6 6f ff c6 5b 0d 8d f6 f9 Data Ascii: XCoBX2>=8~p{0Giy~wmz`nbw!<yd8>Lt`foKCBwMe}-x9vN~>Q/uz[{6R7o7]%QrBd$?DM0?Msc'z67q.o[
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 5c 97 5b 3f b9 a2 f0 eb 29 cb 1c 7e 4a a6 c5 c5 9b 5c ad 72 f6 55 ea 22 87 0f b2 5b e5 fd 41 50 f9 f6 64 93 9b bf a2 5a 5c 7c c8 b6 cd ad 87 52 a9 70 78 22 d5 15 1e 5f ea 18 ef ff 1d 5d fc c3 95 b9 fb 22 c6 7b 69 7c 0a e6 db d2 7a 29 e8 6f 65 ff 5e d6 6e f0 6c c9 db 1b ed 57 7e 5f 91 79 fc a8 db 7c fc e2 7c 4a 78 2f ab 37 78 83 f8 51 ce 1f b5 0a 1f 0f b6 c4 bd af c8 12 37 5f 45 10 38 3c 53 96 26 9f 1f ab 12 d7 9e 52 ad 71 f7 65 b4 1f 23 0f b9 7d aa 9c ff 4a d5 0a f7 bc 88 f8 5b c2 1f 09 29 5f 29 1e 94 8a c8 ad a7 b2 b4 0b ce 9b c7 ff b2 c8 ff 79 fc d8 37 78 ec 70 fe 2e 8b 26 3f 1e 57 e2 fd cf e4 fd 5d 16 1c 6e be 22 fa 43 69 7c b2 c5 f3 07 49 15 38 ff 10 91 1f 94 f1 1d fd b9 34 5e 19 f1 ac 94 6f 15 59 b8 c9 cf 15 6e be 12 f2 07 0e 2f 15 ce df 14 c4 83 52 Data Ascii: \[?)~J\rU"[APdZ\\|Rpx"_]"{i\|z)oe^nlW~_y\|\|Jx/7xQ7_E8<S&Rqe#}J[)_)y7xp.&?W]n"Ci\|I84^oYn/R
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 74 60 e1 ac cc 63 24 be 50 2f 3a 7c a1 41 34 79 dd a2 60 61 ba 9c 37 10 bf ca ed 2f 79 1d 23 c9 bc b0 96 45 be 50 2f 63 de 29 cf 0f 79 4c f9 79 d4 05 65 7f ad aa 9c bd 15 14 fa e5 bc 2e f0 85 71 05 79 76 b9 d0 ee f2 85 46 11 0b cd 65 a1 8e ba ae 5c 48 16 6f 0a a7 c8 9b ca 42 1c f3 7a d9 ff eb 7c a1 42 44 5e 54 2e 8c 20 cf 28 e7 79 f5 a6 d0 80 3c b5 5c 38 96 6e f2 18 f2 ca b2 bf 22 af 2a cf 57 b1 79 9e 6c f1 f1 2e a3 fd ca ba 19 75 0d 57 e8 ab dc 6c 54 54 6f 36 fa 44 3e 1f a8 36 8f 0f 58 98 e2 0a 17 7c a1 40 42 ff 2a e7 33 2c 14 94 f3 9d c0 17 86 15 e5 a6 30 2d f0 f1 2b dd ea 24 89 e7 4d 32 f2 f2 32 7e a2 ae 2e db cb bc d9 88 b9 d1 91 12 c6 4f 39 de f1 bc 49 c9 5f 14 2c b4 95 75 a6 7c 93 af eb 3c 0f 96 30 1f 97 79 29 e2 55 b9 f0 8f 1b 2d 65 fc c2 c2 61 b9 Data Ascii: t`c$P/:\|A4y`a7/y#EP/c)yLye.qyvFe\HoBz\|BD^T. (y<\8n"Wyl.uWlTTo6D>6X\|@B3,0-+$M22~.O9I_,u\|<0y)U-ea
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 0a d8 a9 70 3d 0d 0e 16 78 61 9f 2a 95 6b b5 96 ad 41 0f bf d1 c4 fc f6 05 6c f2 a8 3f e5 0d 28 35 e9 ea 94 f8 d5 a8 7e fe 39 0a a0 62 63 82 7e 4d f4 ee df ef 1e 1e fe 96 bf 26 a1 de 63 64 80 de 81 d1 ff b5 f3 38 2c 5a 15 1d f9 ea 6b 7a 3e d4 ca 55 21 50 67 cb 7b 92 90 4a e5 00 46 07 fb 38 7e 2a 5e c1 aa 5d ae 8a d9 20 fa 8f c3 87 6b 37 ca f2 72 5c 91 7e 41 54 7c 1c a3 03 17 a6 a9 5f 68 f4 fd 18 de c3 90 1c fe fa eb 7d 31 46 94 c0 f9 61 f3 62 8c 12 6e 3b e4 60 58 1e a3 58 bf 1e 1b a0 63 fc c7 3f 0a 43 54 2e 85 55 ce 7e 72 f5 4a 18 4b f6 bb 78 26 f5 d9 eb 62 fb 39 86 2c c5 a7 f7 47 58 f7 ab 6f 2e 45 4a 9c aa d7 b9 ac 1e 8b 4f c5 cb 69 cb cf fb 6c 1d da 51 f6 f8 f7 df 1e c0 9d 6a 8f 10 28 55 f8 a3 aa 7c e2 9f 15 f8 b3 e2 d0 3f 55 fc 53 a5 7f 2a f8 a7 4d ff Data Ascii: p=xakAl?(5~9bc~M&cd8,Zkz>U!Pg{JF8~^] k7r\~AT\|_h}1Fabn;`XXc?CT.U~rJKx&b9,GXo.EJOilQj(U\|?US*M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49761	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:32 UTC	623	OUT	GET /dist/fonts/Lato-Italic.woff2 HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.quinnemanuel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:32 UTC	2124	IN	HTTP/1.1 200 OK Content-Type: application/x-font-woff2 Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Thu, 29 Dec 2022 04:49:53 GMT Accept-Ranges: bytes ETag: "b6a89fe401bd91:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:44 GMT Connection: close Content-Length: 30300
2024-10-01 18:33:32 UTC	14260	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 76 5c 00 12 00 00 00 01 31 80 00 00 75 f3 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 2a 1b ab 28 1c 81 6a 06 60 00 87 06 08 2e 09 8d 65 11 0c 0a 83 e4 44 83 c2 22 0b 84 2a 00 01 36 02 24 03 88 3c 04 20 05 a3 17 07 86 60 0c 4b 5b f6 1c 51 c3 b6 59 f8 bc db c1 98 9f ae f7 75 67 23 22 d8 38 80 02 c8 4c 14 8c 63 a6 b8 1d 82 48 d2 b9 63 f6 ff 9f 94 9c c8 18 e3 0a db 7f 35 2d ad da 65 38 26 8c ea a8 1c 82 fb f0 ac e0 38 8d 4c 6c 42 2a 94 c2 8e d1 e3 d6 d5 5c a2 12 95 a8 d4 70 d0 2d 66 50 78 9d da 2e 14 0a ef 58 dc a7 3e e8 98 c4 4c f4 60 17 e6 8d 3d 5a 1d 8a d9 6e 4c 78 1d f7 8e c1 c4 a5 f5 3c 5f 11 85 8b 88 96 e8 af e1 bf 5c e2 1b ae a0 a5 0c d1 12 dd cb b4 6c c1 31 5b 1f 88 09 5a Data Ascii: wOF2v\1u?FFTM(j`.eD"6$< `K[QYug#"8LcHc5-e8&8LlB*\p-fPx.X>L`=ZnLx<_\l1[Z
2024-10-01 18:33:32 UTC	16040	IN	Data Raw: 9a 87 b4 66 dc 66 05 fb bc 69 5f ce f7 4f e7 64 5c 87 4b b1 61 51 5d 77 30 aa fe be 63 ac f8 4d 9e fd 7e 40 49 2b ee 75 e3 49 43 67 b0 cf 81 5f fd 6e ba c9 cf f6 5e d4 1f 79 ff 0d 35 be 1d 28 a7 e9 71 45 e1 0c 41 35 4e 25 4e 29 e1 aa 89 f5 12 8d 9e ad 48 9d ec 8b 9f 75 fb 2d e3 c9 5c 31 53 93 2e e4 11 f3 d8 49 fb ee 2f c6 a6 6b 90 ab 55 81 61 0b a1 30 28 9f f7 fb c2 05 b2 70 e6 22 78 fa cc e7 1e 90 9d 3f fc 92 0c 9d ba 3d f2 e7 43 db 41 73 c4 8e df 20 87 7f 78 f6 32 70 83 f9 6b da fc 44 45 72 d7 05 9c b1 77 1e e4 be d7 cd 75 95 c8 13 cc 1e 79 bd ed 45 f5 0e a0 69 f6 bd 54 fe 23 fa d2 fc 57 95 db 7e ec 7f 66 9a 98 cb fd 74 cb f9 1a fc 9d 77 42 dd 73 3f aa 66 57 c5 2b 3b 2b d3 8e 3b 65 b1 df d7 68 99 bf 5b 03 ab ac 59 de d4 96 9b e6 b1 23 8a d7 9f f0 c7 ff Data Ascii: ffi_Od\KaQ]w0cM~@I+uICg_n^y5(qEA5N%N)Hu-\1S.I/kUa0(p"x?=CAs x2pkDErwuyEiT#W~ftwBs?fW+;+;eh[Y#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49762	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:32 UTC	644	OUT	GET /dist/img/subnav-bg.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:32 UTC	2111	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 07 Sep 2020 17:44:40 GMT Accept-Ranges: bytes ETag: "c7fb3f903e85d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:44 GMT Connection: close Content-Length: 23180
2024-10-01 18:33:32 UTC	14273	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0b 07 08 09 08 07 0b 09 09 09 0c 0b 0b 0d 10 1a 11 10 0f 0f 10 20 17 18 13 1a 26 22 28 28 26 22 25 24 2a 30 3d 33 2a 2d 39 2e 24 25 35 48 35 39 3f 41 44 45 44 29 33 4b 50 4a 42 4f 3d 43 44 41 ff db 00 43 01 0b 0c 0c 10 0e 10 1f 11 11 1f 41 2c 25 2c 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 ff c2 00 11 08 04 4b 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1a 00 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 05 03 04 07 ff c4 00 15 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 20 00 28 00 00 45 00 01 40 00 10 00 Data Ascii: JFIFC &"((&"%$0=3-9.$%5H59?ADED)3KPJBO=CDACA,%,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK@ (E@
2024-10-01 18:33:32 UTC	8907	IN	Data Raw: 00 00 00 00 00 3e 30 29 0a 16 00 50 40 00 40 40 28 00 80 14 85 58 00 29 0a 45 00 01 48 00 00 00 f0 a0 05 80 02 80 00 04 50 0d 1a 04 a0 28 89 56 00 00 00 00 00 01 2a c0 14 00 42 8a 00 00 80 00 02 82 80 50 01 0a 00 02 80 40 00 00 02 90 00 02 80 00 00 00 52 52 28 00 01 40 04 50 00 a4 00 28 28 00 a0 80 00 00 00 14 02 80 00 00 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 8c 52 02 85 80 14 11 2a 44 a0 11 40 a0 02 00 52 15 60 00 02 ac 00 00 52 00 00 0a 2b c4 c8 05 80 02 80 45 00 00 2b 71 40 00 00 00 00 00 00 00 00 01 40 00 00 00 01 01 40 00 0a 50 01 40 00 00 00 00 00 00 00 a0 02 00 01 41 0a 00 00 14 94 8a 00 00 50 01 14 00 29 00 00 15 60 52 82 00 Data Ascii: >0)P@@@(X)EHP(VBP@RR(@P((RD@R`R+E+q@@@P@AP)`R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:32 UTC	610	OUT	GET /media/vsln2m1e/london.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:32 UTC	2112	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Thu, 17 Sep 2020 05:23:28 GMT Accept-Ranges: bytes ETag: "4e46a3acb28cd61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:44 GMT Connection: close Content-Length: 335330
2024-10-01 18:33:32 UTC	14272	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 09 06 07 08 07 06 09 08 08 08 0a 0a 09 0b 0e 17 0f 0e 0d 0d 0e 1c 14 15 11 17 22 1e 23 23 21 1e 20 20 25 2a 35 2d 25 27 32 28 20 20 2e 3f 2f 32 37 39 3c 3c 3c 24 2d 42 46 41 3a 46 35 3b 3c 39 ff db 00 43 01 0a 0a 0a 0e 0c 0e 1b 0f 0f 1b 39 26 20 26 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 ff c2 00 11 08 06 c0 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 bf 6f 8a 82 83 Data Ascii: JFIFC"##! %*5-%'2( .?/279<<<$-BFA:F5;<9C9& &99999999999999999999999999999999999999999999999999@o
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: 50 08 00 00 a0 00 00 05 21 41 48 00 20 00 00 42 80 00 00 10 10 10 80 80 10 10 a4 00 80 10 14 80 80 80 c4 a4 21 48 01 08 52 02 02 02 10 10 03 10 08 08 01 01 01 0a 40 40 40 08 40 00 04 04 04 04 00 00 40 40 40 08 01 01 00 20 20 20 20 04 00 80 10 85 20 04 20 00 03 a0 14 00 50 52 82 02 82 94 a0 14 02 82 80 52 80 0c 81 4a 00 28 29 41 4a 0a 52 82 80 64 0a 0a 0a 0a 0a 42 82 90 a0 a0 14 00 52 80 0a 0a 50 00 21 01 0a 42 90 a4 00 02 94 14 a5 00 85 00 02 82 14 85 00 80 10 02 82 14 00 01 0a 40 0a 42 80 00 05 21 41 01 48 0a 42 80 52 00 50 08 50 00 00 80 a0 00 50 42 80 00 00 14 80 85 00 10 00 0a 08 01 01 01 01 01 00 00 80 02 10 00 08 40 08 08 00 21 00 20 04 00 80 84 04 04 04 20 20 04 00 80 10 10 00 40 40 40 40 08 50 42 00 40 42 90 02 02 00 08 40 08 01 01 01 00 21 48 08 Data Ascii: P!AH B!HR@@@@@@@ PRRJ()AJRdBRP!B@B!AHBRPPPB@! @@@@PB@B@!H
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: a4 15 a1 9f 3f 5c fb a7 4f 49 d3 d2 f1 77 f3 7d 9c 7d 4f 0f a3 87 d1 c3 db e7 9f 7f cf df c3 de bc be f8 dd c7 a6 ad cd d6 63 a9 d7 e6 e8 af 6f 83 d2 d6 3c 9e 7d 7c bf 4e 75 69 c7 b9 f9 4f bb 9f 23 3f 43 e5 df 87 e8 cf a7 cf af 8c c7 af ab f3 93 9f d1 67 5e 16 af bb a9 e7 73 e9 d3 34 eb cb 4e f1 d3 35 b7 3d 3d 0f 37 6f d1 7e 17 5b 95 cb 45 cf d2 f3 79 ba f5 f9 3d 38 e8 e8 e9 af 23 ef fc a7 4e 16 c1 9a 8c a3 20 63 64 28 21 01 55 0a b0 32 36 2e 71 89 4f 1e 74 f9 dc fa bd 7f 2f ab e6 3d 1e 54 9d 0d fa fe 6e a6 fc 0e dc be 9b c5 e9 fb 9f 8d bc f1 ae 8c e3 38 fc ef ee e7 b3 37 e8 3c 6e 9c 63 6e 5b eb 83 d3 8f 1f f4 5f 1f 32 59 01 2a 18 92 a1 00 41 42 c2 80 85 a0 a0 00 08 08 00 05 05 8a 55 25 96 94 b1 90 2a d0 64 a4 aa 92 55 8c 81 92 e4 53 23 24 a4 31 31 31 48 Data Ascii: ?\OIw}}Oco<}\|NuiO#?Cg^s4N5==7o~[Ey=8#N cd(!U26.qOt/=Tn87<ncn[_2YABU%dUS#$111H
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: 73 ed 3d 7f 27 5f 9a f6 73 f6 fc dd f0 b9 f3 fb f3 d1 67 d8 7c af 77 8d d7 3d 7c bd 3a b5 3d 6f 3e 30 b9 fa 1f 9f d7 cd f5 73 e7 eb 19 72 f6 b6 b5 75 cf 8f e8 e5 e5 f6 98 d9 ba dd 3b c8 c5 2d 17 19 32 b6 45 a8 99 d2 ca b2 22 d2 c7 ab e5 eb e1 f7 e5 d1 77 c7 78 fd 46 7a eb 8f 9c e9 cc 9c d2 67 a9 d5 9e 9c 3a e7 d9 c7 d1 a7 7c f3 6b 9a f2 f4 71 ea 2e cc bd be 1e df 07 b7 8f d0 d6 7c 6d f0 c2 e7 2c eb 41 d5 6f a1 8e da 3a 73 d3 33 a5 3a 25 fb 3f 2f a7 ea 79 5f 91 f6 70 e1 e9 8e 4d 4e 1c df 1a 63 9f 2a 76 69 cf 96 46 12 c3 59 b4 cc c4 1a 0a 66 44 e7 97 ab 53 ab 4f 47 73 2d 36 d9 95 b5 32 ab 05 ce b4 46 70 37 2c 31 8c cc 97 99 39 64 e4 48 5a db 66 dd 4e f5 9c fa 79 d8 9a 4e 1c ba ad f4 2b 48 b3 bf 4e cc ef d4 e3 ea f2 f7 cf 5e a5 eb 2f 41 3d cf 4f 5e 7c 3c fc Data Ascii: s='_sg\|w=\|:=o>0sru;-2E"wxFzg:\|kq.\|m,Ao:s3:%?/y_pMNc*viFYfDSOGs-62Fp7,19dHZfNyN+HN^/A=O^\|<
2024-10-01 18:33:33 UTC	64	IN	Data Raw: 32 81 9e 6d 5d 99 b9 26 45 4a b5 19 22 12 69 25 5b 11 71 b2 db 8d 9b a7 5d b3 59 cb 86 e7 46 35 d3 8e 9b 57 39 73 8d 92 e4 45 d5 a9 89 94 42 85 c5 34 ea 69 d6 6a 55 59 cf ac 73 ef 9e ba d1 71 Data Ascii: 2m]&EJ"i%[q]YF5W9sEB4ijUYsq
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: af 53 4e b9 da d9 35 ae e3 46 b9 e3 58 82 00 a1 00 45 b1 50 b0 85 00 a8 54 52 d4 41 4a 02 65 5b 33 ac 53 1b 2d 96 58 40 a9 40 8b 48 b5 16 01 05 59 28 2a 8c 84 50 0a 80 5b 42 09 4a 54 cd 36 cb b2 5c a5 56 52 e2 12 1a ce 7d 67 0a c0 18 d4 21 8d b1 71 42 a8 8a 84 08 2d 40 40 85 80 84 05 2d 89 60 32 24 14 50 b0 90 aa 44 52 20 00 85 a0 24 b8 ac 96 45 ac 93 3b 28 4a b5 32 48 14 40 49 71 00 8a 04 85 55 a8 0a 8c 84 4a 92 d2 90 2d 80 42 d9 72 97 28 b1 9c 64 65 19 14 c8 a9 4b 60 a0 8b 01 41 48 54 16 86 88 10 42 85 08 04 22 d4 00 a1 00 a0 21 60 05 02 40 b5 61 50 21 41 00 54 24 a0 42 c2 80 0a 81 20 55 92 c8 52 51 04 b4 89 65 85 20 94 21 11 44 94 45 08 04 96 8a 08 0b 49 28 ca 50 97 20 65 9d 22 99 4b 9c b6 33 33 2c 23 24 08 4a 92 09 65 91 46 4d 6b d6 77 4e 99 2e 6d 4b Data Ascii: SN5FXEPTRAJe[3S-X@@HY(*P[BJT6\VR}g!qB-@@-`2$PDR $E;(J2H@IqUJ-Br(deK`AHTB"!`@aP!AT$B URQe !DEI(P e"K33,#$JeFMkwN.mK
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: fe d3 cf 18 f1 b7 f2 d0 c1 8f 16 39 8d cb 64 7f 2c e7 11 1d ed 95 b9 16 e6 23 f9 65 e0 83 5a 03 cc a2 43 47 65 ad 19 85 21 86 4d db 91 fe 59 2f 9c 23 8e db 94 46 fb a1 03 9a 9d 5f e4 42 6e 3f 96 40 da ae 4e 69 dc 1b be 54 c6 ad b8 cb 77 9c 95 4b 07 e1 7f 31 b9 6c e2 53 7f e5 8e 59 0c 9a 8e de b6 f1 55 da 77 77 82 2f 77 c3 c0 64 9e 00 78 16 e4 aa 3d 86 db 03 7a f4 fe 58 ba cc 2e 25 df 08 4e 9d 9d 91 c8 a9 18 62 e8 93 39 ac 34 a7 b4 e0 51 65 07 34 7b d7 1c 96 2f e5 88 6b 1c 47 14 5e 64 a0 de 7a 33 5b 94 37 c7 f9 61 c0 cf 1f 63 25 b4 81 2f e4 b9 ff 00 2c 38 aa 47 05 75 9e 8b ac 37 5b 3c ca b4 f0 3f 41 36 fe 54 6f ed e0 61 3a 2f a6 ea 1a 9b 83 9a d9 3e 2b 60 7b 78 18 e5 6f e5 3f 0f d0 64 df 6b 6a 11 11 96 59 2b be 46 e5 b5 1e dc 18 f3 58 9b fc a7 e2 aa d0 55 Data Ascii: 9d,#eZCGe!MY/#F_Bn?@NiTwK1lSYUww/wdx=zX.%Nb94Qe4{/kG^dz3[7ac%/,8Gu7[<?A6Toa:/>+`{xo?dkjY+FXU
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: fe 95 56 71 b9 90 51 94 54 e6 80 2a 11 2d 3a 61 f7 6c d9 38 fb a5 3b ba 9f dd 29 e7 dd 2a a1 f7 4a a9 1d 92 9f dd 28 82 10 70 70 71 85 44 f4 67 54 cc e0 c4 a8 6b 8b 70 80 35 52 99 af 1a b6 b8 5b 7a ad 50 cb 5a e9 4f 06 11 a4 dc 0e 65 93 20 c3 0c a7 f7 59 e8 aa 70 6f a2 7f 06 a9 ed 51 9f 3b 23 55 c1 a6 9b 1b e2 55 2a 9d 73 9e 03 c6 2d 9f 0c 91 7d ea 18 94 c6 b2 8c 67 8d 06 43 89 f0 4c 3d 83 7c e7 82 26 9e 1d 99 fe ca e0 cd c7 24 04 13 2b 0b 03 06 e4 71 03 19 29 26 47 6b 34 fa cf b6 1c 95 47 38 c8 65 95 51 4f 19 c0 61 74 86 be cd 68 3c 95 62 e7 6c 02 42 ae c6 77 41 dd c5 74 97 58 b6 7c 55 46 93 2d 6a da 19 22 2a 38 49 43 33 37 54 bf 45 35 24 e2 44 13 85 8e 88 e0 9c 2b 86 ba 99 98 ec a7 07 b2 8e 13 6b 5d 3f a4 54 07 56 e3 03 78 84 5b 41 a3 28 0b b2 4e d0 09 Data Ascii: VqQT-:al8;)J(ppqDgTkp5R[zPZOe YpoQ;#UUs-}gCL=\|&$+q)&Gk4G8eQOath<blBwAtX\|UF-j"8IC37TE5$D+k]?TVx[A(N
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: 18 0e 1c 3e 88 f4 7a 41 ec ac 64 aa d5 76 60 de db fd 50 7f 57 88 d9 bb 3c 13 cb b3 31 e0 a4 ed 5f c9 07 d4 6e 2c bc 13 7a 33 c1 61 92 02 a9 55 94 59 8e 03 db fd 96 06 32 90 63 e5 80 dc 22 75 07 54 e6 f0 4e 9e cb c6 de 2c 96 aa 83 5c d7 b8 e2 dc 9d fa 36 a9 a1 fa c7 6f 2a b3 5e da 9b 58 78 a7 3d 90 18 ec e6 f9 2a f4 4d 37 bd b8 a4 48 c2 85 4a 35 6a dd 93 b8 aa c5 f2 46 2c 3c 53 e9 39 a1 ec 8c cc 8e 09 e5 af 7e 6d 73 61 39 ed 03 01 cf fd 11 bd 9d e8 8b a2 ce f4 54 e8 b5 87 14 92 a0 20 10 71 88 2a 17 04 d6 4c b1 93 9d f7 a6 61 fa b6 08 1d a4 cd cd da 52 23 02 75 7a 46 9e 09 68 19 27 16 fd 5b b1 6f 58 47 2e 2b 6a 53 5a e0 48 24 0e 06 0a 6e b0 35 c1 e6 04 7d 62 a4 6d 78 fc c9 a2 db 95 3f 3f 15 53 82 ae c2 70 97 b7 c1 cb a4 3d d8 9d 2e 3c 49 4f 9f a9 b7 04 7f Data Ascii: >zAdv`PW<1_n,z3aUY2c"uTN,\6o^Xx=M7HJ5jF,<S9~msa9T q*LaR#uzFh'[oXG.+jSZH$n5}bmx??Sp=.<IO
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: da e3 93 cd 15 7d c7 9b 90 d1 b8 d5 15 11 d0 6e aa ff 00 34 74 9d 03 1f dc 12 96 09 6c 61 ba a7 44 c7 a7 3e 7f f1 3a cd 56 32 f6 86 ed a9 2f 40 42 10 9e 9a 52 94 a5 29 4b e8 a5 fa 97 e9 52 fe 91 08 42 7d 68 4f a0 dc 1b f0 8a fa 52 ae 54 e6 f6 f0 29 ab 79 75 9d 21 08 42 10 84 16 04 48 d1 33 1b 84 9c a4 6c e4 75 67 03 d9 f5 78 6e 20 7f e3 13 19 64 48 c9 3d 6c 8a dc b5 22 ee 47 35 d1 6b 2b 51 8d a6 e4 5f 3f 46 10 84 21 3e da fa 14 57 9f bb 19 30 c1 b5 79 b5 65 eb 9c fd c0 67 a6 40 43 19 33 4d 92 2f 38 8d 17 b9 77 2f ec d6 26 c3 41 d5 a2 cd be 0b d5 b2 49 36 1b 7c 51 3c 22 5e e7 33 cc 32 55 ff 00 31 1d 89 5d 3a 7c a3 78 b9 31 4d 0b 56 11 83 1f 23 13 b2 5c 8f f4 87 f9 c2 6e 74 2d f3 06 21 2a 35 f4 e6 60 d2 ac ba eb d1 15 f7 85 46 e9 75 82 56 a5 c1 67 32 6a 51 Data Ascii: }n4tlaD>:V2/@BR)KRB}hORT)yu!BH3lugxn dH=l"G5k+Q_?F!>W0yeg@C3M/8w/&AI6\|Q<"^32U1]:\|x1MV#\nt-!*5`FuVg2jQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49754	142.250.185.174	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:32 UTC	704	OUT	GET /vi/NBEWfKH702s/mqdefault.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:32 UTC	658	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 11017 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 16:43:02 GMT Expires: Tue, 01 Oct 2024 18:43:02 GMT Cache-Control: public, max-age=7200 Age: 6630 ETag: "1687450470" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:32 UTC	732	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0d 0f 0d 0b 0a 0d 0b 0b 0d 0d 0d 0f 0d 0d 0d 0d 0a 0e 0b 0d 0d 0d 0a 0f 0d 0a 0e 0d 0d 0d 0b 0d 0a 10 0d 0d 0d 0e 0f 0d 0a 0f 15 0f 0e 11 11 13 13 13 0d 0b 16 18 17 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 17 12 10 15 17 15 15 15 17 18 15 15 15 17 18 15 17 15 15 15 15 15 15 15 15 15 15 15 15 15 17 17 15 12 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 01 03 08 02 09 ff c4 00 50 10 00 02 01 03 02 04 04 02 06 04 0b 04 05 0d 00 00 01 02 03 00 04 11 12 21 05 06 13 31 07 22 41 51 14 61 23 32 52 71 81 91 08 42 a1 f0 15 24 Data Ascii: JFIF@"P!1"AQa#2RqB$
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 5d 98 71 1e ad 9a 48 a5 55 2b 11 72 99 65 e9 e9 23 d5 48 39 1b 2c 12 6a cc 9e 58 a7 47 ac 29 5e 64 f0 bb c6 ee 25 73 c4 2c ad 26 36 bd 29 a4 d0 fa 21 2a da 74 39 d9 ba a7 07 20 7a 1f 5a ba f8 e1 e3 68 b1 94 d8 da c5 1c d7 2a 14 ca d3 16 e9 40 59 43 2a 14 46 57 92 42 a5 5c 8d 48 02 b2 1c b6 48 10 f0 c9 3a 25 64 55 66 e6 a5 79 0a 3f d2 17 8b 82 1c fc 21 52 4e 03 5b b0 42 46 32 32 b3 2b 1c 64 67 0d 91 91 ef 5b df c1 4f 15 22 e2 69 22 18 fa 37 50 80 64 8b 3a 95 a3 27 02 58 9f 00 95 ce cc a4 65 09 50 72 19 59 93 c3 28 ab 62 39 22 f6 36 35 29 4a c8 d0 52 94 a0 14 a5 28 05 29 4a 01 4a 52 80 52 95 c3 36 32 49 00 0d c9 3b 00 3d c9 f4 14 01 8e 32 4e c0 6e 49 ec 07 a9 27 da ab cb c4 a5 b9 fe 6a c2 2b 72 0f f1 c6 01 9a 41 ef 69 13 0d 2c a7 72 2e 25 06 33 e5 28 93 2b Data Ascii: ]qHU+re#H9,jXG)^d%s,&6)!t9 zZh@YC*FWB\HH:%dUfy?!RN[BF22+dg[O"i"7Pd:'XePrY(b9"65)JR()JJRR62I;=2NnI'j+rAi,r.%3(+
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 06 36 d8 12 48 f9 77 ed 8a de 36 9c 50 00 03 5c d9 b6 7b e1 8c 6c 3e 61 4b b6 ff 00 2c 8a 84 f1 02 ca d2 e2 16 0d 3c 01 c0 3a 18 49 1e 75 7b 7d 6e c6 ba 31 cb 43 dc c3 2e 3d 48 f3 c4 0a 49 c0 ed dc 8f 9f af ec 19 ae e8 a0 01 81 0d b0 f5 3e 9b fe da ea 58 59 1b 07 6d c8 d5 be 0f b6 f5 2b 71 c1 e5 d0 25 65 21 48 d4 41 23 5e 91 8c be 9c ea 23 71 be 3b 6e 7e 5d f2 92 5c 9e 7c 21 27 c2 e0 f4 e7 e8 f1 cd fa e0 4c 48 3a 91 9d 27 27 cd 85 f2 8c 8c e4 82 00 fd cd 6e cb eb 9c 05 e2 70 82 74 2e 8b b8 d0 16 32 5b 2e 49 2a 06 ed 2d be a6 91 30 09 74 33 46 01 32 29 4f 13 78 1d c6 ba 33 b6 06 49 1e 5f 41 91 f6 8e 0f 94 8f 51 ea 17 71 5e b9 f0 bb 98 19 b1 d4 d2 19 88 57 0b 90 a1 b6 d2 c3 3f 7e 33 f3 35 c9 35 4c b1 b2 22 90 10 19 48 2a 40 20 a9 c8 2a 46 41 04 6c 41 18 39 Data Ascii: 6Hw6P\{l>aK,<:Iu{}n1C.=HI>XYm+q%e!HA#^#q;n~]\\|!'LH:''npt.2[.I-0t3F2)Ox3I_AQq^W?~355L"H@ *FAlA9
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 92 46 79 64 0a c5 22 8a 38 e4 91 8a ab 31 0a 15 41 66 14 4a f6 21 ba 2c d5 54 f1 4b 98 9e de df 4c 24 7c 55 cb 0b 7b 40 db 81 3b 2b 16 99 86 77 8e de 35 96 76 f7 11 e3 bb 0a c9 e4 c9 6f b4 b9 bf f8 4f b4 8d 6a 92 42 15 30 32 b2 24 b7 32 9c 8d ce a0 cb b0 dc 03 5a 9b 95 79 5e eb 88 4c f7 df c2 d7 c6 18 8c 91 d8 4f 22 d9 75 1a d5 9a 3d 72 95 16 42 2d 37 0f 18 64 d2 80 98 92 32 49 12 05 1a 46 2a ed 95 94 bb 13 dc e1 c1 a3 b4 e1 09 c3 13 3a ef 9a 2b 2f 31 f3 98 e5 2c d7 4e ed dc c9 f0 e2 f2 67 6f 59 19 bd eb 9f 06 39 da e6 4b bb be 17 74 b1 23 40 a0 a4 41 0c 32 c2 dd 4b 80 62 21 a5 6f 88 8c c4 b6 f2 89 94 28 fa 51 e8 c3 11 56 b6 92 af 12 9d ae 6f ae af e1 e1 50 19 5b a8 90 96 5b 89 23 ea ca 91 c7 6f 6e 85 9c 5b a4 0b b8 62 7e 2b 03 1e 6c c7 73 27 2c ab 70 b9 Data Ascii: Fyd"81AfJ!,TKL$\|U{@;+w5voOjB02$2Zy^LO"u=rB-7d2IF*:+/1,NgoY9Kt#@A2Kb!o(QVoP[[#on[b~+ls',p
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: f2 ab 76 01 07 d7 3d 36 fd 95 b4 79 55 f3 6d 6a c7 b9 82 12 7e f3 12 1a f3 c7 e8 94 82 2e 1b c7 2f bd 3b 64 77 fe 2f 6d 24 b8 fc 3a fd be 7f 3a f4 8f 0c b6 d1 1c 51 7d 84 44 ff 00 75 42 ff 00 a5 71 4c d5 2a 32 29 4a 55 09 15 55 f1 17 96 a4 b8 5b 69 60 91 23 b9 b4 9b af 01 98 16 86 43 a1 e3 92 19 82 f9 84 72 23 91 a9 77 56 08 db e0 a9 b5 52 89 d1 0d 59 ac 78 97 0d e2 b7 c3 e1 6f 22 b6 b4 b5 3b 4f 1d ac b2 4c d7 2b b6 63 92 e1 a2 88 a5 bb 6f ae 38 d0 b4 83 ca 5d 54 b6 6c fc 4b 99 78 7d 82 a4 17 17 96 b6 e7 19 54 96 48 d2 46 1b 6e b0 e7 51 1d 80 d2 30 06 90 3d 2b a7 c5 6e 60 92 de d9 56 02 a2 e6 e6 54 b5 b6 67 1a 95 25 70 ec f3 14 fd 71 04 29 3c da 7b 31 8d 57 f5 ab 5e f3 0f 29 c7 07 c2 70 c8 43 7c 5f 10 67 96 ea e5 8e ab 93 69 1f 4c 4c cd 39 52 cd 34 f2 4b Data Ascii: v=6yUmj~./;dw/m$::Q}DuBqL*2)JUU[i`#Cr#wVRYxo";OL+co8]TlKx}THFnQ0=+n`VTg%pq)<{1W^)pC\|_giLL9R4K
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: b6 e4 01 27 11 95 26 61 f6 a1 95 fe 21 c7 de 6c 60 23 3e f8 ad d4 6a 02 c1 03 dd 31 50 04 56 69 d0 8c 0d 97 e2 24 11 bc 98 18 c6 21 89 6d d1 58 1e f3 5c 2e c5 4d 4f d7 0c 99 a2 14 a5 2a a4 8a e8 bf bc 48 d1 e6 91 d2 38 e3 56 77 79 08 54 44 50 4b 33 31 38 0a 00 24 93 5d f5 46 f1 c6 ce 47 b1 3a 22 79 96 39 ed 66 9e 18 81 67 92 d6 29 e3 92 40 b1 8d e4 d3 a4 48 63 19 2e 10 a8 07 38 33 15 6e 88 6e 91 8c 6e 6d f8 9c b6 77 16 f2 be 9b 19 da 46 59 ad ee 21 eb 2c 91 3c 5a e2 33 24 65 95 55 d8 87 55 60 72 06 d9 06 ab b7 bc 6a 73 c4 78 87 12 82 c6 5b e1 6d a2 c2 38 e1 96 24 c7 44 3b cf 20 d7 9c e6 e2 79 22 21 03 36 6d 86 de 5c 54 bf 11 f1 3a cc 45 d2 e1 8f 1d e5 db 8d 11 24 4a e5 23 73 fe d6 f2 4d 18 86 34 3e 66 57 21 d8 8d 2a a5 88 15 67 f0 cf 97 05 ad ac 70 65 99 Data Ascii: '&a!l`#>j1PVi$!mX\.MOH8VwyTDPK318$]FG:"y9fg)@Hc.83nnnmwFY!,<Z3$eUU`rjsx[m8$D; y"!6m\T:E$J#sM4>fW!gpe
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: de 19 1a 17 1b af 63 e8 ca 7b 30 f9 1f d8 72 3b 83 50 d7 46 b6 ef 12 b0 f8 a5 36 b7 1a 23 bd 85 4b 2b 28 21 25 8f 20 75 a2 04 92 61 73 a4 3c 79 2d 0b 90 09 60 51 e4 d5 3c 72 c5 e2 76 8a 45 2a eb e8 7d 47 a1 07 b1 53 e8 45 6e a5 66 6d 14 0e 79 b1 ea 46 c9 85 c9 23 1a f6 00 fb e4 6f 9f ba ab 3c 9d c4 26 4b 6b ae 1e 43 ab 07 13 45 a5 81 12 65 40 95 55 87 97 b0 89 c0 ce 48 72 7e fb 77 35 83 a1 f1 8c 80 48 d4 01 1b 6f ba 9d 98 7c 8e c7 b5 72 fc 3a 3b a8 2d c4 58 85 5f cd 26 32 d2 09 93 01 99 49 c7 98 33 61 4e 4e 3a 8c 06 02 a0 12 f1 6b 8b 46 98 b3 7c 39 26 43 f8 67 cf 2f 0b 2d b5 d3 16 8b 3a 11 98 96 31 bb 1d 97 38 25 a3 24 e3 7f a9 b7 ea ec bb 4d af 97 3d fb d6 ae be e0 7f c8 4c ad 96 49 1d 19 8e c6 45 5d 38 91 86 31 a9 91 80 38 c6 4e 4e 06 76 9f b5 72 31 ea Data Ascii: c{0r;PF6#K+(!% uas<y-`Q<rvE*}GSEnfmyF#o<&KkCEe@UHr~w5Ho\|r:;-X_&2I3aNN:kF\|9&Cg/-:18%$M=LIE]818NNvr1
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 82 52 55 c9 50 8d 29 04 2d ca be 26 88 30 28 ca 19 58 10 ca c0 15 65 3b 10 54 ec 41 f6 35 29 90 d1 e7 cf 10 fc 36 ba 88 33 22 1b 88 b0 7c d1 02 5d 47 f5 e1 19 6f bc ae a1 81 92 47 6a a5 f2 3a 98 e2 88 1c 90 35 b7 f8 4e b7 cf be 4b 5b ef eb 99 05 7a 71 78 24 91 7f 35 9b 42 0f fc de e0 34 b0 01 ed 11 d4 26 83 d8 05 66 89 40 18 8a a2 39 82 d6 19 55 96 fb 86 ca 0b 2e 96 9a d0 3d c0 3a b6 21 64 b6 55 bc db 6f 33 c2 80 7e 78 e9 c5 9b 4e cc ca 70 b3 ce 3c 4a e4 29 b7 b7 fd 6e 9b c9 bf f7 9d 3f fc 15 93 65 2f a5 6c ce 3b e1 a7 0a b8 b9 8e 68 f8 a3 43 2a 21 4e 83 4b 6d f5 0b 3b 65 a1 91 16 70 4b 31 ee df aa 36 ef 59 51 f8 3a 9d d7 89 26 3e 70 a9 fd a2 ec 0a e5 ea 56 a9 5a 3d 0e 97 2c 61 0d 32 20 f9 5b f9 09 0f f5 ff 00 f0 ad 61 4a fb 9a bf 70 de 54 b3 b6 8d e3 9f Data Ascii: RUP)-&0(Xe;TA5)63"\|]GoGj:5NK[zqx$5B4&f@9U.=:!dUo3~xNp<J)n?e/l;hC*!NKm;epK16YQ:&>pVZ=,a2 [aJpT
2024-10-01 18:33:32 UTC	555	IN	Data Raw: cc 7f ce b5 e4 fc c9 66 85 91 ae 48 31 31 56 fa 0b 8f ac 9a 55 80 22 3d f7 89 fb 64 1c 83 f3 af a8 39 82 d3 1a 84 ec 55 71 92 20 9f bf 97 00 0d 39 24 e8 6e c0 f6 c7 7a 2e a3 fa 87 f8 ff 00 ec 88 f8 91 ee 5e af 38 94 48 ac ef 2a 2a 22 99 19 d9 80 55 8c 1c 16 2d f5 40 1f 7d 74 b7 1c b7 ce 9e bc 5f 55 9f 3a 86 90 aa 54 31 67 fa 8b 82 ca 30 c4 1d fe 46 b5 df 13 e3 b6 53 41 75 66 b7 4c 0c d0 49 06 af 87 b8 60 ae f8 40 74 e3 2c 41 2a 70 31 9c ec 76 aa bf 16 e0 96 a1 4c bf 17 12 33 c9 70 ef 8b 59 18 b3 4f 3f 0d bc 55 f7 06 38 ba 71 ab e4 10 cd 95 2a 63 6c 7a dd 0c 32 e4 c7 79 e3 a2 57 c7 3b 19 cf 35 71 4f cc dd 1f f4 8a df 3a 7a e9 9e b2 db fa ff 00 38 68 fa ab 1e 71 8c 98 fc f9 ed 8f 5a c8 4e 2b 09 00 89 e1 20 ee 08 92 32 08 f3 6e 0e ae de 47 ff 00 75 bd 8d 69 Data Ascii: fH11VU"=d9Uq 9$nz.^8H*"U-@}t_U:T1g0FSAufLI`@t,Ap1vL3pYO?U8q*clz2yW;5qO:z8hqZN+ 2nGui

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49755	142.250.185.174	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:32 UTC	704	OUT	GET /vi/JCcqzCo7X-M/mqdefault.jpg HTTP/1.1 Host: img.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:32 UTC	658	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 11820 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 17:37:01 GMT Expires: Tue, 01 Oct 2024 19:37:01 GMT Cache-Control: public, max-age=7200 Age: 3391 ETag: "1685634630" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:32 UTC	732	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0d 0d 0d 0e 0e 0d 0d 0e 0e 0a 0a 0d 0f 0e 0d 0d 0e 0e 0a 0a 0d 0d 0e 0a 0d 0d 0d 0d 0d 0d 0d 0d 0d 10 0d 0d 0f 0e 0d 0d 0d 0d 15 0d 0e 11 11 13 13 13 0d 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 18 15 10 15 17 17 17 17 15 15 15 15 17 16 15 17 15 17 17 15 17 15 15 15 16 15 15 15 15 15 15 15 15 16 15 15 15 15 15 15 16 15 15 15 15 15 15 15 15 15 15 15 15 17 ff c0 00 11 08 00 b4 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 03 05 02 06 07 01 08 ff c4 00 49 10 00 02 01 03 02 03 04 07 04 06 08 04 05 05 00 00 01 02 03 00 04 11 12 21 05 13 31 06 22 41 51 07 14 32 61 71 81 91 08 23 52 b1 15 33 42 62 72 Data Ascii: JFIF@"I!1"AQ2aq#R3Bbr
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: ea 33 50 f1 95 22 a6 02 a5 af 74 7f 2a 90 0a 91 34 05 06 2b a2 de db aa c9 10 6e 82 01 b1 ad 23 87 59 b4 8e a8 a0 96 76 00 01 be 6b 76 ed 04 ac 66 01 a3 3a e3 5d 18 19 f2 df 3e 35 05 63 68 53 51 6d d6 8d 7d 8d 6d 8e 99 da a1 34 d7 13 4c 31 db 1e ea 56 95 ba 04 d7 6a 82 6b 1c 6f 59 01 52 db 2f 78 52 94 d5 ef 15 1e cf b8 54 17 a3 3a 4f 98 a7 f8 8f 51 f0 a8 25 dd 3f 84 d2 00 94 95 5b 41 ac b4 d7 9a 69 f9 53 65 60 45 7b 12 64 80 3a 9a f4 ad 3b c3 e1 c0 cf 89 fc bf d6 a5 a1 47 78 f8 55 f1 35 c5 26 17 71 e0 98 45 c0 c0 e8 2b 2a 28 ad d0 22 cb 9a 26 4c 94 51 45 14 a9 11 45 14 50 84 51 45 14 21 14 51 45 08 45 14 51 42 11 45 14 50 84 51 45 14 21 14 51 45 08 4f 48 94 bc 8b 4f c8 94 ac 8b 58 6b aa 49 b0 a8 98 53 2e b5 09 a4 42 81 85 10 47 96 03 cc 8a cd 85 39 c0 6d Data Ascii: 3P"t4+n#Yvkvf:]>5chSQm}m4L1VjkoYR/xRT:OQ%?[AiSe`E{d:;GxU5&qE+("&LQEEPQE!QEEQBEPQE!QEOHOXkIS.BG9m
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 6a 02 29 40 b2 49 52 5e a6 70 de 63 f2 a8 61 4d e9 a1 ba 63 f0 9f ce a3 02 ac e0 e8 e7 74 9d 02 a5 8f c4 6e d9 03 52 bd af 1a bd af 0d 6c ae 7d 7d 97 f6 93 ff 00 c2 96 5f c3 c3 ff 00 e8 8a f8 d9 62 66 3a 50 65 dc e9 51 e6 cd b2 8f 99 20 57 d9 c9 e9 5f b3 17 5c 36 d6 cb 88 5c 19 16 18 2d c4 91 7a bf 16 50 25 b7 89 54 f7 e1 84 67 4b 64 6c c5 4f be b9 b7 6f 2f fb 28 b2 f0 e7 e1 8c 23 68 78 9d bc b7 8f cb e2 e7 16 90 eb 79 3b b3 a1 0d 97 58 d7 11 82 f9 23 6c 6a aa 14 1e 58 0b 4b 4e a7 82 d4 c4 52 15 1c 1c 1c 34 1c 57 6f fb 43 7a 27 bb e2 56 56 56 b6 32 c1 10 b0 70 da a6 69 93 78 a1 e5 44 53 97 13 ee 32 c4 e7 18 db 15 ab fd bd 78 59 7e 1b 69 31 03 5c 37 61 1c 8e 8a b7 10 4b ab 19 df 1c c8 e3 1f 31 5c b3 ed 3f e9 93 d7 2f 21 3c 2a fa e1 6d 22 b6 01 da 17 be b1 Data Ascii: j)@IR^pcaMctnRl}}_bf:PeQ W_\6\-zP%TgKdlOo/(#hxy;X#ljXKNR4WoCz'VVV2pixDS2xY~i1\7aK1\?/!<*m"
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 37 f8 d3 e4 7d e7 f0 af f8 52 bd 20 2a a2 e3 a9 f8 9a 89 85 4a c3 7a c3 14 f6 89 b0 4d 73 80 04 95 e2 1f e7 45 14 56 dd 1a 62 9b 61 73 38 8a c6 ab cb 8a 28 a2 8a 95 40 9e 3c 1e 6c 81 cb 24 b3 a2 00 34 b1 2f 32 09 23 50 01 27 2c 8c 18 7c 6a 58 f8 0c c5 c2 05 52 4a 73 01 12 40 63 28 1b 41 7e 70 93 93 80 fd cc eb f6 bb bd 76 a6 66 ed 5d c3 72 f2 ff 00 a8 78 de 30 72 c1 0c 31 88 94 2a b1 2a 14 aa f7 94 0c 31 24 9e b5 e5 a7 69 64 49 23 74 48 d4 40 a5 23 8d 79 c1 10 3b 17 62 0f 33 9b 92 c4 92 da f2 47 74 f7 7b b5 98 5f 8d cb d5 64 c7 6e b1 de 38 c7 ce f6 13 3c 52 9d 4a 44 70 b9 34 6b c0 d1 af 97 ed c4 1b 5f e1 d1 af 5e 7c 7d 9c 63 7e 95 3c 3d 9f 9d 99 d1 55 4b c2 42 b8 12 db 90 19 d8 a2 a6 ae 66 96 72 e0 a8 45 25 b5 6d 8c ed 50 1e 28 fa 74 f7 71 ce e7 7b 20 77 Data Ascii: 7}R JzMsEVbas8(@<l$4/2#P',\|jXRJs@c(A~pvf]rx0r1*1$idI#tH@#y;b3Gt{_dn8<RJDp4k_^\|}c~<=UKBfrE%mP(tq{ w
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 38 8f 9b 9b 6e 4e 74 eb f5 de 1a 46 a0 ba f4 00 2e 72 64 d3 bf 2c 0d 5e ea bd 57 11 4a 94 6f 1c 04 d8 49 02 7b a5 64 b2 9b 9d d5 0a 96 8a b1 5e 07 31 9d 6d f4 7f 49 7d 1a 53 54 7b f3 63 59 53 bd ab 40 ca 32 b6 ed b6 70 70 76 a9 2c bb 3d 33 c6 92 83 02 c5 36 ae 5b 4b 75 63 6a 5f 96 da 5f 4a cf 3a 39 0a c3 04 e3 14 c7 63 28 34 02 5e d0 0c 45 c5 e6 48 8e f0 09 1c e0 f2 4e 14 5e 74 05 55 51 4d 70 ae 1b 24 ce 23 89 0b c8 72 70 0a 80 02 8c b3 33 12 11 55 40 c9 76 21 40 dc 9a 97 8a f0 89 21 0a 5b 43 24 b9 08 f1 4b 6f 74 8c 53 4e a5 0d 04 8e ba 86 a1 dd 24 1d c6 db d3 8e 22 90 78 a6 5c 33 1e 12 27 cb 5e 07 c8 f2 4d 14 dc 44 c5 92 14 55 b5 c7 66 ae 56 e4 5a b4 44 5d b1 50 b1 96 8b 73 20 d4 b8 7d 5c bd c7 8e ac 02 08 38 20 80 4d d9 c9 c0 42 16 37 59 a5 58 51 e1 9e Data Ascii: 8nNtF.rd,^WJoI{d^1mI}ST{cYS@2ppv,=36[Kucj__J:9c(4^EHN^tUQMp$#rp3U@v!@![C$KotSN$"x\3'^MDUfVZD]Ps }\8 MB7YXQ
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 16 a9 21 6d 4c bd e8 da 99 b4 31 34 19 56 ad 22 f7 09 6c b8 02 d0 0d 83 48 93 76 9c a5 a4 dc 08 82 3f 52 5a 2c 71 6b 4c 71 b6 b6 e2 8e 01 c7 2d 0c b6 32 97 96 37 b0 b8 d3 23 5c 3a cf 24 b0 4c d2 4d af 99 1c 49 9e 4c a5 c6 92 33 89 c6 32 17 02 bb 82 71 8b 54 8e 1e 4a 7a b7 f4 fb 57 ba 49 24 92 e5 de 2b 66 d5 13 c7 26 84 50 b1 96 97 5a 04 d6 49 88 86 23 20 58 5c f0 08 81 47 9e dd 22 9e 2b 4b 9b ab 8b 38 64 7d 0e b0 18 c5 b1 2c 25 95 a1 12 87 77 70 8f 9e 5c 5a 80 42 d9 aa ce 06 ab 73 2d a3 35 a5 bc 70 bf 11 b6 b7 91 a1 33 20 71 3b 82 62 68 de 67 d8 a0 73 cc 18 3e 04 9d aa 8b 19 85 7b 5c f6 e7 cb c7 a4 d8 10 e7 90 07 4a 1f 2e 25 cd 3d 28 96 96 91 70 27 9a 80 81 69 f1 ec f2 4f f1 5b b8 bd 6a 19 b9 9c 3b 94 97 f1 ca 4d b2 dc 2c e6 3e 78 72 d2 eb 88 29 01 7b cd Data Ascii: !mL14V"lHv?RZ,qkLq-27#\:$LMIL32qTJzWI$+f&PZI# X\G"+K8d},%wp\ZBs-5p3 q;bhgs>{\J.%=(p'iO[j;M,>xr){
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: af 0f 0f 15 aa ac 10 8e b2 8a 7a db 85 c0 df d6 9f a7 fa 57 34 95 88 38 cf 4a bc e1 70 4a cb b3 90 05 6a 74 b9 ac 9b 72 5b 5b db d9 a9 c3 4e 47 cb fd 2a 9f b4 4f 6e 17 10 ca 58 e7 7c ed fe 02 b5 4e 2c ac 09 d4 72 6a 0b 75 c8 ce 77 a6 ba 62 e8 1a d9 3e c3 f7 85 60 7e 22 b0 86 c1 98 75 a9 0f 05 93 1e 38 a8 ec 9d 75 88 62 3c 6b 0b 5b 75 d5 a8 b6 f9 a8 a6 b5 c1 c1 27 22 a3 e3 56 bc bc 61 89 d4 33 4a de c4 85 5e 49 d3 39 18 a4 9d b3 55 fc 20 31 1a 98 f5 d9 47 e6 69 fa db c1 52 ca dc c7 53 e8 b9 fd a3 5f 33 b2 0d 07 af f0 8a 28 a2 af 2c d4 51 45 14 21 14 e7 09 e2 92 40 c5 a2 65 0c e8 d1 b6 a8 e1 9d 59 24 c6 a4 68 e6 47 8d 83 63 7c ad 27 45 32 a5 36 d4 69 6b c0 20 ea 0d c1 f0 4e 6b 8b 4c 84 f7 12 e3 12 ca 86 37 e5 08 99 95 d9 22 b7 b3 b5 56 68 c3 84 67 16 f0 c7 Data Ascii: zW48JpJjtr[[NG*OnX\|N,rjuwb>`~"u8ub<k[u'"Va3J^I9U 1GiRS_3(,QE!@eY$hGc\|'E26ik NkL7"Vhg
2024-10-01 18:33:32 UTC	1390	IN	Data Raw: 74 a8 88 47 b6 d8 5c 04 fc bf 2a f8 f7 86 71 7b 3b 99 2d e2 79 e6 86 19 65 b8 69 50 97 92 25 5c 45 ca 21 01 c6 b6 71 22 97 23 a1 1e 58 a9 6f f8 f5 ee 8f 56 b8 e4 98 87 56 8a 57 55 db 6c 72 e2 26 06 3f d8 04 63 19 15 ae cb c0 ad 75 07 55 2a c0 63 ba cc a3 03 a7 77 70 3e 58 ac fa 54 8b c9 77 70 1e 16 ef d5 5c 0e 18 7e 89 bf 3f c3 6d 16 f5 c5 7d 09 db ca 59 ac ee 20 9b 50 6d 08 d2 72 64 ce 0e 9e eb 6c 40 6c 6a 19 07 19 c7 85 6b 7d 9b ec 5c cf 69 1c d1 c3 21 49 95 89 2a 35 e8 28 ed 1b 02 73 b7 79 1b 04 f5 c5 6b fc 62 da 42 a7 93 33 ac 99 f1 24 8f 23 d0 64 1c 78 d5 b7 65 7b 43 7d 66 91 a5 bc fa 56 35 03 46 58 02 72 49 3e 23 a9 3e 02 a5 f7 ec 6e b2 7f 39 c1 f9 f8 a5 9c 33 c9 b4 7e 76 48 f9 2a 3e 35 d8 cd ce ae 62 9f 7a 91 f9 8a 5a cb b1 63 1f ad 1b 79 90 2b ac Data Ascii: tG\q{;-yeiP%\E!q"#XoVVWUlr&?cuUcwp>XTwp\~?m}Y Pmrdl@ljk}\i!I5(sykbB3$#dxe{C}fV5FXrI>#>n93~vH>5bzZcy+
2024-10-01 18:33:32 UTC	1358	IN	Data Raw: c7 16 06 ca 33 e4 34 b3 7f 79 bb a3 e8 df 1a 8a 1a d7 17 01 72 95 d5 5e f6 86 93 61 c1 54 5a da 60 85 ee 6b 6e 83 50 76 df c9 76 f7 6e 06 df 9d b4 3c 1d bf 68 81 be e0 10 7a fc 3a 7f 2a 6a d9 4a 8f 05 0d 8c 91 bb 1f 73 3b 6e 7e 03 23 7d 80 a6 d2 4c 79 6e 3e 03 e5 fb 47 fd ed 48 6a 14 d0 d0 b1 b5 e1 18 c9 d4 49 f7 9d 20 63 a6 cb 81 f3 39 ad 2f d3 1f 1d e5 46 2d 91 bb f2 8d 52 69 24 05 8f 3b 2e 3c dc 8e bf 85 4e 47 78 56 df c5 f8 d2 c3 1b 48 fe c4 6b 93 ef f0 0a 3c 32 4e 00 f7 91 5c 03 8c f1 17 9e 57 95 fd b9 58 b1 f2 1e 01 47 b9 40 0a 3d c0 56 8e ca c3 1a b5 37 8e d0 7a ff 00 1a f9 2c bd ad 8a 14 a9 ee db a9 f4 fe 52 94 51 45 75 0b 95 45 14 51 42 11 45 14 50 84 51 45 14 21 14 51 45 08 4f f6 6f 87 73 ee 20 87 56 9f 58 9a 38 b5 63 56 9e 6b aa 6a c6 46 71 9c Data Ascii: 34yr^aTZ`knPvvn<hz:*jJs;n~#}Lyn>GHjI c9/F-Ri$;.<NGxVHk<2N\WXG@=V7z,RQEuEQBEPQE!QEOos VX8cVkjFq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49756	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:32 UTC	814	OUT	GET /embed/pD218Mqhqms?&autoplay=0&rel=0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:33 UTC	2202	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 01 Oct 2024 18:33:32 GMT Strict-Transport-Security: max-age=31536000 Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Content-Security-Policy: require-trusted-types-for 'script' Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=wX-0cl8XX6M; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=tZ04dA0nttc; Domain=.youtube.com; Expires=Sun, 30-Mar-2025 18:33:32 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgNQ%3D%3D; Domain=.youtube.com; Expires=Sun, 30-Mar-2025 18:33:32 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6c 58 36 58 5a 68 5a 4f 75 37 49 49 47 4e 4c 66 44 30 38 78 4b 51 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="lX6XZhZOu7IIGNLfD08xKQ">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 41 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e Data Ascii: ;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{fon
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 6e 63 65 3d 22 39 63 36 50 74 76 74 43 6d 33 33 56 43 39 58 6d 70 31 52 6a 69 67 22 3e 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 62 6f 64 79 20 7b 66 6f 6e 74 3a 20 31 32 70 78 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 70 6c 61 79 65 72 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 Data Ascii: nce="9c6PtvtCm33VC9Xmp1Rjig">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 29 7d 3b 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 2c 66 61 6c 73 65 29 7d 69 66 28 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 74 69 63 6b 28 22 76 63 Data Ascii: webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(vName,startTick)};d.addEventListener(vName,startTick,false)}if(d.addEventListener)d.addEventListener(vName,function(){ytcsi.tick("vc
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 61 6c 5f 74 69 63 6b 65 72 5f 62 61 72 5f 72 65 76 61 6d 70 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 64 69 72 65 63 74 5f 72 65 61 63 74 69 6f 6e 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 66 6c 75 73 68 5f 71 75 65 75 65 5f 66 69 78 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 6f 72 64 65 72 65 64 5f 72 65 61 63 74 69 6f 6e 5f 65 78 65 63 75 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6f 77 5f 69 6e 66 6f 5f 63 73 69 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 64 6f 63 6b 65 64 5f 63 68 61 74 5f 6d 65 73 73 61 67 65 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 65 6e 74 69 74 79 5f 73 Data Ascii: al_ticker_bar_revamp":true,"enable_client_only_wiz_direct_reactions":true,"enable_client_only_wiz_flush_queue_fix":true,"enable_client_only_wiz_ordered_reaction_execution":true,"enable_cow_info_csi":true,"enable_docked_chat_messages":true,"enable_entity_s
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 64 72 6f 70 64 6f 77 6e 5f 66 69 78 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 65 6c 5f 65 72 72 6f 72 5f 72 6f 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 75 69 64 65 5f 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 63 6f 6e 74 72 6f 6c 6c 65 72 5f 65 78 74 72 61 63 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 72 74 61 5f 6d 61 6e 61 67 65 72 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 69 6e 63 72 65 61 73 65 64 5f 6d 69 6e 5f 68 65 69 67 68 74 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 63 6c 69 63 6b 5f 77 69 74 68 5f 6c 61 79 65 72 5f 66 72 6f 6d 5f 65 6c 65 6d 65 6e 74 5f 69 6e 5f 63 6f 6d Data Ascii: ":true,"kevlar_dropdown_fix":true,"kevlar_gel_error_routing":true,"kevlar_guide_refresh":true,"live_chat_enable_controller_extraction":true,"live_chat_enable_rta_manager":true,"live_chat_increased_min_height":true,"log_click_with_layer_from_element_in_com
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 77 65 62 5f 64 65 64 75 70 65 5f 76 65 5f 67 72 61 66 74 69 6e 67 22 3a 74 72 75 65 Data Ascii: e_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":true,"web_dedupe_ve_grafting":true
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 66 65 74 63 68 65 73 22 3a 39 39 39 39 2c 22 79 74 69 64 62 5f 72 65 6d 61 6b 65 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 79 74 69 64 62 5f 72 65 6f 70 65 6e 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 57 65 62 43 6c 69 65 6e 74 52 65 6c 65 61 73 65 50 72 6f 63 65 73 73 43 72 69 74 69 63 61 6c 5f 5f 79 6f 75 74 75 62 65 5f 65 6d 62 65 64 73 5f 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 5f 6f 76 65 72 72 69 64 65 22 3a 22 22 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 73 79 6e 74 68 5f 63 68 5f 68 65 61 64 65 72 73 5f 62 61 6e 6e 65 64 5f 75 72 6c 73 5f 72 65 67 65 78 22 3a 22 22 2c 22 69 6c 5f 70 61 79 6c 6f 61 64 5f 73 63 72 61 70 69 6e 67 22 3a 22 22 2c 22 6c 69 76 65 5f 63 68 61 74 5f 75 6e 69 63 6f 64 65 5f 65 6d 6f 6a 69 5f 6a 73 6f 6e 5f 75 72 Data Ascii: fetches":9999,"ytidb_remake_db_retries":3,"ytidb_reopen_db_retries":3,"WebClientReleaseProcessCritical__youtube_embeds_client_version_override":"","embeds_web_synth_ch_headers_banned_urls_regex":"","il_payload_scraping":"","live_chat_unicode_emoji_json_ur
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 7a 30 39 22 7d 2c 22 62 72 6f 77 73 65 72 4e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 2c 22 61 63 63 65 70 74 48 65 61 64 65 72 22 3a 22 74 65 78 74 2f 68 74 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 3b 71 5c 75 30 30 33 64 30 2e 39 2c 69 6d 61 67 65 2f 61 76 69 66 2c 69 6d 61 67 65 2f 77 65 62 70 2c 69 6d 61 67 65 2f 61 70 6e 67 2c 2a 2f 2a 3b 71 5c 75 30 30 33 64 30 2e 38 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 73 69 67 6e 65 64 2d 65 78 63 68 61 6e 67 65 3b 76 5c 75 30 30 33 64 62 33 3b 71 5c 75 30 30 33 64 30 2e 37 22 2c 22 64 65 76 69 63 65 45 78 70 65 72 69 6d 65 6e 74 49 64 22 3a 22 43 68 Data Ascii: z09"},"browserName":"Chrome","browserVersion":"117.0.0.0","acceptHeader":"text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,/;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.7","deviceExperimentId":"Ch
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 62 5f 62 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 65 6c 5f 68 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 73 61 5f 65 66 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 63 74 69 6f 6e 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 63 65 6e 74 65 72 5f 61 6c 69 67 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 64 5f 70 6f 64 5f 64 69 73 61 62 6c 65 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 70 65 72 73 69 73 74 5f 61 64 73 5f 71 75 61 6c 69 74 79 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 6c 6c 6f 77 5f 64 72 6d 5f 6f 76 65 72 72 69 64 65 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 6c 6c 6f 77 5f 6c 69 76 65 5f 61 75 74 6f 70 6c 61 79 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 Data Ascii: b_b\u003dtrue\u0026ab_det_el_h\u003dtrue\u0026ab_sa_ef\u003dtrue\u0026action_companion_center_align_description\u003dtrue\u0026ad_pod_disable_companion_persist_ads_quality\u003dtrue\u0026allow_drm_override\u003dtrue\u0026allow_live_autoplay\u003dtrue\u002

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49758	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:32 UTC	814	OUT	GET /embed/eSnzhoiLwx8?&autoplay=0&rel=0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:33 UTC	2202	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 01 Oct 2024 18:33:32 GMT Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Content-Security-Policy: require-trusted-types-for 'script' Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=aDlejfzjyW4; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=PwERhw-XNUw; Domain=.youtube.com; Expires=Sun, 30-Mar-2025 18:33:32 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgMA%3D%3D; Domain=.youtube.com; Expires=Sun, 30-Mar-2025 18:33:32 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4d 71 78 49 2d 62 59 66 53 61 76 6f 58 65 30 46 5a 4a 65 65 39 77 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="MqxI-bYfSavoXe0FZJee9w">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 41 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e Data Ascii: ;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{fon
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 6e 63 65 3d 22 79 47 6a 78 45 51 4a 4a 38 53 75 36 59 44 66 68 42 37 45 6c 4f 51 22 3e 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 62 6f 64 79 20 7b 66 6f 6e 74 3a 20 31 32 70 78 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 70 6c 61 79 65 72 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 Data Ascii: nce="yGjxEQJJ8Su6YDfhB7ElOQ">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 29 7d 3b 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 2c 66 61 6c 73 65 29 7d 69 66 28 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 74 69 63 6b 28 22 76 63 Data Ascii: webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(vName,startTick)};d.addEventListener(vName,startTick,false)}if(d.addEventListener)d.addEventListener(vName,function(){ytcsi.tick("vc
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 61 6c 5f 74 69 63 6b 65 72 5f 62 61 72 5f 72 65 76 61 6d 70 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 64 69 72 65 63 74 5f 72 65 61 63 74 69 6f 6e 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 66 6c 75 73 68 5f 71 75 65 75 65 5f 66 69 78 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 6f 72 64 65 72 65 64 5f 72 65 61 63 74 69 6f 6e 5f 65 78 65 63 75 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6f 77 5f 69 6e 66 6f 5f 63 73 69 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 64 6f 63 6b 65 64 5f 63 68 61 74 5f 6d 65 73 73 61 67 65 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 65 6e 74 69 74 79 5f 73 Data Ascii: al_ticker_bar_revamp":true,"enable_client_only_wiz_direct_reactions":true,"enable_client_only_wiz_flush_queue_fix":true,"enable_client_only_wiz_ordered_reaction_execution":true,"enable_cow_info_csi":true,"enable_docked_chat_messages":true,"enable_entity_s
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 64 72 6f 70 64 6f 77 6e 5f 66 69 78 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 65 6c 5f 65 72 72 6f 72 5f 72 6f 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 75 69 64 65 5f 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 63 6f 6e 74 72 6f 6c 6c 65 72 5f 65 78 74 72 61 63 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 72 74 61 5f 6d 61 6e 61 67 65 72 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 69 6e 63 72 65 61 73 65 64 5f 6d 69 6e 5f 68 65 69 67 68 74 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 63 6c 69 63 6b 5f 77 69 74 68 5f 6c 61 79 65 72 5f 66 72 6f 6d 5f 65 6c 65 6d 65 6e 74 5f 69 6e 5f 63 6f 6d Data Ascii: ":true,"kevlar_dropdown_fix":true,"kevlar_gel_error_routing":true,"kevlar_guide_refresh":true,"live_chat_enable_controller_extraction":true,"live_chat_enable_rta_manager":true,"live_chat_increased_min_height":true,"log_click_with_layer_from_element_in_com
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 77 65 62 5f 64 65 64 75 70 65 5f 76 65 5f 67 72 61 66 74 69 6e 67 22 3a 74 72 75 65 Data Ascii: e_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":true,"web_dedupe_ve_grafting":true
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 66 65 74 63 68 65 73 22 3a 39 39 39 39 2c 22 79 74 69 64 62 5f 72 65 6d 61 6b 65 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 79 74 69 64 62 5f 72 65 6f 70 65 6e 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 57 65 62 43 6c 69 65 6e 74 52 65 6c 65 61 73 65 50 72 6f 63 65 73 73 43 72 69 74 69 63 61 6c 5f 5f 79 6f 75 74 75 62 65 5f 65 6d 62 65 64 73 5f 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 5f 6f 76 65 72 72 69 64 65 22 3a 22 22 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 73 79 6e 74 68 5f 63 68 5f 68 65 61 64 65 72 73 5f 62 61 6e 6e 65 64 5f 75 72 6c 73 5f 72 65 67 65 78 22 3a 22 22 2c 22 69 6c 5f 70 61 79 6c 6f 61 64 5f 73 63 72 61 70 69 6e 67 22 3a 22 22 2c 22 6c 69 76 65 5f 63 68 61 74 5f 75 6e 69 63 6f 64 65 5f 65 6d 6f 6a 69 5f 6a 73 6f 6e 5f 75 72 Data Ascii: fetches":9999,"ytidb_remake_db_retries":3,"ytidb_reopen_db_retries":3,"WebClientReleaseProcessCritical__youtube_embeds_client_version_override":"","embeds_web_synth_ch_headers_banned_urls_regex":"","il_payload_scraping":"","live_chat_unicode_emoji_json_ur
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 78 49 71 47 45 4e 42 54 56 4e 45 51 6c 56 51 4c 56 70 78 4c 55 52 4a 54 33 6f 35 51 58 4e 6b 51 6e 63 39 50 51 25 33 44 25 33 44 22 7d 2c 22 62 72 6f 77 73 65 72 4e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 2c 22 61 63 63 65 70 74 48 65 61 64 65 72 22 3a 22 74 65 78 74 2f 68 74 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 3b 71 5c 75 30 30 33 64 30 2e 39 2c 69 6d 61 67 65 2f 61 76 69 66 2c 69 6d 61 67 65 2f 77 65 62 70 2c 69 6d 61 67 65 2f 61 70 6e 67 2c 2a 2f 2a 3b 71 5c 75 30 30 33 64 30 2e 38 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 73 69 67 6e 65 64 2d 65 78 63 68 61 6e 67 65 3b 76 5c 75 30 30 33 Data Ascii: xIqGENBTVNEQlVQLVpxLURJT3o5QXNkQnc9PQ%3D%3D"},"browserName":"Chrome","browserVersion":"117.0.0.0","acceptHeader":"text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,/;q\u003d0.8,application/signed-exchange;v\u003
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 48 35 5f 75 73 65 5f 61 73 79 6e 63 5f 6c 6f 67 67 69 6e 67 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 31 31 79 5f 68 35 5f 61 73 73 6f 63 69 61 74 65 5f 73 75 72 76 65 79 5f 71 75 65 73 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 61 70 62 5f 62 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 65 6c 5f 68 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 73 61 5f 65 66 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 63 74 69 6f 6e 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 63 65 6e 74 65 72 5f 61 6c 69 67 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 64 5f 70 6f 64 5f 64 69 73 61 62 6c 65 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 70 65 72 73 69 73 74 5f 61 Data Ascii: H5_use_async_logging\u003dtrue\u0026a11y_h5_associate_survey_question\u003dtrue\u0026ab_det_apb_b\u003dtrue\u0026ab_det_el_h\u003dtrue\u0026ab_sa_ef\u003dtrue\u0026action_companion_center_align_description\u003dtrue\u0026ad_pod_disable_companion_persist_a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49759	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:32 UTC	814	OUT	GET /embed/NBEWfKH702s?&autoplay=0&rel=0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:33 UTC	2202	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 01 Oct 2024 18:33:32 GMT Strict-Transport-Security: max-age=31536000 Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Content-Security-Policy: require-trusted-types-for 'script' Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=rBz7ilxP4Po; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=UKiK763tugY; Domain=.youtube.com; Expires=Sun, 30-Mar-2025 18:33:32 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgRg%3D%3D; Domain=.youtube.com; Expires=Sun, 30-Mar-2025 18:33:32 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 48 32 58 68 35 41 69 36 45 41 57 33 79 51 68 58 37 6a 57 38 5a 51 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="H2Xh5Ai6EAW3yQhX7jW8ZQ">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 41 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e Data Ascii: ;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{fon
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 6e 63 65 3d 22 70 67 73 57 63 73 56 61 4f 50 79 62 54 42 78 38 78 52 72 52 6f 77 22 3e 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 62 6f 64 79 20 7b 66 6f 6e 74 3a 20 31 32 70 78 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 70 6c 61 79 65 72 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 Data Ascii: nce="pgsWcsVaOPybTBx8xRrRow">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 29 7d 3b 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 2c 66 61 6c 73 65 29 7d 69 66 28 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 74 69 63 6b 28 22 76 63 Data Ascii: webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(vName,startTick)};d.addEventListener(vName,startTick,false)}if(d.addEventListener)d.addEventListener(vName,function(){ytcsi.tick("vc
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 61 6c 5f 74 69 63 6b 65 72 5f 62 61 72 5f 72 65 76 61 6d 70 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 64 69 72 65 63 74 5f 72 65 61 63 74 69 6f 6e 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 66 6c 75 73 68 5f 71 75 65 75 65 5f 66 69 78 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 6f 72 64 65 72 65 64 5f 72 65 61 63 74 69 6f 6e 5f 65 78 65 63 75 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6f 77 5f 69 6e 66 6f 5f 63 73 69 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 64 6f 63 6b 65 64 5f 63 68 61 74 5f 6d 65 73 73 61 67 65 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 65 6e 74 69 74 79 5f 73 Data Ascii: al_ticker_bar_revamp":true,"enable_client_only_wiz_direct_reactions":true,"enable_client_only_wiz_flush_queue_fix":true,"enable_client_only_wiz_ordered_reaction_execution":true,"enable_cow_info_csi":true,"enable_docked_chat_messages":true,"enable_entity_s
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 5f 63 6f 6e 64 65 6e 73 65 64 5f 72 65 73 70 6f 6e 73 65 22 3a 74 72 75 65 2c 22 6b 65 76 5f 61 64 62 5f 70 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 64 72 6f 70 64 6f 77 6e 5f 66 69 78 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 65 6c 5f 65 72 72 6f 72 5f 72 6f 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 75 69 64 65 5f 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 63 6f 6e 74 72 6f 6c 6c 65 72 5f 65 78 74 72 61 63 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 72 74 61 5f 6d 61 6e 61 67 65 72 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 69 6e 63 72 65 61 73 65 64 5f 6d 69 6e 5f 68 65 69 67 68 74 22 3a 74 72 75 65 2c 22 6c 6f 67 Data Ascii: _condensed_response":true,"kev_adb_pg":true,"kevlar_dropdown_fix":true,"kevlar_gel_error_routing":true,"kevlar_guide_refresh":true,"live_chat_enable_controller_extraction":true,"live_chat_enable_rta_manager":true,"live_chat_increased_min_height":true,"log
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 75 65 2c 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 Data Ascii: ue,"use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enable
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 74 5f 6d 65 74 68 6f 64 22 3a 30 2c 22 77 69 6c 5f 69 63 6f 6e 5f 6d 61 78 5f 63 6f 6e 63 75 72 72 65 6e 74 5f 66 65 74 63 68 65 73 22 3a 39 39 39 39 2c 22 79 74 69 64 62 5f 72 65 6d 61 6b 65 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 79 74 69 64 62 5f 72 65 6f 70 65 6e 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 57 65 62 43 6c 69 65 6e 74 52 65 6c 65 61 73 65 50 72 6f 63 65 73 73 43 72 69 74 69 63 61 6c 5f 5f 79 6f 75 74 75 62 65 5f 65 6d 62 65 64 73 5f 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 5f 6f 76 65 72 72 69 64 65 22 3a 22 22 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 73 79 6e 74 68 5f 63 68 5f 68 65 61 64 65 72 73 5f 62 61 6e 6e 65 64 5f 75 72 6c 73 5f 72 65 67 65 78 22 3a 22 22 2c 22 69 6c 5f 70 61 79 6c 6f 61 64 5f 73 63 72 61 70 69 6e 67 Data Ascii: t_method":0,"wil_icon_max_concurrent_fetches":9999,"ytidb_remake_db_retries":3,"ytidb_reopen_db_retries":3,"WebClientReleaseProcessCritical__youtube_embeds_client_version_override":"","embeds_web_synth_ch_headers_banned_urls_regex":"","il_payload_scraping
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 54 33 6f 35 51 58 4e 6b 51 6e 63 39 50 51 25 33 44 25 33 44 22 7d 2c 22 62 72 6f 77 73 65 72 4e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 2c 22 61 63 63 65 70 74 48 65 61 64 65 72 22 3a 22 74 65 78 74 2f 68 74 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 3b 71 5c 75 30 30 33 64 30 2e 39 2c 69 6d 61 67 65 2f 61 76 69 66 2c 69 6d 61 67 65 2f 77 65 62 70 2c 69 6d 61 67 65 2f 61 70 6e 67 2c 2a 2f 2a 3b 71 5c 75 30 30 33 64 30 2e 38 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 73 69 67 6e 65 64 2d 65 78 63 68 61 6e 67 65 3b 76 5c 75 30 30 33 64 62 33 3b 71 5c 75 30 30 33 64 30 2e 37 22 2c 22 64 65 76 69 63 65 Data Ascii: T3o5QXNkQnc9PQ%3D%3D"},"browserName":"Chrome","browserVersion":"117.0.0.0","acceptHeader":"text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,/;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.7","device
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 61 70 62 5f 62 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 65 6c 5f 68 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 73 61 5f 65 66 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 63 74 69 6f 6e 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 63 65 6e 74 65 72 5f 61 6c 69 67 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 64 5f 70 6f 64 5f 64 69 73 61 62 6c 65 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 70 65 72 73 69 73 74 5f 61 64 73 5f 71 75 61 6c 69 74 79 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 6c 6c 6f 77 5f 64 72 6d 5f 6f 76 65 72 72 69 64 65 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 6c 6c 6f 77 5f 6c 69 Data Ascii: n\u003dtrue\u0026ab_det_apb_b\u003dtrue\u0026ab_det_el_h\u003dtrue\u0026ab_sa_ef\u003dtrue\u0026action_companion_center_align_description\u003dtrue\u0026ad_pod_disable_companion_persist_ads_quality\u003dtrue\u0026allow_drm_override\u003dtrue\u0026allow_li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49757	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:32 UTC	814	OUT	GET /embed/JCcqzCo7X-M?&autoplay=0&rel=0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:33 UTC	2202	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 01 Oct 2024 18:33:33 GMT Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: require-trusted-types-for 'script' Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=FhLLzeuQ2wo; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=tqOxIKe9BCM; Domain=.youtube.com; Expires=Sun, 30-Mar-2025 18:33:33 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D; Domain=.youtube.com; Expires=Sun, 30-Mar-2025 18:33:33 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 30 45 74 42 52 32 42 4e 76 63 47 4d 51 41 63 71 51 6c 38 48 52 41 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="0EtBR2BNvcGMQAcqQl8HRA">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 41 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e Data Ascii: ;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{fon
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 6e 63 65 3d 22 36 6d 4a 53 73 4d 69 38 30 72 33 67 4b 6e 4e 7a 55 47 57 64 56 77 22 3e 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 62 6f 64 79 20 7b 66 6f 6e 74 3a 20 31 32 70 78 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 70 6c 61 79 65 72 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 Data Ascii: nce="6mJSsMi80r3gKnNzUGWdVw">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 29 7d 3b 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 2c 66 61 6c 73 65 29 7d 69 66 28 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 74 69 63 6b 28 22 76 63 Data Ascii: webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(vName,startTick)};d.addEventListener(vName,startTick,false)}if(d.addEventListener)d.addEventListener(vName,function(){ytcsi.tick("vc
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 64 69 72 65 63 74 5f 72 65 61 63 74 69 6f 6e 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 66 6c 75 73 68 5f 71 75 65 75 65 5f 66 69 78 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 6f 72 64 65 72 65 64 5f 72 65 61 63 74 69 6f 6e 5f 65 78 65 63 75 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6f 77 5f 69 6e 66 6f 5f 63 73 69 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 64 6f 63 6b 65 64 5f 63 68 61 74 5f 6d 65 73 73 61 67 65 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 65 6e 74 69 74 79 5f 73 74 6f 72 65 5f 66 72 6f 6d 5f 64 65 70 65 6e 64 65 6e 63 79 Data Ascii: ":true,"enable_client_only_wiz_direct_reactions":true,"enable_client_only_wiz_flush_queue_fix":true,"enable_client_only_wiz_ordered_reaction_execution":true,"enable_cow_info_csi":true,"enable_docked_chat_messages":true,"enable_entity_store_from_dependency
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 6f 77 6e 5f 66 69 78 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 65 6c 5f 65 72 72 6f 72 5f 72 6f 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 75 69 64 65 5f 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 63 6f 6e 74 72 6f 6c 6c 65 72 5f 65 78 74 72 61 63 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 72 74 61 5f 6d 61 6e 61 67 65 72 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 69 6e 63 72 65 61 73 65 64 5f 6d 69 6e 5f 68 65 69 67 68 74 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 63 6c 69 63 6b 5f 77 69 74 68 5f 6c 61 79 65 72 5f 66 72 6f 6d 5f 65 6c 65 6d 65 6e 74 5f 69 6e 5f 63 6f 6d 6d 61 6e 64 5f 68 61 6e 64 6c 65 72 22 3a 74 72 75 65 2c 22 Data Ascii: own_fix":true,"kevlar_gel_error_routing":true,"kevlar_guide_refresh":true,"live_chat_enable_controller_extraction":true,"live_chat_enable_rta_manager":true,"live_chat_increased_min_height":true,"log_click_with_layer_from_element_in_command_handler":true,"
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 77 65 62 5f 64 65 64 75 70 65 5f 76 65 5f 67 72 61 66 74 69 6e 67 22 3a 74 72 75 65 2c 22 77 65 62 5f 65 6e 61 62 6c 65 5f 61 62 5f 65 6d 5f 72 Data Ascii: true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":true,"web_dedupe_ve_grafting":true,"web_enable_ab_em_r
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 5f 72 65 6d 61 6b 65 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 79 74 69 64 62 5f 72 65 6f 70 65 6e 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 57 65 62 43 6c 69 65 6e 74 52 65 6c 65 61 73 65 50 72 6f 63 65 73 73 43 72 69 74 69 63 61 6c 5f 5f 79 6f 75 74 75 62 65 5f 65 6d 62 65 64 73 5f 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 5f 6f 76 65 72 72 69 64 65 22 3a 22 22 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 73 79 6e 74 68 5f 63 68 5f 68 65 61 64 65 72 73 5f 62 61 6e 6e 65 64 5f 75 72 6c 73 5f 72 65 67 65 78 22 3a 22 22 2c 22 69 6c 5f 70 61 79 6c 6f 61 64 5f 73 63 72 61 70 69 6e 67 22 3a 22 22 2c 22 6c 69 76 65 5f 63 68 61 74 5f 75 6e 69 63 6f 64 65 5f 65 6d 6f 6a 69 5f 6a 73 6f 6e 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 Data Ascii: _remake_db_retries":3,"ytidb_reopen_db_retries":3,"WebClientReleaseProcessCritical__youtube_embeds_client_version_override":"","embeds_web_synth_ch_headers_banned_urls_regex":"","il_payload_scraping":"","live_chat_unicode_emoji_json_url":"https://www.gsta
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 77 73 65 72 4e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 2c 22 61 63 63 65 70 74 48 65 61 64 65 72 22 3a 22 74 65 78 74 2f 68 74 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 3b 71 5c 75 30 30 33 64 30 2e 39 2c 69 6d 61 67 65 2f 61 76 69 66 2c 69 6d 61 67 65 2f 77 65 62 70 2c 69 6d 61 67 65 2f 61 70 6e 67 2c 2a 2f 2a 3b 71 5c 75 30 30 33 64 30 2e 38 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 73 69 67 6e 65 64 2d 65 78 63 68 61 6e 67 65 3b 76 5c 75 30 30 33 64 62 33 3b 71 5c 75 30 30 33 64 30 2e 37 22 2c 22 64 65 76 69 63 65 45 78 70 65 72 69 6d 65 6e 74 49 64 22 3a 22 43 68 78 4f 65 6c 46 35 54 55 52 6e Data Ascii: wserName":"Chrome","browserVersion":"117.0.0.0","acceptHeader":"text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,/;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.7","deviceExperimentId":"ChxOelF5TURn
2024-10-01 18:33:33 UTC	2202	IN	Data Raw: 79 5f 71 75 65 73 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 65 6c 5f 68 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 73 61 5f 65 66 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 63 74 69 6f 6e 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 63 65 6e 74 65 72 5f 61 6c 69 67 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 64 5f 70 6f 64 5f 64 69 73 61 62 6c 65 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 70 65 72 73 69 73 74 5f 61 64 73 5f 71 75 61 6c 69 74 79 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 6c 6c 6f 77 5f 64 72 6d 5f 6f 76 65 72 72 69 64 65 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 6c 6c 6f 77 5f 6c 69 76 65 5f 61 75 74 6f 70 6c 61 79 5c 75 30 30 33 64 74 72 Data Ascii: y_question\u003dtrue\u0026ab_det_el_h\u003dtrue\u0026ab_sa_ef\u003dtrue\u0026action_companion_center_align_description\u003dtrue\u0026ad_pod_disable_companion_persist_ads_quality\u003dtrue\u0026allow_drm_override\u003dtrue\u0026allow_live_autoplay\u003dtr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49769	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:33 UTC	370	OUT	GET /media/phyidkre/qe-logo.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:33 UTC	2114	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Tue, 09 Jun 2020 11:33:59 GMT Accept-Ranges: bytes ETag: "9bda3fde513ed61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:45 GMT Connection: close Content-Length: 52948
2024-10-01 18:33:33 UTC	14270	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 38 35 70 78 22 20 68 65 69 67 68 74 3d 22 33 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 35 20 33 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 36 31 20 28 38 39 35 38 31 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 20 3c 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="285px" height="34px" viewBox="0 0 285 34" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 61 (89581) - https://sketch.com --> <t
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: 2e 32 32 33 30 33 32 20 31 38 35 2e 35 37 36 31 37 37 2c 36 2e 34 33 37 38 30 38 20 43 31 38 35 2e 34 39 35 34 36 35 2c 36 2e 36 35 32 35 38 34 20 31 38 35 2e 34 35 35 31 30 39 2c 37 2e 32 30 39 33 36 20 31 38 35 2e 34 35 35 31 30 39 2c 38 2e 31 30 38 38 32 20 4c 31 38 35 2e 34 35 35 31 30 39 2c 39 2e 37 39 38 39 38 34 20 4c 31 38 30 2e 38 34 37 30 30 31 2c 39 2e 37 39 38 39 38 34 20 4c 31 38 30 2e 38 34 37 30 30 31 2c 38 2e 37 31 36 38 39 36 20 43 31 38 30 2e 38 34 37 30 30 31 2c 37 2e 34 36 38 35 39 36 20 31 38 30 2e 39 39 30 36 34 31 2c 36 2e 35 30 36 32 30 38 20 31 38 31 2e 32 37 38 36 30 35 2c 35 2e 38 32 39 37 33 32 20 43 31 38 31 2e 35 36 36 35 36 39 2c 35 2e 31 35 33 32 35 36 20 31 38 32 2e 31 34 33 38 36 35 2c 34 2e 35 35 35 34 34 20 31 38 33 2e Data Ascii: .223032 185.576177,6.437808 C185.495465,6.652584 185.455109,7.20936 185.455109,8.10882 L185.455109,9.798984 L180.847001,9.798984 L180.847001,8.716896 C180.847001,7.468596 180.990641,6.506208 181.278605,5.829732 C181.566569,5.153256 182.143865,4.55544 183.
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: 31 39 36 31 36 2c 33 32 2e 30 38 38 38 39 34 39 20 43 31 30 2e 31 39 38 39 38 31 39 2c 33 32 2e 33 35 38 36 39 30 32 20 39 2e 39 37 34 39 35 39 39 37 2c 33 32 2e 35 36 30 32 31 34 32 20 39 2e 37 30 37 33 33 30 37 35 2c 33 32 2e 36 39 35 31 31 31 38 20 43 39 2e 34 34 30 35 35 36 35 38 2c 33 32 2e 38 33 30 38 33 32 20 39 2e 31 33 33 35 39 35 32 37 2c 33 32 2e 38 39 38 32 38 30 39 20 38 2e 37 38 36 34 34 36 38 33 2c 33 32 2e 38 39 38 32 38 30 39 20 43 38 2e 33 39 30 35 36 30 37 39 2c 33 32 2e 38 39 38 32 38 30 39 20 38 2e 30 36 33 30 37 38 33 39 2c 33 32 2e 38 33 33 32 39 39 37 20 37 2e 38 30 32 32 38 39 35 34 2c 33 32 2e 37 30 34 39 38 32 34 20 43 37 2e 35 34 32 33 35 35 37 33 2c 33 32 2e 35 37 36 36 36 35 31 20 37 2e 33 34 39 39 37 30 35 31 2c 33 32 2e 34 Data Ascii: 19616,32.0888949 C10.1989819,32.3586902 9.97495997,32.5602142 9.70733075,32.6951118 C9.44055658,32.830832 9.13359527,32.8982809 8.78644683,32.8982809 C8.39056079,32.8982809 8.06307839,32.8332997 7.80228954,32.7049824 C7.54235573,32.5766651 7.34997051,32.4
2024-10-01 18:33:33 UTC	5910	IN	Data Raw: 35 36 36 35 35 20 31 31 33 2e 34 39 33 37 37 31 2c 32 34 2e 37 35 39 34 32 37 35 20 43 31 31 33 2e 37 35 37 31 32 35 2c 32 34 2e 36 36 32 33 36 37 20 31 31 34 2e 30 33 37 35 38 2c 32 34 2e 36 31 34 36 35 39 33 20 31 31 34 2e 33 33 37 37 30 31 2c 32 34 2e 36 31 34 36 35 39 33 20 43 31 31 34 2e 37 39 37 37 31 35 2c 32 34 2e 36 31 34 36 35 39 33 20 31 31 35 2e 31 39 30 31 38 31 2c 32 34 2e 37 32 32 34 31 32 39 20 31 31 35 2e 35 31 33 33 38 38 2c 32 34 2e 39 33 38 37 34 32 37 20 43 31 31 35 2e 38 33 36 35 39 35 2c 32 35 2e 31 35 35 38 39 35 20 31 31 36 2e 30 33 34 31 31 31 2c 32 35 2e 34 30 36 37 37 31 38 20 31 31 36 2e 31 30 35 30 38 2c 32 35 2e 36 38 39 37 32 37 39 20 43 31 31 36 2e 31 37 36 39 30 34 2c 32 35 2e 39 37 32 36 38 34 20 31 31 36 2e 32 31 33 36 Data Ascii: 56655 113.493771,24.7594275 C113.757125,24.662367 114.03758,24.6146593 114.337701,24.6146593 C114.797715,24.6146593 115.190181,24.7224129 115.513388,24.9387427 C115.836595,25.155895 116.034111,25.4067718 116.10508,25.6897279 C116.176904,25.972684 116.2136

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49770	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:33 UTC	379	OUT	GET /dist/js/app.js?v=638633792821681415 HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:33 UTC	2124	IN	HTTP/1.1 200 OK Content-Type: application/javascript Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Wed, 20 Apr 2022 04:29:57 GMT Accept-Ranges: bytes ETag: "c192494a6f54d81:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:45 GMT Connection: close Content-Length: 692060
2024-10-01 18:33:33 UTC	14260	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: 74 72 48 61 6e 64 6c 65 3a 7b 7d 2c 66 69 6e 64 3a 7b 7d 2c 72 65 6c 61 74 69 76 65 3a 7b 22 3e 22 3a 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 66 69 72 73 74 3a 21 30 7d 2c 22 20 22 3a 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 7d 2c 22 2b 22 3a 7b 64 69 72 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 66 69 72 73 74 3a 21 30 7d 2c 22 7e 22 3a 7b 64 69 72 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 7d 7d 2c 70 72 65 46 69 6c 74 65 72 3a 7b 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 3d 65 5b 31 5d 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 2c 65 5b 33 5d 3d 28 65 5b 33 5d 7c 7c 65 5b 34 5d 7c 7c 65 5b 35 5d 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 2c 22 Data Ascii: trHandle:{},find:{},relative:{">":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(e){return e[1]=e[1].replace(te,ne),e[3]=(e[3]\|\|e[4]\|\|e[5]\|\|"").replace(te,ne),"
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: 29 7b 6f 5b 30 5d 5b 33 5d 2e 61 64 64 28 6c 28 30 2c 65 2c 6d 28 72 29 3f 72 3a 52 2c 65 2e 6e 6f 74 69 66 79 57 69 74 68 29 29 2c 6f 5b 31 5d 5b 33 5d 2e 61 64 64 28 6c 28 30 2c 65 2c 6d 28 74 29 3f 74 3a 52 29 29 2c 6f 5b 32 5d 5b 33 5d 2e 61 64 64 28 6c 28 30 2c 65 2c 6d 28 6e 29 3f 6e 3a 4d 29 29 7d 29 2e 70 72 6f 6d 69 73 65 28 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 3f 53 2e 65 78 74 65 6e 64 28 65 2c 61 29 3a 61 7d 7d 2c 73 3d 7b 7d 3b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 6f 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 5b 32 5d 2c 72 3d 74 5b 35 5d 3b 61 5b 74 5b 31 5d 5d 3d 6e 2e 61 64 64 2c 72 26 26 6e 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: ){o[0][3].add(l(0,e,m(r)?r:R,e.notifyWith)),o[1][3].add(l(0,e,m(t)?t:R)),o[2][3].add(l(0,e,m(n)?n:M))}).promise()},promise:function(e){return null!=e?S.extend(e,a):a}},s={};return S.each(o,function(e,t){var n=t[2],r=t[5];a[t[1]]=n.add,r&&n.add(function(){
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: 72 2e 6e 61 6d 65 73 70 61 63 65 3a 72 2e 6f 72 69 67 54 79 70 65 2c 72 2e 73 65 6c 65 63 74 6f 72 2c 72 2e 68 61 6e 64 6c 65 72 29 2c 74 68 69 73 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 66 6f 72 28 69 20 69 6e 20 65 29 74 68 69 73 2e 6f 66 66 28 69 2c 74 2c 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 72 65 74 75 72 6e 21 31 21 3d 3d 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 28 6e 3d 74 2c 74 3d 76 6f 69 64 20 30 29 2c 21 31 3d 3d 3d 6e 26 26 28 6e 3d 45 65 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 65 2c 6e 2c 74 29 7d 29 7d 7d 29 3b 76 61 72 20 4e 65 3d 2f 3c 73 63 72 69 70 74 7c 3c 73 74 79 6c Data Ascii: r.namespace:r.origType,r.selector,r.handler),this;if("object"==typeof e){for(i in e)this.off(i,t,e[i]);return this}return!1!==t&&"function"!=typeof t\|\|(n=t,t=void 0),!1===n&&(n=Ee),this.each(function(){S.event.remove(this,e,n,t)})}});var Ne=/<script\|<styl
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 74 6f 70 3b 64 65 6c 65 74 65 20 65 2e 73 74 6f 70 2c 74 28 6f 29 7d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 69 26 26 28 6f 3d 65 2c 65 3d 69 2c 69 3d 76 6f 69 64 20 30 29 2c 65 26 26 74 68 69 73 2e 71 75 65 75 65 28 69 7c 7c 22 66 78 22 2c 5b 5d 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 21 30 2c 74 3d 6e 75 6c 6c 21 3d 69 26 26 69 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 2c 6e 3d 53 2e 74 69 6d 65 72 73 2c 72 3d 59 2e 67 65 74 28 74 68 69 73 29 3b 69 66 28 74 29 72 5b 74 5d 26 26 72 5b 74 5d 2e 73 74 6f 70 26 26 61 28 72 5b 74 5d 29 3b 65 6c 73 65 20 66 6f 72 28 74 20 69 6e 20 72 29 72 5b 74 5d 26 26 72 5b 74 5d 2e 73 74 6f 70 26 Data Ascii: tion(e){var t=e.stop;delete e.stop,t(o)};return"string"!=typeof i&&(o=e,e=i,i=void 0),e&&this.queue(i\|\|"fx",[]),this.each(function(){var e=!0,t=null!=i&&i+"queueHooks",n=S.timers,r=Y.get(this);if(t)r[t]&&r[t].stop&&a(r[t]);else for(t in r)r[t]&&r[t].stop&
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: 28 61 3d 73 2e 65 72 72 6f 72 29 29 29 3a 28 61 3d 6c 2c 21 65 26 26 6c 7c 7c 28 6c 3d 22 65 72 72 6f 72 22 2c 65 3c 30 26 26 28 65 3d 30 29 29 29 2c 54 2e 73 74 61 74 75 73 3d 65 2c 54 2e 73 74 61 74 75 73 54 65 78 74 3d 28 74 7c 7c 6c 29 2b 22 22 2c 69 3f 78 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 79 2c 5b 6f 2c 6c 2c 54 5d 29 3a 78 2e 72 65 6a 65 63 74 57 69 74 68 28 79 2c 5b 54 2c 6c 2c 61 5d 29 2c 54 2e 73 74 61 74 75 73 43 6f 64 65 28 77 29 2c 77 3d 76 6f 69 64 20 30 2c 67 26 26 6d 2e 74 72 69 67 67 65 72 28 69 3f 22 61 6a 61 78 53 75 63 63 65 73 73 22 3a 22 61 6a 61 78 45 72 72 6f 72 22 2c 5b 54 2c 76 2c 69 3f 6f 3a 61 5d 29 2c 62 2e 66 69 72 65 57 69 74 68 28 79 2c 5b 54 2c 6c 5d 29 2c 67 26 26 28 6d 2e 74 72 69 67 67 65 72 28 22 61 6a 61 78 43 6f Data Ascii: (a=s.error))):(a=l,!e&&l\|\|(l="error",e<0&&(e=0))),T.status=e,T.statusText=(t\|\|l)+"",i?x.resolveWith(y,[o,l,T]):x.rejectWith(y,[T,l,a]),T.statusCode(w),w=void 0,g&&m.trigger(i?"ajaxSuccess":"ajaxError",[T,v,i?o:a]),b.fireWith(y,[T,l]),g&&(m.trigger("ajaxCo
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 3d 3d 3d 6f 7d 29 3b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 74 2c 6f 2c 6e 29 7b 76 61 72 20 69 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 3a 74 2e 73 6c 69 63 65 28 30 2c 4e 28 74 2c 27 6e 61 6d 65 27 2c 6e 29 29 3b 72 65 74 75 72 6e 20 69 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 6e 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e Data Ascii: ,function(e){return e[t]===o});return e.indexOf(n)}function P(t,o,n){var i=void 0===n?t:t.slice(0,N(t,'name',n));return i.forEach(function(t){t['function']&&console.warn('`modifier.function` is deprecated, use `modifier.fn`!');var n=t['function']\|\|t.fn;t.
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 2e 64 65 66 61 75 6c 74 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 Data Ascii: n(t){return t.offsetHeight},triggerTransitionEnd:function(t){o.default(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var i
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 67 65 74 44 69 6d 65 6e 73 69 6f 6e 28 29 3b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 6e 5d 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 5b 6e 5d 2b 22 70 78 22 2c 64 2e 72 65 66 6c 6f 77 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 69 6e 67 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 65 20 73 68 6f 77 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 41 72 72 61 79 2e 6c 65 6e 67 74 68 3b 69 66 28 69 3e 30 29 Data Ascii: efaultPrevented()){var n=this._getDimension();this._element.style[n]=this._element.getBoundingClientRect()[n]+"px",d.reflow(this._element),o.default(this._element).addClass("collapsing").removeClass("collapse show");var i=this._triggerArray.length;if(i>0)
2024-10-01 18:33:33 UTC	16384	IN	Data Raw: 74 29 2e 68 61 73 43 6c 61 73 73 28 22 66 61 64 65 22 29 29 7b 76 61 72 20 73 3d 64 2e 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 29 3b 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 29 2e 6f 6e 65 28 64 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 61 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 73 29 7d 65 6c 73 65 20 61 28 29 7d 65 6c 73 65 20 74 26 26 74 28 29 7d 2c 65 2e 5f 61 64 6a 75 73 74 44 69 61 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d Data Ascii: t).hasClass("fade")){var s=d.getTransitionDurationFromElement(this._backdrop);o.default(this._backdrop).one(d.TRANSITION_END,a).emulateTransitionEnd(s)}else a()}else t&&t()},e._adjustDialog=function(){var t=this._element.scrollHeight>document.documentElem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49771	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:33 UTC	797	OUT	GET /s/player/d9418494/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:33:34 UTC	681	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 389410 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 08:12:33 GMT Expires: Wed, 01 Oct 2025 08:12:33 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 30 Sep 2024 04:15:05 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 37261 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:34 UTC	709	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2024-10-01 18:33:34 UTC	1390	IN	Data Raw: 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 65 6e 64 65 64 2d 6d 6f 64 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 79 74 70 2d 62 69 67 2d Data Ascii: d-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-
2024-10-01 18:33:34 UTC	1390	IN	Data Raw: 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 79 74 70 2d 66 69 74 2d 63 6f 76 65 72 2d 76 69 64 65 6f 20 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 5b 64 61 74 61 2d 6e 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 3d 74 72 75 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6d 65 64 69 61 2d 63 6f 6e 74 72 6f 6c 73 2d 66 75 6c 6c 73 63 72 65 65 Data Ascii: ntainer{display:none}.html5-main-video{position:absolute;top:0;left:0;width:100%;height:100%;outline:0}.ytp-fit-cover-video .html5-main-video{-o-object-fit:cover;object-fit:cover}.html5-main-video[data-no-fullscreen=true]::-webkit-media-controls-fullscree
2024-10-01 18:33:34 UTC	1390	IN	Data Raw: 6e 65 78 74 29 7b 74 6f 70 3a 38 39 70 78 7d 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 32 34 70 78 3b 72 69 67 68 74 3a 32 34 70 78 7d 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 68 74 6d 6c 35 2d 65 6e 64 73 63 72 65 65 6e 29 2c 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 Data Ascii: next){top:89px}.ytp-player-content.ytp-iv-player-content{left:12px;right:12px}.ytp-big-mode .ytp-player-content.ytp-iv-player-content{left:24px;right:24px}.ytp-autohide .ytp-player-content:not(.html5-endscreen),.ytp-autohide .ytp-player-content:not(.ytp-u
2024-10-01 18:33:34 UTC	1390	IN	Data Raw: 79 65 72 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 6e 6f 74 28 5b 61 72 69 61 2d 68 69 64 64 65 6e 3d 74 72 75 65 5d 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 79 74 70 2d 70 72 6f 62 61 62 6c 79 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 32 70 78 20 72 67 62 61 28 32 37 2c 31 32 37 2c 32 30 34 2c 2e 38 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 Data Ascii: yer .ytp-button[disabled]{opacity:.5}.ytp-button:not([aria-disabled=true]):not([disabled]):not([aria-hidden=true]){cursor:pointer}.ytp-probably-keyboard-focus .ytp-button:focus{-webkit-box-shadow:inset 0 0 0 2px rgba(27,127,204,.8);box-shadow:inset 0 0 0
2024-10-01 18:33:34 UTC	1390	IN	Data Raw: 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 6f 70 61 63 69 74 79 3a 2e 39 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 33 36 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c Data Ascii: px}.ytp-chrome-top .ytp-button,.ytp-small-mode .ytp-chrome-controls .ytp-button,.ytp-small-mode .ytp-replay-button{opacity:.9;display:inline-block;width:36px;-webkit-transition:opacity .1s cubic-bezier(.4,0,1,1);transition:opacity .1s cubic-bezier(.4,0,1,
2024-10-01 18:33:34 UTC	1390	IN	Data Raw: 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 79 6f 75 74 75 62 65 2d 62 75 74 74 6f 6e 29 20 73 76 67 7b 77 69 64 74 68 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 3b 68 65 69 67 68 74 3a 34 32 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 39 70 78 3b 68 65 69 67 68 74 3a 36 33 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 31 30 30 25 7d Data Ascii: -button:not(.ytp-youtube-button) svg{width:40px;padding-left:4px}.ytp-chrome-top .ytp-button{padding-top:6px;height:42px;vertical-align:top}.ytp-big-mode .ytp-chrome-top .ytp-button{padding-top:9px;height:63px}.ytp-chrome-controls .ytp-button{height:100%}
2024-10-01 18:33:34 UTC	1390	IN	Data Raw: 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 33 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 6c 65 66 74 3a 32 34 70 78 3b 62 6f 74 74 6f 6d 3a 39 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 30 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 2c 77 69 64 74 68 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f Data Ascii: ntrols .ytp-button[aria-pressed]:after{content:"";display:block;position:absolute;width:0;height:3px;border-radius:3px;left:24px;bottom:9px;background-color:#f00;-webkit-transition:left .1s cubic-bezier(.4,0,1,1),width .1s cubic-bezier(.4,0,1,1);transitio
2024-10-01 18:33:34 UTC	1390	IN	Data Raw: 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 61 66 74 65 72 2c 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 35 70 78 7d 2e 79 74 70 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 79 Data Ascii: e .ytp-chrome-controls .ytp-button[aria-pressed=true]:after,.ytp-embed-mobile.ytp-small-mode .ytp-chrome-controls .ytp-button[aria-pressed=true]:after{left:15px}.ytp-color-white .ytp-chrome-controls .ytp-button[aria-pressed]:after{background-color:#ddd}.y
2024-10-01 18:33:34 UTC	1390	IN	Data Raw: 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 3a 6e 6f 74 28 2e 79 74 70 2d 65 78 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 6c 65 78 62 6f 78 29 20 2e 79 74 70 2d 72 69 67 68 74 2d 63 6f 6e 74 72 6f 6c 73 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 79 74 70 2d 72 69 67 68 74 2d 63 6f 6e 74 72 6f 6c 73 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 79 74 70 2d 65 78 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 6c 65 78 62 6f 78 20 2e 79 74 70 2d Data Ascii: lex;display:flex;-webkit-box-flex:1;-webkit-flex:1;flex:1;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}:not(.ytp-exp-bottom-control-flexbox) .ytp-right-controls{float:right}.ytp-right-controls{height:100%}.ytp-exp-bottom-control-flexbox .ytp-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49763	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:33 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 18:33:34 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=166336 Date: Tue, 01 Oct 2024 18:33:34 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49773	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:34 UTC	645	OUT	GET /dist/img/icn-search.png HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:34 UTC	2108	IN	HTTP/1.1 200 OK Content-Type: image/png Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 07 Sep 2020 17:44:40 GMT Accept-Ranges: bytes ETag: "25171a903e85d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:47 GMT Connection: close Content-Length: 479
2024-10-01 18:33:34 UTC	479	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 01 99 49 44 41 54 38 11 ad 93 4f 2b 05 51 18 c6 ef 50 77 41 59 59 5c 77 e3 fa 17 16 58 50 3e 82 f0 09 44 dd b2 55 d8 da b0 b8 0b 51 f2 01 2c 24 2b d2 4d a2 64 63 2b 2b 29 2b 2b ca 52 09 d7 bf 70 fc 9e a3 b9 77 e6 ce 99 26 5d 6f fd e6 9c f3 3e cf fb ce 9c 99 33 a9 54 42 18 63 da 61 15 2e e1 11 9e e0 0a d6 a1 37 a1 bc 22 63 f6 60 09 de e1 05 0e 60 05 96 a1 08 6a fc 09 6b 50 5f a9 8c 99 61 da 04 c5 11 64 ab 6d e4 9a 61 07 14 fb 50 57 ed 29 af 11 67 e4 22 0a e5 64 cc 04 cf bc 75 1a b3 e8 b4 20 36 c1 3d 9c 41 f2 56 e8 82 ef 18 4a 90 89 34 25 39 05 8a c1 88 18 93 c0 db 66 2b 8c 99 8b 58 10 36 e0 2e 22 24 24 a8 d1 29 28 Data Ascii: PNGIHDRsRGBIDAT8O+QPwAYY\wXP>DUQ,$+Mdc++)++Rpw&]o>3TBca.7"c``jkP_admaPW)g"du 6=AVJ4%9f+X6."$$)(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49772	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:34 UTC	541	OUT	GET /dist/img/quote1.json HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:34 UTC	2117	IN	HTTP/1.1 200 OK Content-Type: application/json Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 11 Sep 2020 11:33:48 GMT Accept-Ranges: bytes ETag: "cb63c06a2f88d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:47 GMT Connection: close Content-Length: 69694
2024-10-01 18:33:34 UTC	14267	IN	Data Raw: 7b 22 76 22 3a 22 35 2e 35 2e 38 22 2c 22 66 72 22 3a 32 39 2e 39 37 30 30 30 31 32 32 30 37 30 33 31 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 31 35 30 2e 30 30 30 30 30 36 31 30 39 36 32 35 2c 22 77 22 3a 38 30 30 2c 22 68 22 3a 33 32 30 2c 22 6e 6d 22 3a 22 51 75 6f 74 65 31 22 2c 22 64 64 64 22 3a 30 2c 22 61 73 73 65 74 73 22 3a 5b 5d 2c 22 6c 61 79 65 72 73 22 3a 5b 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 31 2c 22 74 79 22 3a 34 2c 22 6e 6d 22 3a 22 53 68 61 70 65 20 4c 61 79 65 72 20 31 22 2c 22 74 64 22 3a 31 2c 22 73 72 22 3a 31 2c 22 6b 73 22 3a 7b 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 Data Ascii: {"v":"5.5.8","fr":29.9700012207031,"ip":0,"op":150.000006109625,"w":800,"h":320,"nm":"Quote1","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Shape Layer 1","td":1,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"
2024-10-01 18:33:34 UTC	16384	IN	Data Raw: 32 39 34 2c 33 2e 35 35 36 5d 2c 5b 33 2e 31 39 32 2c 33 2e 35 35 36 5d 2c 5b 33 2e 31 39 32 2c 35 2e 30 36 31 5d 2c 5b 2d 33 2e 31 39 32 2c 35 2e 30 36 31 5d 2c 5b 2d 33 2e 31 39 32 2c 2d 35 2e 30 36 31 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 66 6c 22 2c 22 63 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 2c 31 2c 31 2c 31 5d 2c 22 69 78 22 3a 34 7d 2c 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 35 7d 2c 22 72 22 3a 31 2c 22 62 6d 22 3a 30 2c 22 6e 6d 22 3a 22 46 69 6c 6c 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 Data Ascii: 294,3.556],[3.192,3.556],[3.192,5.061],[-3.192,5.061],[-3.192,-5.061]],"c":true},"ix":2},"nm":"Path 1","mn":"ADBE Vector Shape - Group","hd":false},{"ty":"fl","c":{"a":0,"k":[1,1,1,1],"ix":4},"o":{"a":0,"k":100,"ix":5},"r":1,"bm":0,"nm":"Fill 1","mn":"ADB
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 2c 5b 30 2e 36 31 32 2c 2d 31 2e 38 39 37 5d 2c 5b 31 2e 31 34 39 2c 2d 31 2e 33 31 37 5d 2c 5b 31 2e 36 36 32 2c 2d 30 2e 36 39 31 5d 5d 2c 22 6f 22 3a 5b 5b 2d 32 2e 31 34 34 2c 30 5d 2c 5b 2d 31 2e 36 37 34 2c 2d 30 2e 36 39 31 5d 2c 5b 2d 31 2e 31 34 39 2c 2d 31 2e 33 31 37 5d 2c 5b 2d 30 2e 36 31 32 2c 2d 31 2e 38 39 37 5d 2c 5b 30 2c 2d 32 2e 33 36 39 5d 2c 5b 30 2e 36 31 32 2c 2d 31 2e 38 39 38 5d 2c 5b 31 2e 31 34 37 2c 2d 31 2e 33 31 36 5d 2c 5b 31 2e 36 37 33 2c 2d 30 2e 37 30 32 5d 2c 5b 32 2e 31 32 32 2c 30 5d 2c 5b 31 2e 36 36 32 2c 30 2e 37 30 32 5d 2c 5b 31 2e 31 34 39 2c 31 2e 33 31 36 5d 2c 5b 30 2e 36 31 32 2c 31 2e 38 39 38 5d 2c 5b 30 2c 32 2e 33 39 31 5d 2c 5b 2d 30 2e 36 31 34 2c 31 2e 38 39 38 5d 2c 5b 2d 31 2e 31 34 38 2c 31 2e 33 Data Ascii: ,[0.612,-1.897],[1.149,-1.317],[1.662,-0.691]],"o":[[-2.144,0],[-1.674,-0.691],[-1.149,-1.317],[-0.612,-1.897],[0,-2.369],[0.612,-1.898],[1.147,-1.316],[1.673,-0.702],[2.122,0],[1.662,0.702],[1.149,1.316],[0.612,1.898],[0,2.391],[-0.614,1.898],[-1.148,1.3
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 2d 32 35 37 2e 38 32 32 2c 2d 32 33 2e 39 37 33 5d 2c 5b 2d 32 35 37 2e 38 32 32 2c 34 2e 34 32 36 5d 2c 5b 2d 32 35 36 2e 34 31 31 2c 31 32 2e 35 32 32 5d 2c 5b 2d 32 35 32 2e 33 34 32 2c 31 38 2e 38 37 33 5d 2c 5b 2d 32 34 35 2e 38 37 39 2c 32 33 2e 30 32 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 32 33 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 64 22 3a 32 33 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 32 34 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 31 2e 34 36 35 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 2d 30 2e 39 31 39 2c 2d 30 Data Ascii: -257.822,-23.973],[-257.822,4.426],[-256.411,12.522],[-252.342,18.873],[-245.879,23.02]],"c":true},"ix":2},"nm":"Path 23","mn":"ADBE Vector Shape - Group","hd":false},{"ind":23,"ty":"sh","ix":24,"ks":{"a":0,"k":{"i":[[1.465,0],[0,0],[0,0],[0,0],[-0.919,-0
2024-10-01 18:33:35 UTC	69	IN	Data Raw: 37 30 31 2c 31 2e 39 36 31 5d 2c 5b 30 2e 39 30 36 2c 32 2e 38 32 37 5d 2c 5b 30 2c 33 2e 35 36 32 5d 2c 5b 2d 30 2e 39 30 38 2c 32 2e 38 32 37 5d 2c 5b 2d 31 2e 37 2c 31 2e 39 36 31 5d 2c 5b 2d 32 2e 34 37 Data Ascii: 701,1.961],[0.906,2.827],[0,3.562],[-0.908,2.827],[-1.7,1.961],[-2.47
2024-10-01 18:33:35 UTC	6206	IN	Data Raw: 38 2c 31 2e 30 34 36 5d 2c 5b 2d 33 2e 31 37 35 2c 30 5d 2c 5b 2d 32 2e 34 36 33 2c 2d 31 2e 30 34 36 5d 2c 5b 2d 31 2e 37 30 31 2c 2d 31 2e 39 36 31 5d 2c 5b 2d 30 2e 39 30 36 2c 2d 32 2e 38 32 37 5d 2c 5b 30 2c 2d 33 2e 35 33 5d 2c 5b 30 2e 39 30 38 2c 2d 32 2e 38 32 37 5d 2c 5b 31 2e 37 2c 2d 31 2e 39 36 31 5d 2c 5b 32 2e 34 36 31 2c 2d 31 2e 30 33 5d 5d 2c 22 6f 22 3a 5b 5b 2d 33 2e 31 37 35 2c 30 5d 2c 5b 2d 32 2e 34 37 38 2c 2d 31 2e 30 33 5d 2c 5b 2d 31 2e 37 2c 2d 31 2e 39 36 31 5d 2c 5b 2d 30 2e 39 30 38 2c 2d 32 2e 38 32 37 5d 2c 5b 30 2c 2d 33 2e 35 33 5d 2c 5b 30 2e 39 30 36 2c 2d 32 2e 38 32 37 5d 2c 5b 31 2e 37 30 31 2c 2d 31 2e 39 36 31 5d 2c 5b 32 2e 34 37 38 2c 2d 31 2e 30 34 36 5d 2c 5b 33 2e 31 34 32 2c 30 5d 2c 5b 32 2e 34 36 31 2c 31 Data Ascii: 8,1.046],[-3.175,0],[-2.463,-1.046],[-1.701,-1.961],[-0.906,-2.827],[0,-3.53],[0.908,-2.827],[1.7,-1.961],[2.461,-1.03]],"o":[[-3.175,0],[-2.478,-1.03],[-1.7,-1.961],[-0.908,-2.827],[0,-3.53],[0.906,-2.827],[1.701,-1.961],[2.478,-1.046],[3.142,0],[2.461,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49775	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:34 UTC	541	OUT	GET /dist/img/quote2.json HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:35 UTC	2117	IN	HTTP/1.1 200 OK Content-Type: application/json Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 11 Sep 2020 11:33:45 GMT Accept-Ranges: bytes ETag: "15d2f1682f88d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:47 GMT Connection: close Content-Length: 84866
2024-10-01 18:33:35 UTC	14267	IN	Data Raw: 7b 22 76 22 3a 22 35 2e 35 2e 38 22 2c 22 66 72 22 3a 32 39 2e 39 37 30 30 30 31 32 32 30 37 30 33 31 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 31 35 30 2e 30 30 30 30 30 36 31 30 39 36 32 35 2c 22 77 22 3a 38 30 30 2c 22 68 22 3a 33 32 30 2c 22 6e 6d 22 3a 22 51 75 6f 74 65 32 22 2c 22 64 64 64 22 3a 30 2c 22 61 73 73 65 74 73 22 3a 5b 5d 2c 22 6c 61 79 65 72 73 22 3a 5b 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 31 2c 22 74 79 22 3a 34 2c 22 6e 6d 22 3a 22 53 68 61 70 65 20 4c 61 79 65 72 20 34 22 2c 22 74 64 22 3a 31 2c 22 73 72 22 3a 31 2c 22 6b 73 22 3a 7b 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 Data Ascii: {"v":"5.5.8","fr":29.9700012207031,"ip":0,"op":150.000006109625,"w":800,"h":320,"nm":"Quote2","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Shape Layer 4","td":1,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 6c 73 65 7d 2c 7b 22 69 6e 64 22 3a 31 30 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 31 31 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 31 2e 30 35 34 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 2d 30 2e 36 36 33 2c 2d 30 2e 31 38 39 5d 2c 5b 2d 30 2e 34 30 31 2c 2d 30 2e 33 34 35 5d 2c 5b 2d 30 2e 31 36 36 2c 2d 30 2e 35 30 31 5d 2c 5b 30 2c 2d 30 2e 36 32 37 5d 2c 5b 30 2e 31 34 32 2c 2d 30 2e 35 33 34 5d 2c 5b 30 2e 33 37 38 2c 2d 30 2e 34 32 33 5d 2c 5b 30 2e 36 36 39 2c 2d 30 2e 32 36 36 5d 5d 2c 22 6f 22 3a 5b 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 31 2e 30 30 37 2c 30 5d 2c 5b 30 2e 36 36 31 2c 30 2e 31 38 37 5d 2c 5b 30 2e 34 30 32 2c 30 2e 33 34 34 5d 2c 5b 30 2e 31 36 35 Data Ascii: lse},{"ind":10,"ty":"sh","ix":11,"ks":{"a":0,"k":{"i":[[1.054,0],[0,0],[0,0],[0,0],[-0.663,-0.189],[-0.401,-0.345],[-0.166,-0.501],[0,-0.627],[0.142,-0.534],[0.378,-0.423],[0.669,-0.266]],"o":[[0,0],[0,0],[0,0],[1.007,0],[0.661,0.187],[0.402,0.344],[0.165
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 2e 34 30 33 2c 2d 31 37 2e 31 32 34 5d 2c 5b 2d 33 34 31 2e 33 38 35 2c 2d 31 37 2e 31 32 34 5d 2c 5b 2d 33 34 31 2e 33 38 35 2c 31 37 2e 31 32 34 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 33 35 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 64 22 3a 33 35 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 33 36 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 2d 32 2e 35 31 39 2c 30 5d 2c 5b 2d 31 2e 32 32 31 2c 30 2e 31 34 31 5d 2c 5b 2d 31 2e 30 37 39 2c 30 2e 32 39 38 5d 2c 5b 2d 30 2e 39 35 32 2c 30 2e 34 36 33 5d 2c 5b 2d 30 2e 38 38 32 2c 30 2e 36 34 33 5d 2c 5b 30 2c 30 Data Ascii: .403,-17.124],[-341.385,-17.124],[-341.385,17.124]],"c":true},"ix":2},"nm":"Path 35","mn":"ADBE Vector Shape - Group","hd":false},{"ind":35,"ty":"sh","ix":36,"ks":{"a":0,"k":{"i":[[-2.519,0],[-1.221,0.141],[-1.079,0.298],[-0.952,0.463],[-0.882,0.643],[0,0
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 2c 5b 31 2e 39 30 36 2c 30 2e 35 37 32 5d 2c 5b 31 2e 34 38 33 2c 30 2e 36 38 36 5d 2c 5b 30 2e 39 31 32 2c 30 2e 39 34 38 5d 2c 5b 30 2c 31 2e 34 33 39 5d 2c 5b 2d 31 2e 35 31 36 2c 31 2e 33 32 34 5d 2c 5b 2d 33 2e 30 39 36 2c 30 5d 2c 5b 2d 31 2e 34 30 31 2c 2d 30 2e 34 37 33 5d 2c 5b 2d 31 2e 30 39 31 2c 2d 30 2e 35 38 38 5d 2c 5b 2d 30 2e 38 36 33 2c 2d 30 2e 34 37 34 5d 2c 5b 2d 30 2e 37 35 2c 30 5d 2c 5b 2d 30 2e 35 33 38 2c 30 2e 33 39 32 5d 2c 5b 2d 30 2e 34 38 39 2c 30 2e 37 38 34 5d 2c 5b 30 2c 30 5d 2c 5b 31 2e 36 31 33 2c 30 2e 39 33 32 5d 2c 5b 31 2e 38 35 38 2c 30 2e 36 37 5d 2c 5b 32 2e 30 36 39 2c 30 2e 33 34 34 5d 2c 5b 32 2e 31 38 33 2c 30 5d 2c 5b 33 2e 30 33 2c 2d 31 2e 31 39 33 5d 2c 5b 32 2e 30 38 36 2c 2d 31 2e 39 39 34 5d 2c 5b 31 Data Ascii: ,[1.906,0.572],[1.483,0.686],[0.912,0.948],[0,1.439],[-1.516,1.324],[-3.096,0],[-1.401,-0.473],[-1.091,-0.588],[-0.863,-0.474],[-0.75,0],[-0.538,0.392],[-0.489,0.784],[0,0],[1.613,0.932],[1.858,0.67],[2.069,0.344],[2.183,0],[3.03,-1.193],[2.086,-1.994],[1
2024-10-01 18:33:35 UTC	69	IN	Data Raw: 32 34 34 2c 30 2e 32 38 5d 2c 5b 30 2e 31 33 31 2c 30 2e 34 30 33 5d 2c 5b 30 2c 30 2e 35 30 39 5d 2c 5b 2d 30 2e 31 33 2c 30 2e 34 30 33 5d 2c 5b 2d 30 2e 32 34 35 2c 30 2e 32 38 5d 2c 5b 2d 30 2e 33 35 37 Data Ascii: 244,0.28],[0.131,0.403],[0,0.509],[-0.13,0.403],[-0.245,0.28],[-0.357
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 2c 30 2e 31 34 39 5d 2c 5b 2d 30 2e 34 35 37 2c 30 5d 2c 5b 2d 30 2e 33 35 34 2c 2d 30 2e 31 34 39 5d 2c 5b 2d 30 2e 32 34 35 2c 2d 30 2e 32 38 5d 2c 5b 2d 30 2e 31 33 31 2c 2d 30 2e 34 30 34 5d 2c 5b 30 2c 2d 30 2e 35 30 34 5d 2c 5b 30 2e 31 33 31 2c 2d 30 2e 34 30 34 5d 2c 5b 30 2e 32 34 35 2c 2d 30 2e 32 38 5d 2c 5b 30 2e 33 35 35 2c 2d 30 2e 31 34 38 5d 5d 2c 22 6f 22 3a 5b 5b 2d 30 2e 34 35 37 2c 30 5d 2c 5b 2d 30 2e 33 35 37 2c 2d 30 2e 31 34 38 5d 2c 5b 2d 30 2e 32 34 35 2c 2d 30 2e 32 38 5d 2c 5b 2d 30 2e 31 33 2c 2d 30 2e 34 30 34 5d 2c 5b 30 2c 2d 30 2e 35 30 34 5d 2c 5b 30 2e 31 33 31 2c 2d 30 2e 34 30 34 5d 2c 5b 30 2e 32 34 34 2c 2d 30 2e 32 38 5d 2c 5b 30 2e 33 35 37 2c 2d 30 2e 31 34 39 5d 2c 5b 30 2e 34 35 33 2c 30 5d 2c 5b 30 2e 33 35 35 Data Ascii: ,0.149],[-0.457,0],[-0.354,-0.149],[-0.245,-0.28],[-0.131,-0.404],[0,-0.504],[0.131,-0.404],[0.245,-0.28],[0.355,-0.148]],"o":[[-0.457,0],[-0.357,-0.148],[-0.245,-0.28],[-0.13,-0.404],[0,-0.504],[0.131,-0.404],[0.244,-0.28],[0.357,-0.149],[0.453,0],[0.355
2024-10-01 18:33:35 UTC	4994	IN	Data Raw: 2c 22 6e 6d 22 3a 22 50 61 74 68 20 32 38 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 64 22 3a 32 38 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 32 39 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 30 2c 30 5d 5d 2c 22 6f 22 3a 5b 5b 30 2c 30 5d 5d 2c 22 76 22 3a 5b 5b 2d 31 32 39 2e 31 34 33 2c 35 2e 31 5d 5d 2c 22 63 22 3a 66 61 6c 73 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 32 39 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 64 22 3a 32 39 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a Data Ascii: ,"nm":"Path 28","mn":"ADBE Vector Shape - Group","hd":false},{"ind":28,"ty":"sh","ix":29,"ks":{"a":0,"k":{"i":[[0,0]],"o":[[0,0]],"v":[[-129.143,5.1]],"c":false},"ix":2},"nm":"Path 29","mn":"ADBE Vector Shape - Group","hd":false},{"ind":29,"ty":"sh","ix":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49777	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:34 UTC	610	OUT	GET /media/fajftxg3/syndey.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:35 UTC	2110	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 11 Sep 2020 11:38:11 GMT Accept-Ranges: bytes ETag: "5ee1a73088d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:47 GMT Connection: close Content-Length: 299595
2024-10-01 18:33:35 UTC	14274	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 09 06 07 08 07 06 09 08 08 08 0a 0a 09 0b 0e 17 0f 0e 0d 0d 0e 1c 14 15 11 17 22 1e 23 23 21 1e 20 20 25 2a 35 2d 25 27 32 28 20 20 2e 3f 2f 32 37 39 3c 3c 3c 24 2d 42 46 41 3a 46 35 3b 3c 39 ff db 00 43 01 0a 0a 0a 0e 0c 0e 1b 0f 0f 1b 39 26 20 26 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 ff c2 00 11 08 06 c0 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 ff 00 6f 88 50 0a Data Ascii: JFIFC"##! %*5-%'2( .?/279<<<$-BFA:F5;<9C9& &99999999999999999999999999999999999999999999999999@oP
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 00 00 10 aa 40 00 10 a4 05 04 29 0a 00 00 00 42 80 00 04 2d 21 40 00 00 0a 91 40 14 00 02 02 81 08 52 15 0b 02 14 00 00 00 01 01 01 48 01 00 01 22 d2 00 08 01 00 21 00 20 04 00 84 04 04 04 41 14 4b 11 16 00 90 02 29 21 00 20 04 20 21 48 4a 44 a1 20 a2 52 22 2d 48 21 00 a8 04 4a 44 21 48 0c 40 14 88 42 52 04 04 04 52 40 4a 10 08 18 94 95 20 08 01 01 da a0 50 0a 0a 01 4a 85 55 85 58 55 8a 2a c1 2d a9 0b 41 41 4a 85 a5 05 05 05 28 28 29 4a 2c a5 96 94 14 a0 14 a0 a0 a5 00 14 00 85 a0 14 80 a4 28 21 48 0a 01 40 28 00 00 00 00 14 04 28 00 02 5a 92 90 a0 02 14 00 09 14 52 00 00 00 10 a8 51 0a 00 00 02 14 00 00 08 50 00 00 54 8b 52 28 00 0a 10 b4 85 20 00 a0 11 0a 28 00 14 10 24 50 09 16 90 02 90 00 85 00 00 20 04 00 10 a0 80 10 14 80 10 02 25 58 85 80 84 00 10 Data Ascii: @)B-!@@RH"! AK)! !HJD R"-H!JD!H@BRR@J PJUXU*-AAJ(()J,(!H@((ZRQPTR( ($P %X
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 54 7d 46 a7 9b d3 0b 9f 86 f6 fc 7c 2a d5 3c fc 76 fb bf 95 f6 7e 87 9f 5e 6f 57 93 c4 f6 7c de 26 7c d6 79 d7 a7 3b f9 0e 7e 9f 1b 3d bd c8 e8 ed e1 c4 fd 0b c3 f5 3e b3 cb ea e8 d3 5d 9f 92 f6 e7 ab d5 e1 e2 df 2f 07 3d 30 5d 52 c5 f6 35 cf d0 b3 df 99 87 8d 9e df 69 e1 f7 7e 91 9d ec 36 d9 89 8a f2 a7 8b ac 7c cd d7 ca 5c 6b b3 9a b6 c7 a6 7d 5e 35 e6 e3 63 8f 79 fb 6c 5f 43 a6 7e 83 53 e7 b1 af ca 75 9f d6 38 f4 f9 9e 5d 3e 7b d3 c7 cc e9 cf d8 ce be db 9f 4c 6b 97 13 d0 e9 30 93 c8 97 d0 af 0b 33 eb b4 f2 65 f3 32 e9 e9 9e cf 67 05 88 03 cc af 97 cc e7 38 8f b2 e1 dc cf a5 9d 7a b3 53 ae 34 76 e7 2a c8 20 15 f0 58 e7 e3 5e 7a 53 39 bd 36 79 d6 7d 47 af e7 e6 c8 15 37 79 3e 87 da fc bf b1 f9 ef 6c 7c 97 a7 cd db 26 56 fe 9b e7 ef ab a6 3d 2e 3d ba 39 Data Ascii: T}F\|<v~^oW\|&\|y;~=>]/=0]R5i~6\|\k}^5cyl_C~Su8]>{Lk03e2g8zS4v X^zS96y}G7y>l\|&V=.=9
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 75 2d 58 99 cb a2 91 ae b6 40 f4 3e 6e 93 3e 37 b7 3b 71 7a 39 6f b3 95 ec e7 a9 be 9e 77 af 37 33 b7 9e fa 31 7c 2e fc 7c 6f 57 1e dc df a0 e1 d7 c7 d6 7a bc ed 1d 1a f4 a7 9f df 39 46 35 9c 61 5d 9c 75 bf 9d ce 38 bd 19 f3 fb 63 a7 9e b7 66 f6 f0 df 0f 7c 72 f4 cf b3 e3 eb c7 df 3d dc 35 a3 a4 ec e3 74 e9 cf d6 13 b3 8f 4e ae 5a e9 c5 d9 1e 77 6e 1e 47 ab 1e bf 97 b7 87 ec e5 92 fa 5c 3a fd 67 97 b7 d0 63 5e 0d c7 3f b7 cf f6 3d b3 ea 4d 7a 3c b7 f0 7c af c6 67 3d 58 bb f0 9b d7 b7 e7 df 81 d7 97 27 56 ec dc 6e 3e 67 e8 f1 e5 e9 06 34 33 8d 35 15 1d 78 9d 9c b4 6b d6 f2 f4 d6 b9 9b 32 1b 72 e4 eb 8f 99 fa 3c 8b d1 9b a3 59 c4 ce 34 e8 b3 d6 f2 b9 b7 78 bb 4d 8b 9c 76 66 7a 5e 6d db 9f 9d f5 c4 66 bb f3 79 b5 31 af 43 9b d4 f3 dd 3b 72 6d e8 71 df 8f e9 Data Ascii: u-X@>n>7;qz9ow731\|.\|oWz9F5a]u8cf\|r=5tNZwnG\:gc^?=Mz<\|g=X'Vn>g435xk2r<Y4xMvfz^mfy1C;rmq
2024-10-01 18:33:35 UTC	62	IN	Data Raw: e5 8d 98 b3 af 59 84 52 55 89 40 22 80 05 b1 0a 92 80 21 61 40 42 96 c0 00 b1 6c 50 a8 52 20 b8 a8 00 0a 8a 00 48 2c 10 a0 04 96 a2 d2 0c 90 29 02 d4 28 85 48 c5 61 44 28 09 28 16 c0 21 Data Ascii: YRU@"!a@BlPR H,)(HaD((!
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 48 50 00 05 20 10 14 05 21 16 a0 02 4a ad 53 74 03 15 92 e5 66 31 16 99 5c d2 4b 6c 58 94 00 ab 24 14 96 11 71 9a 20 29 32 b3 26 6d 00 22 c8 c5 69 6c 45 09 6a d9 8c a2 ad b9 c9 22 a2 d9 8c aa c9 33 42 54 51 64 51 58 cb 08 a2 2d 40 00 18 a9 45 4a 82 a5 00 8a 20 a4 00 00 12 58 00 58 0a 12 28 a1 24 a2 d1 0b 24 c8 04 ce cb 99 9b 23 39 72 9a c6 e6 cd 4b 30 b2 02 16 a1 6a 14 c5 71 b6 98 cb 16 a2 a4 b5 22 c1 10 a4 28 04 94 00 32 41 50 51 19 26 d9 ad f9 e9 b3 3b ce 5e 9c ef 2c eb 9f 59 c4 2a 30 b1 35 8a 63 66 15 8a 69 d6 21 af 58 97 38 51 01 6d 91 6a 45 15 05 b2 80 54 ce 6b 39 76 e7 a6 ec f4 e9 c7 4c a6 a5 9b 33 bd b9 d6 6b 73 76 4d 67 2e 52 ee ce b7 63 5b 26 b3 ca 56 ad 4e 5d e3 5d 92 b1 4a 65 2e 4b 9e 6c 34 74 c6 9d 63 0d 67 5e b1 ae e7 5d ce 8e 9c e2 61 73 85 Data Ascii: HP !JStf1\KlX$q )2&m"ilEj"3BTQdQX-@EJ XX($$#9rK0jq"(2APQ&;^,Y*05cfi!X8QmjETk9vL3ksvMg.Rc[&VN]]Je.Kl4tcg^]as
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 35 5f 15 fa 55 55 55 55 c5 56 ba eb 55 fd 0d 55 6b 55 ae 9a 69 a6 86 33 16 9a d5 55 55 55 55 55 55 56 ba d6 b5 55 5a eb ae ba eb 4a be 36 df b7 bb bf d9 f6 7d 8f 67 d9 f6 bd af 6b da f6 bd af 67 d9 f6 7d 8e fe fe fe ee ee de de cd f6 d9 5f f5 37 6a ef 8b e2 ee fe ee ee ee ee ee ee ee d5 f1 7f a3 77 c5 da bb bb 5d bd fd fd dd bd dd fd bd 9b ed b5 dd fc d5 6b 55 55 5a eb 55 ae ba eb ae ba eb ae ba eb 5a eb ae ba d5 56 ba e9 a6 9a eb ae ba eb a6 95 55 ae b5 55 55 55 5a eb 55 55 55 55 55 5c d7 35 5f 92 ed 5d f3 77 77 b5 ed b5 de db 6f b5 dd dd dd dd da bf d9 06 ef 7d ee c9 e6 ff 00 56 be b4 d3 ac 47 d5 d3 d1 eb fa be b7 ab ea fa be af a5 e9 fa 7e a7 af d3 eb 7a fd 1e bf ad eb 74 f4 f5 75 ea ab 5d 75 af d5 a5 55 f3 55 55 5f 57 fd 45 df ea 5f 16 ae ef 6d b6 da Data Ascii: 5_UUUUVUUkUi3UUUUUUVUZJ6}gkg}_7jw]kUUZUZVUUUUZUUUUU\5_]wwo}VG~ztu]uUUU_WE_m
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: f3 6c bc 3b 8c aa eb 3d 84 ed e3 fd 87 78 5a de 11 f5 cb c3 b1 95 3c 90 f8 8f e4 ef 57 3c 7b 0e ee 4f 0e e3 38 ea 4a 5a bb 85 d6 d3 d4 9c 73 de 45 4e 57 8c b6 ee 17 7b 64 d7 76 60 a6 9f 24 72 33 e4 51 db d5 de 57 cc 51 c3 81 61 6b 80 e5 42 0d bb bb 10 f2 47 e0 53 7e c4 7e 02 c3 6f ce cd 74 2b 6d 35 e3 fa 07 d5 4f bb b3 ce cb 89 57 a8 8e 15 6a 84 f1 53 c2 ec af ac 4b e5 09 e3 d5 c3 e1 3b da 9a d7 e5 c0 82 a1 52 d2 6e 39 dc 8f 53 0c 0f 53 70 b1 7f ef a3 bf f7 76 72 66 1e 8f 16 f7 e9 b5 2f 5d 1a f6 e0 5d d9 1d 54 30 ef de 6d 93 d9 1c ce a6 86 29 7d 6d 5f f8 3a aa 6e 7b f7 0a bb 5e 2c 49 eb 3e 42 8e a4 0e b5 e2 97 85 7e e6 0e ee 9e df f8 d1 72 da 91 da 7c 4c 5a ab 66 8d ba 12 43 2e 2e ae 72 7e e2 ca 73 e0 ac 6b 4a 5e 54 5e b4 4b b6 ce f3 dc 8e ed fa 96 92 f5 Data Ascii: l;=xZ<W<{O8JZsENW{dv`$r3QWQakBGS~~ot+m5OWjSK;Rn9SSpvrf/]]T0m)}m_:n{^,I>B~r\|LZfC..r~skJ^T^K
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: cf 23 53 a2 11 f9 45 4d d6 d3 de cf f4 3d 13 76 cb 69 6d 99 b1 ca 52 fc b9 12 7d 16 9d a3 7b 45 dc 6a 9c a7 1c b3 1b 79 8e 9a 85 df 89 5c cc a2 af 2c 6f ad cb 23 be a7 fa 8d 7b 73 2a 4f d9 27 1a f4 f1 41 f8 91 2a d5 1c 6d 83 03 f8 8e 56 b2 cc ab e5 2a 92 8d 7a 37 6b 29 12 9d 79 eb fb 4c 71 94 65 93 b0 aa d4 73 f0 5f 70 ad b5 8d 2b 72 b1 8f c3 75 e8 c7 08 be 05 5a 71 dc d7 32 35 2c e6 93 28 47 f8 68 e8 f4 61 79 42 3c 91 8e 4e 56 4b d3 b5 69 bd 3a cb 46 21 08 42 be cf a6 cb 46 1c d0 df 6e 56 c9 f6 f3 d1 cc 9e 1b 62 c8 cb 4c 4b 95 29 46 dd 6a 71 f4 3a 57 fe 22 1f ec 3a 4f e3 43 fd 87 49 71 96 2a d4 f0 fe 82 38 5e be 64 57 45 9d 29 5d cb d9 23 d5 b8 fb 5c 4d 98 64 c5 6f 1c 88 5f 39 cc 8f e2 4e de 85 04 f5 e7 52 dc 91 fd 9f 6c a7 54 8d 28 59 3a 9c 99 d1 b1 b7 Data Ascii: #SEM=vimR}{Ejy\,o#{sO'AmVz7k)yLqes_p+ruZq25,(GhayB<NVKi:F!BFnVbLK)Fjq:W":OCIq8^dWE)]#\Mdo_9NRlT(Y:
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 3d 56 85 a8 b6 d2 7e 48 d5 61 46 b1 f6 8c fa 50 47 2d 99 2e fb 1e fd 78 7f b8 f7 4b 62 9a 7a 32 3b d8 6e b7 e4 ef 2c ba f0 64 ae b6 1f a0 fb 5b 6c 1c 39 d9 0c 5c 4a 29 a5 2d 10 c4 81 37 62 12 bf c8 ca 59 b1 f7 0e 6d b7 17 81 68 ee fc 23 f1 82 e8 5b 08 5a 4e e9 67 4e e4 e0 de 42 7d 28 e0 96 49 f7 b7 e2 1f 6e fc d8 e2 9f d9 d7 76 66 3b 21 ee 2a 2e 1e 45 be e3 e4 48 9b 90 6c bd 22 92 fa 0a 3f 83 70 e0 98 a3 8c 4f fe 11 4a dc 0b 37 ba 72 53 66 61 4a f7 12 bb fe 4c 19 2c ae cc 26 df 23 db e2 31 74 64 9c d1 b4 55 0a 5b 3e c3 9b a1 61 b9 94 66 e3 0f f1 68 b1 fb 04 dd db a1 7f 62 f8 e3 f9 3f 2f fb 9f 80 3f 70 dd f6 62 da 53 c4 fb 89 29 23 cf 62 61 f2 2b ff 00 78 83 fc 22 ab 68 87 73 60 3e c3 ae 83 35 74 35 f6 8d 91 a3 98 6c 9f 02 86 e9 82 4e 13 1c e4 65 9c 5f f6 Data Ascii: =V~HaFPG-.xKbz2;n,d[l9\J)-7bYmh#[ZNgNB}(Invf;!*.EHl"?pOJ7rSfaJL,&#1tdU[>afhb?/?pbS)#ba+x"hs`>5t5lNe_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49776	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:34 UTC	611	OUT	GET /media/2eqgnp4n/newyork.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:35 UTC	2111	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 11 Sep 2020 11:38:13 GMT Accept-Ranges: bytes ETag: "eb826d83088d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:47 GMT Connection: close Content-Length: 377736
2024-10-01 18:33:35 UTC	14273	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 15 0e 0c 0b 0b 0c 19 12 13 0f 15 1e 1b 20 1f 1e 1b 1d 1d 21 25 30 29 21 23 2d 24 1d 1d 2a 39 2a 2d 31 33 36 36 36 20 28 3b 3f 3a 34 3e 30 35 36 33 ff db 00 43 01 09 09 09 0c 0b 0c 18 0e 0e 18 33 22 1d 22 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 ff c2 00 11 08 06 c0 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 af 77 82 95 b2 55 Data Ascii: JFIFC !%0)!#-$9-13666 (;?:4>0563C3""33333333333333333333333333333333333333333333333333@wU
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 42 a5 a1 49 41 49 41 49 64 88 29 88 88 94 1b 00 32 31 18 8a 82 8a 90 10 12 01 22 22 01 20 21 02 10 22 45 44 94 12 10 2a 21 22 a8 82 14 96 21 20 21 21 22 49 62 8a a2 22 01 21 82 a2 20 22 22 22 02 12 01 49 62 08 a8 22 02 01 22 00 12 22 4c 6d 89 19 71 b1 51 19 4b 05 92 51 25 10 22 58 01 20 13 12 00 02 00 20 24 14 2a 90 94 2b 23 15 89 20 aa 00 20 01 00 22 00 51 0a a0 22 02 02 02 20 22 31 1a 20 0a 21 02 20 00 22 49 40 00 24 16 20 28 ab 12 20 25 a2 41 4b 3b 65 a1 22 b1 9a 99 6d 52 96 b1 56 2a 46 1b 69 32 11 02 11 12 58 51 59 22 b5 85 12 2b 59 15 48 44 44 48 44 63 22 23 25 85 15 0c 88 c8 88 c8 04 95 48 48 48 84 40 88 88 40 80 88 88 8a 98 aa 84 88 88 6a 90 58 48 88 68 84 aa 80 85 05 88 52 59 2a a2 51 1a 82 25 52 52 a4 80 46 23 1a 84 04 80 41 64 44 08 88 88 04 08 Data Ascii: BIAIAId)21"" !"ED!"! !!"Ib"! """Ib"""LmqQKQ%"X $+# "Q" "1 ! "I@$ ( %AK;e"mRVFi2XQY"+YHDDHDc"#%HHH@@jXHhRYQ%RRF#AdD
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 62 2b 68 11 20 25 90 20 05 4c 6c 88 08 0a d2 44 02 99 4b 25 12 96 42 a0 82 98 2a 4a 5a 82 09 6b 02 8a a2 82 a8 82 c2 5a 98 c6 a8 28 20 10 49 42 0a 24 2a 96 00 48 a0 aa 02 a1 71 14 80 0a 02 a2 0a 8c 48 04 c4 08 00 88 00 88 22 a0 a0 2a 02 2a 20 22 03 d8 89 51 40 c8 17 24 49 52 22 11 01 12 22 45 52 21 01 aa 21 21 12 11 11 28 6a 5c 88 52 58 46 1b 22 58 ca 41 5b 19 64 6d 8c 88 61 84 4a 98 44 88 45 42 21 25 12 21 21 aa 0a 4a 2d 2c aa 86 20 1b 69 21 0a ca 24 89 52 21 15 04 64 a8 22 02 01 0a 2a cb c7 9a f2 bc 9e df 6f cb db 74 ba f6 f4 78 e7 ce f4 e7 cc ea cc e1 ed e6 e5 eb c1 8c 97 35 ca 6b 7c 4b a8 e5 d4 e3 b9 e0 4d c8 1f 45 ac 7d 5d ac 91 5b 24 4a c0 90 d0 51 50 24 06 27 83 ae 5f 29 bf 37 93 be 29 18 8f 3f 47 bf e7 f6 f2 6e fd 8f 93 d3 f1 1e df 17 77 3d fa bc Data Ascii: b+h % LlDK%BJZkZ( IB$HqH"** "Q@$IR""ER!!!(j\RXF"XA[dmaJDEB!%!!J-, i!$R!d"*otx5k\|KME}][$JQP$'_)7)?Gnw=
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 8f a3 c8 eb cb aa 5e ec 6f 93 19 bc dd ff 00 3d fa 3e 2f a5 c7 46 6b af 1b f4 f9 6b c0 f5 f9 ba 4e 32 3e a3 cb eb e3 5f 8d f5 79 3d 6d f2 e7 e1 d3 c5 ed cf d3 e5 ea e9 e3 d7 8b d5 e2 df ae 5a 13 b3 1b ed 9a f0 9d be cf 1a f3 bb 79 7a ce f8 08 88 80 08 12 52 4e 39 af 95 6b 05 e5 4d 99 df d8 5b f3 51 ce 6f 5d 97 3a a6 bd 79 be 36 38 a6 fd 4e 7d 7d 4e 73 cd f4 f1 f3 93 a7 97 a3 ab 2c 65 e3 b7 9b 78 c1 38 b5 8d d9 df 16 f9 f2 dc d2 fa fc ba f2 f4 e7 cb ac 53 5b b5 8c 25 fa 9f 37 af 8f 5c fc 1e dc be 8f cf df 83 af 2e 0d f3 17 ea 2e 7e 83 87 5f 98 f4 73 e8 ce ba 31 be dc 6f e7 7d 3e 5c ee 33 b8 c2 5d b9 ea 59 bd 31 34 4d 16 6d d7 3e 3c f4 b1 d3 49 8a ee 9a 21 3e b2 e3 7f 2d fc df 6e 5d 38 eb 86 b0 1c 96 6c b9 57 db ce bc a6 f0 b9 d3 2f 56 b1 81 ba 34 63 bd 66 Data Ascii: ^o=>/FkkN2>_y=mZyzRN9kM[Qo]:y68N}}Ns,ex8S[%7\..~_s1o}>\3]Y14Mm><I!>-n]8lW/V4cf
2024-10-01 18:33:35 UTC	63	IN	Data Raw: 2a c4 a1 b1 22 59 23 2b 31 97 15 08 25 53 22 44 c5 52 44 aa 80 c5 61 2a 23 19 71 68 8c 57 24 4d 8c 36 44 44 24 42 04 a2 2a d9 14 09 34 24 4b 0a 0a 44 23 52 20 40 24 89 52 28 95 28 12 b1 55 Data Ascii: "Y#+1%S"DRDa#qhW$M6DD$B*4$KD#R @$R((U
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 15 48 2d 24 b1 51 08 10 d9 2c 51 00 82 c0 42 49 01 2c 11 95 24 91 24 a5 31 50 b4 49 15 12 c4 34 c8 d1 05 12 c0 46 48 95 44 20 19 16 a4 43 2e 73 51 b6 6f a7 1d 73 9a d9 35 bb 3b e9 c7 4d 93 5d 38 df a1 cb af 46 75 d3 8d ee cd df 9d 64 bc f7 31 d1 9d 6a d6 75 6a 62 81 d1 9d 62 9a b5 39 f7 9d 76 07 2e f1 8d 6a d6 39 77 8e 7d 63 9f 58 d3 ac 6a b9 e7 d6 35 5c 6b b9 d7 73 85 c8 04 06 40 50 2e 4b 94 d4 33 59 42 b9 cb 94 d2 45 2e e9 ad b2 e5 5b f3 76 1b f3 5a c6 ca 5c 6e 70 b3 9b 58 d5 ac 72 eb 9e ad 63 0b 9a a3 10 1a 90 58 91 b6 24 a5 6c 80 84 80 40 8c 93 2b 05 a1 44 c8 65 4e ac 75 65 d9 35 b2 6b af 3a db 35 89 91 aa ce 6b 9e 2d f3 d6 9c fa e7 ae c8 c6 d4 ac c5 65 59 96 01 22 22 21 0a 62 b1 55 1b 08 69 25 c5 29 45 90 52 50 c9 02 a2 58 8c 99 41 6b 05 49 25 c6 58 Data Ascii: H-$Q,QBI,$$1PI4FHD C.sQos5;M]8Fud1jujbb9v.j9w}cXj5\ks@P.K3YBE.[vZ\npXrcX$l@+DeNue5k:5k-eY""!bUi%)ERPXAkI%X
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 67 68 ea b7 78 50 60 ad d3 20 4b cc a2 c1 5f bc 39 2d d0 bf ac 43 0d c7 08 7a c5 ba 75 60 56 16 e7 10 7c 69 ac c5 a3 84 a3 bf ac 75 55 7f 11 ab 25 35 f8 81 80 6e a5 56 2b 97 61 a2 e6 39 bc b0 54 e0 93 11 0a 30 a9 bb ee 9d c2 6c e5 86 4d 77 f4 31 7d d9 d8 5f c1 4c 6c 19 a2 f1 45 34 ed d3 d0 61 68 3c 41 1c ec 81 03 49 52 86 c1 7d 61 4b 8c d8 2a b1 24 70 b6 53 ab e2 96 8e ea b2 1e e3 48 9e 8a f3 20 20 9a dd e1 3c 50 83 5f 41 a3 17 c9 71 45 d8 1c 8d 36 a4 10 a3 88 ce 21 4e 68 a4 46 29 54 e2 6e f9 ec b0 81 2c e7 85 18 94 f3 08 47 fd 29 81 a6 69 7d 2a 0f 59 4c e4 1e 83 b9 4a f5 82 a1 28 61 38 b4 19 10 b7 66 62 a6 ad db a8 9b 20 dc 46 b9 6f 1f 4c 59 6f 5f 57 fe 15 cc f0 ad e3 81 1c 10 aa 96 9e 05 bd 15 0f 56 13 9c d2 0f 05 f6 6b b7 35 87 ce 16 ae d5 7f 0f 91 f6 Data Ascii: ghxP` K_9-Czu`V\|iuU%5nV+a9T0lMw1}_LlE4ah<AIR}aK$pSH <P_AqE6!NhF)Tn,G)i}YLJ(a8fb FoLYo_WVk5
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 0b 55 17 5a aa 8c 14 df 09 4d 1f 86 53 6c e4 e2 a4 c6 4a 1d 4f 21 f1 58 4e 8e 61 2b 1c 82 f1 02 2c 8f 82 74 68 13 08 d5 12 10 8b ce c9 ef 65 3b 27 0b 74 2d c7 b2 e9 bd d3 ac 04 4a b4 66 9d 02 23 65 95 54 f2 95 51 2a 50 84 d1 27 34 6c 56 1b 1a ec dd a2 c4 0d 6c 50 e9 44 5b 35 36 c9 35 c7 29 85 88 00 76 73 b2 94 c2 69 20 2d d0 98 ac 28 d8 1d 4b 1c 3a a6 33 78 62 40 4e 6d 06 11 6c 00 7a fa 2f 60 6b 41 aa 76 64 65 39 e5 f9 a1 92 d7 25 79 d1 49 6b e7 50 8b 8b ae 51 c9 69 b3 e2 43 34 25 05 78 2a f4 ad 15 e0 23 36 46 51 cd 13 c4 be 2c d0 37 54 80 3d e0 9e 89 cd 6b 72 c5 95 40 b7 ac 17 54 c5 8b 82 0c bc 17 b7 c5 11 0e 89 95 91 8d 94 d4 0f 65 92 d3 65 90 d8 1b 39 2a 7b 28 51 6c d4 4b a1 ce 41 ad a5 d2 fc b2 54 b0 8b b8 aa 54 5c 26 0a bb 27 07 45 d3 9a 5a 80 94 20 Data Ascii: UZMSlJO!XNa+,the;'t-Jf#eTQP'4lVlPD[565)vsi -(K:3xb@Nmlz/`kAvde9%yIkPQiC4%x#6FQ,7T=kr@Tee9*{(QlKATT\&'EZ
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: fb 08 93 f4 70 04 7c 05 5e 09 8a fd c0 34 d6 9f 81 f8 1a aa ff 00 4d 9f 69 67 42 4a 87 2d 3e cc ec 7f 73 b9 fd c5 6c b7 ee 8d af 63 89 51 9b 84 86 be 32 11 96 8c a2 77 a8 ad 46 91 43 1a 8f 46 8e c4 b8 58 78 82 9a d3 cb 47 f9 0b 6a 6e 4d 5b d0 9d 72 82 7d 21 f4 f1 af ef f6 6d 19 a5 ec 54 2e f0 97 ac 62 ca fa 1f 74 a8 dd 3d 11 8d cb f6 30 79 6b f4 7f 1f e9 df e9 60 88 c0 97 63 45 89 a1 54 ad 34 9c 26 c3 fb 78 5a 31 e2 9d 7e 0f 9f cf 8f 2b 3e 05 e5 2b 87 74 7a 90 2e 71 7c 8b a0 74 2a d4 5b ec 27 8b 63 bd 91 b3 6a d8 d4 eb bc 1c 38 42 ba 76 86 31 ba 0c 1f 91 21 77 1d 03 f3 e2 21 20 34 fa 33 69 0b 38 a5 f8 47 ec 8e 42 79 f3 71 16 57 e3 dc 1f ac 07 0b 31 2b 2b a6 be c4 05 1c 83 a4 65 36 85 5f 5f a1 d1 a4 c5 c5 1b 6d 5b af 9f 33 c6 de 74 64 90 24 f9 f0 d1 e9 7a Data Ascii: p\|^4MigBJ->slcQ2wFCFXxGjnM[r}!mT.bt=0yk`cET4&xZ1~+>+tz.q\|t*['cj8Bv1!w! 43i8GByqW1++e6__m[3td$z
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 63 92 ed 38 04 56 b2 dc b0 db 52 c9 e8 1c 52 84 e8 da e1 f9 be 68 98 57 a9 f2 67 48 5e d1 07 77 31 9e d5 e3 ad 0a eb 8e db 95 33 3c 42 0d 41 34 0b 2c 99 37 3f c0 85 e1 ad 12 4a c2 1b c2 fb 1e 8f b1 fe 50 cd d6 d8 ee ac e0 be cc 58 1b 4a 53 0e c6 2b 23 2f 1b 3c 8b 41 56 5f 7d 83 d0 65 d3 03 6b 34 da 89 b4 1b 39 64 78 e8 8f b0 7a 96 cc 87 6c 9a b2 ce 0d 41 ec bc 4e 45 7a f6 16 22 eb b0 42 30 e4 1c 59 3b 1c c4 c6 b5 d2 ec 36 3b 56 30 3c 46 de 08 0f 2c 27 13 c2 d6 ee 3c a9 4f 82 19 ac 91 98 9a 64 d7 c0 fe 8d f1 5b f8 45 bc 74 e0 4f b1 44 cb 2c 9a cc e4 31 60 6d 03 0a c0 4e 1a e8 9c 1b 43 7c fb 2e 46 fb 03 66 0b 42 33 0b 43 80 87 a5 11 b7 16 a4 6e 50 66 ea 5f 03 6b 20 f6 30 16 8f bc 2d 85 b8 48 c5 aa 0c 7e a2 35 1f 06 c5 96 85 d6 de 1b 8d ad 16 14 44 07 c9 8b Data Ascii: c8VRRhWgH^w13<BA4,7?JPXJS+#/<AV_}ek49dxzlANEz"B0Y;6;V0<F,'<Od[EtOD,1`mNC\|.FfB3CnPf_k 0-H~5D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49778	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:34 UTC	614	OUT	GET /media/id5e4qm4/losangeles.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:35 UTC	2110	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 11 Sep 2020 11:38:16 GMT Accept-Ranges: bytes ETag: "e276ea3088d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:47 GMT Connection: close Content-Length: 289763
2024-10-01 18:33:35 UTC	14274	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 09 06 07 08 07 06 09 08 08 08 0a 0a 09 0b 0e 17 0f 0e 0d 0d 0e 1c 14 15 11 17 22 1e 23 23 21 1e 20 20 25 2a 35 2d 25 27 32 28 20 20 2e 3f 2f 32 37 39 3c 3c 3c 24 2d 42 46 41 3a 46 35 3b 3c 39 ff db 00 43 01 0a 0a 0a 0e 0c 0e 1b 0f 0f 1b 39 26 20 26 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 ff c2 00 11 08 06 c0 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e2 fa be 01 40 8b 61 Data Ascii: JFIFC"##! %*5-%'2( .?/279<<<$-BFA:F5;<9C9& &99999999999999999999999999999999999999999999999999@@a
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 02 90 a0 80 b5 21 41 48 0a 00 05 20 05 89 54 10 a4 28 00 00 25 a1 16 a2 84 05 20 00 0a 00 01 40 02 90 a0 85 00 45 a4 28 20 05 01 62 04 28 14 00 29 21 40 a1 0b 14 52 00 08 12 80 01 14 80 14 54 11 48 52 01 12 ac 00 00 01 0a 40 00 0a 48 52 00 45 20 a4 00 2c 40 0a 22 00 0a 85 80 14 48 a4 08 0a 42 90 b0 00 01 0a 91 40 00 00 41 25 00 52 00 00 21 41 00 00 a4 00 00 0f 9b f4 f3 49 6d 85 09 62 ac 45 b4 19 44 ab 0a a2 29 40 05 00 a0 a1 41 32 0a 41 54 95 49 54 94 2d 05 85 01 94 01 42 aa c8 29 54 0a 0b 00 50 01 40 28 10 a1 62 90 a0 85 00 15 48 00 00 50 0a 00 28 10 14 2c 4a a2 14 10 a4 01 40 21 4a b1 29 56 02 14 15 21 41 0a 52 14 05 20 00 14 85 a8 04 29 16 c8 a2 8b 00 55 88 52 50 12 ac 08 0a 41 40 58 54 28 a4 00 14 08 50 aa 42 91 2a 92 02 90 50 00 00 29 01 48 0a 4a 91 Data Ascii: !AH T(% @E( b()!@RTHR@HRE ,@"HB@A%R!AImbED)@A2ATIT-B)TP@(bHP(,J@!J)V!AR )URPA@XT(PB*P)HJ
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 77 3a 16 a6 4b eb 70 df 9b db 18 58 2a fd 97 0f 47 e8 be 3d e2 53 9a bf 24 f5 ce 09 9c 79 ef 3b 3a b5 9d 15 a4 96 d8 a4 36 56 de 7a f4 38 f4 db 9b cb d7 3c de ae 3f a0 fe 4f eb fd 1f c5 f6 f5 7e b3 e4 63 eb f2 28 54 d1 6f c5 77 e9 c5 97 06 2e dd 4c ec ca 33 9a c7 59 db 26 33 7f a5 f1 e7 f1 9d 7a fe 7f d3 3a 52 a4 d4 b2 17 35 8c dc b5 5c fb 9a dd c7 5f 3d 8f 51 af 3d 17 3d 73 7c 57 18 27 26 b9 66 ba 75 3a b1 af 63 c9 d7 8f bc f6 7d 58 f9 fc cd 0c e1 65 cd df 2f b5 e2 eb c5 d6 7a 1c 7a 7d b7 c2 fb 7f 09 f7 fe 27 e9 79 c6 7a 82 02 05 21 49 17 91 af 3b 53 87 4f 0f 53 af 8e b6 6f 09 ac 25 ed ce 73 af 42 63 d7 bb 42 a4 00 a9 0a 40 01 12 90 a0 80 20 04 00 00 40 00 04 85 00 81 00 04 00 80 00 01 00 00 10 00 40 08 04 40 01 01 00 00 10 00 01 00 20 04 5e 4f 5f 31 4a Data Ascii: w:KpX*G=S$y;:6Vz8<?O~c(Tow.L3Y&3z:R5\_=Q==s\|W'&fu:c}Xe/zz}'yz!I;SOSo%sBcB@ @@@ ^O_1J
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 09 1e d4 f4 fa 1c ba 6b 3a f7 37 a6 b8 c1 31 4e 38 d5 be 7c 37 1c 09 91 ea 4e 9d f9 bc 7b c6 d9 af 43 8f 4c 37 9e 3b 3d 4f 3f a3 d5 e7 bf 99 f5 79 ad 98 74 e5 ad 74 9e e6 35 ea 1f 39 bc ef 31 8e 6e 98 c1 37 2d e7 bf 77 cb db ce d6 bc 8f 47 0d 5a ce ba d7 18 26 cc ea 59 8a e4 96 86 47 a4 d7 b7 9e 9f 43 9e 98 ae 8b 38 b9 ce bc 6b 5d b9 57 8d d3 9f 93 66 ec 4d 7d 33 82 e9 5e b6 bc f9 12 fd 65 9f 28 7b dc ae ee 97 1a e7 d7 3f 9b 8c da f7 e5 f7 f1 7e 6e df 25 c3 83 7c f7 69 a5 05 3a 6b 5c ba 4c 0d 86 ea e6 cd 86 76 6e ac cd 19 b9 98 1e 85 d7 ad c3 af cb 75 e1 89 91 91 bd 7b 36 d7 a9 ec 6a 6c ce f7 73 de 7d 67 0c d7 46 77 95 bd b2 fc f7 0e 7b b3 be 4b 9d b5 65 e5 de 36 71 eb a6 ce 9d 67 d0 bd 37 1d de 3d df 3f 6f cf fe a7 83 ab 3a d3 bc 6b b3 76 35 ea 79 bb 7a Data Ascii: k:71N8\|7N{CL7;=O?ytt591n7-wGZ&YGC8k]WfM}3^e({?~n%\|i:k\Lvnu{6jls}gFw{Ke6qg7=?o:kv5yz
2024-10-01 18:33:35 UTC	62	IN	Data Raw: 69 34 d6 20 b1 b9 3a b2 dd 2e e3 33 46 9e 7d 60 53 13 23 3c b6 46 c3 23 13 32 1c 95 ab 4e 93 a6 36 9a 2b 8c c2 2c 6d 8e a3 33 9e de 3d 4c 4d d1 d2 61 2f 2e 8b 73 32 4a a8 da 6b ae 44 d2 Data Ascii: i4 :.3F}`S#<F#2N6+,m3=LMa/.s2JkD
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 62 0a 99 2f 41 b0 da bb e2 00 62 43 51 a6 a2 54 d9 5a 4d 31 08 b0 a6 c3 a6 33 5c 4b 5b 20 62 69 ad 26 32 55 a6 44 21 4a 53 59 53 a6 b3 97 98 d3 65 20 96 94 c8 de 67 19 1c e6 ba c4 c4 1b 63 af 37 da cd fa 39 be e6 bb 97 2c eb 5c 60 9c f6 72 57 35 9c f6 73 1e 5d c4 cb 76 35 b3 37 ed 7d ed ab 8e 58 6a 6a d3 18 d5 cb a4 c5 d0 e7 e4 c9 b7 87 6e 7e 3d f2 e9 7d 8e fc 77 6f 9f 9d 73 f3 d3 3c b1 d1 8e 9e c7 8b d1 d7 e6 eb 87 6c 6c bb cb 17 c7 f7 f8 f8 7d 3c 62 d9 ad 72 6a 8d bc f5 df cb af 55 b9 fa b8 63 d3 9c e7 bc a5 eb ac 78 f6 e2 e7 df 3e dc 33 eb c3 cf b8 e3 67 9f 33 0c 85 b9 a9 a8 19 a6 8a e3 b7 29 3a 0c a3 a2 6b aa 5d ad 71 eb 1c c9 82 61 4a d5 58 c4 ad 91 94 64 66 75 65 b4 c1 70 34 d9 85 4a c0 87 44 6d 8c 89 16 5c 4c 68 98 d5 35 56 93 61 94 6c 29 ae b4 99 Data Ascii: b/AbCQTZM13\K[ bi&2UD!JSYSe gc79,\`rW5s]v57}Xjjn~=}wos<ll}<brjUcx>3g3):k]qaJXdfuep4JDm\Lh5Val)
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: dd ee e3 3d bc 85 f8 56 d7 2a af 0d cf fd 14 17 bc 66 7c ea db fc 36 70 c4 5c c9 4c a4 52 2c e6 8a 10 59 95 5b 5e 66 34 b9 18 98 5b 73 60 96 a9 df 23 c5 e2 73 91 2d 8f 16 57 c0 86 0e 32 4d 5c 89 54 b6 63 8f c7 41 83 eb 74 46 ce 5f 8a 98 de 83 42 d3 6d 7d 0a 09 f9 14 c7 54 ab d5 91 2e 1d 69 98 b1 25 f2 88 90 4d 53 2e 82 2f d7 53 14 f9 28 61 e0 4d ad af 95 f8 f0 03 c5 8c 61 af 3f 34 11 6a 5a 7d 6e 98 32 89 de 8f 24 9e 43 25 6f a5 8e 16 2a e2 e4 a8 55 a3 d0 10 e3 1c 60 2c a0 15 5d 7f 79 a3 7d 29 02 e2 e1 d5 c1 63 d5 86 31 7f f1 9a fd de 49 a8 98 9e 3a ff 00 11 8b e2 b3 bc 55 b8 91 0f f7 77 bb b2 ff 00 c1 b7 9b 3e 69 bc c0 f3 94 79 2f 75 56 56 7f c2 67 cc 45 cc 95 4a 05 71 70 2b a3 26 a7 94 8c b4 a9 6f f1 bb c4 17 5e 41 5d 73 a2 82 21 c0 ce e1 de dc fb 23 ca Data Ascii: =Vf\|6p\LR,Y[^f4[s`#s-W2M\TcAtF_Bm}T.i%MS./S(aMa?4jZ}n2$C%oU`,]y})c1I:Uw>iy/uVVgEJqp+&o^A]s!#
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 86 52 29 94 38 5e bd 4a 7a bd 5e af 58 ad 6b 64 2b 4d 7e ab eb c8 52 20 14 0a 17 af 5b 56 d2 5f b8 7a ee 6b 19 eb b2 bb 9b 28 e5 9c 86 b2 a3 49 77 6b 7d a6 3d 76 a1 0b 10 b3 06 62 63 70 38 12 a3 8c c5 72 51 c7 3b dc 1c 88 38 05 25 83 53 7d 81 30 c5 35 b2 dd f2 5b 24 e4 1b 9d f7 07 04 98 0a 18 61 e0 f2 39 30 c1 04 07 b6 e1 1a 00 4e be be 8c bd 3a 04 0a 20 60 e1 c5 9e df 62 3a 96 66 7b 4b 01 c7 6e db 0c af 5d 8b 75 d7 58 f3 a8 40 13 85 2b 63 59 63 16 ed b8 04 63 c0 80 ed 49 87 85 9d 75 c1 87 9d 98 91 78 de e1 95 cc 71 41 ba cc 87 72 e7 b4 31 48 8e bd 40 07 7b de e1 8d c0 1a 8b c1 8d c0 80 ed 62 85 80 15 60 66 f7 c8 82 1e 74 60 28 6b 3d dd da c6 6d a9 ad bd 97 3b 30 60 63 0d 08 3e a6 37 d4 41 04 59 ad 6b 46 68 8d 45 e1 be cb 17 83 c9 8c 35 f6 de f8 de c7 e9 Data Ascii: R)8^Jz^Xkd+M~R [V_zk(Iwk}=vbcp8rQ;8%S}05[$a90N: `b:f{Kn]uX@+cYccIuxqAr1H@{b`ft`(k=m;0`c>7AYkFhE5
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 95 a4 a6 65 74 cc f0 4c 6b 1d bb 2e e7 c9 61 a9 86 ed 30 e1 f1 48 b3 c4 f3 54 29 57 6b eb 52 da 30 7b 2b 0f 58 54 2c a2 29 b9 cf cc 23 80 e4 9d 8a ae da 34 c8 cc 6f 75 48 e1 5d b5 6b b2 6c c4 80 98 dc 5d 4f 77 21 8f aa 91 3f f0 25 94 68 65 a9 41 ef cd 70 5b 53 2a 69 75 a9 3b fc eb f7 4f f9 93 18 eb d2 79 ff 00 a9 0a 9d 7c 2c 52 a0 f6 16 6a 5d 53 37 f6 c8 7a c9 ca 27 29 ba 71 a0 d8 d1 75 8d f8 53 aa 1c ac 12 e5 eb 07 e1 5b 3a cc 12 0d c6 8b 6d 8f 18 7d bb 1b 9b db e0 b3 d2 c5 3c 55 67 51 c3 de f0 50 9a cc 55 3a 23 19 97 3b 27 38 1a 2a be 70 ea 5b 77 3f 67 30 e9 4f c6 11 d7 b5 97 03 78 f3 55 f0 74 b6 ee ae ca 8c 36 10 e9 4e c3 f9 b3 9d 76 c4 cf 34 7f f7 7b 5f fb 57 fa 23 4e ab 4e d0 3b c1 13 6b a7 13 7e 86 0a 6c 70 a8 0b ef 99 bc 91 85 50 68 f7 5b bd 38 f4 Data Ascii: etLk.a0HT)WkR0{+XT,)#4ouH]kl]Ow!?%heAp[Siu;Oy\|,Rj]S7z')quS[:m}<UgQPU:#;'8p[w?g0OxUt6Nv4{_W#NN;k~lpPh[8
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: e7 5a d0 80 c4 e2 77 7d a4 3c e3 1a 64 f6 f4 f9 29 ad 48 65 8d fd 7e 6b 7b 0f f3 e8 7e ec 0f d6 05 53 38 fe f8 aa 9d 54 f3 72 a9 95 bf dd b9 54 c8 7f ba e4 9f d6 c0 e0 d4 f9 7d bf 5a 38 27 67 6c 8b 6d 8a a4 29 0c d4 0b 84 fb cb 67 50 ec a8 06 ba 39 aa 99 5a 45 2a 43 29 b7 72 ae 33 01 91 be 0d 58 88 6f 5a 6f c9 56 39 a6 b3 be a9 ce c9 2f 71 9e f4 4e 6b 38 aa 84 32 28 bc fc 93 29 55 69 c4 e1 2a 3c 02 38 2c 21 a5 46 9d 2c 16 e1 10 fc cc ec dd 61 0e 16 8b 19 86 c8 f1 5e e3 27 b3 3c d6 12 bf 94 5c e6 37 77 2f 06 aa 0f a6 1b 5d 8f cb 49 bb b0 35 ba c2 b2 a3 18 70 07 66 da 8f 39 f2 70 3a 2a 38 7a 5b 3f e8 c0 f8 7c 8b 20 fa 25 ac f2 63 1a f2 cc a4 96 ac 45 6a 0c 77 f4 7d 21 46 90 2d 7d 5c b7 58 60 c3 3e 4e 0e e0 d6 64 e1 ce 55 5f 28 79 49 83 cd 25 8d f6 62 37 50 Data Ascii: Zw}<d)He~k{~S8TrT}Z8'glm)gP9ZEC)r3XoZoV9/qNk82()Ui<8,!F,a^'<\7w/]I5pf9p:*8z[?\| %cEjw}!F-}\X`>NdU_(yI%b7P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49779	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:34 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 18:33:35 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=166279 Date: Tue, 01 Oct 2024 18:33:35 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-01 18:33:35 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49786	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:35 UTC	611	OUT	GET /media/bccfwzuh/data-01.png HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:35 UTC	2110	IN	HTTP/1.1 200 OK Content-Type: image/png Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Tue, 26 Mar 2024 15:34:04 GMT Accept-Ranges: bytes ETag: "2a5ebb8937fda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:47 GMT Connection: close Content-Length: 667068
2024-10-01 18:33:35 UTC	14274	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 98 00 00 02 95 08 06 00 00 00 83 1a 51 54 00 00 20 00 49 44 41 54 78 9c ec bd 7b af 6d c9 71 1f 56 b5 f6 b9 8f b9 33 9c e1 70 46 14 49 93 14 45 4a 16 f5 20 25 eb 41 49 80 2c 41 11 6c 91 02 6d ca 06 64 18 01 94 38 8e 13 39 40 3e 84 f3 31 f2 85 f2 00 82 04 fe c3 b2 65 20 52 20 45 0f 86 a2 44 f1 35 9c b9 e7 ac ca 1f dd f5 ec ea 5e 6b ed bd cf 39 fb 9c bb 6a e6 9e bd f7 5a dd d5 d5 d5 bd ba ab 7f 5d 5d 0b ff a7 ff f9 93 04 3b 3d 38 42 44 20 22 40 44 b9 16 7f df 3d cd 27 e4 c5 fa 0f 00 80 ea bf 41 ea 13 eb 99 e6 47 2d 17 4b a2 45 1e 6d 0a 4c b2 0d ea 93 f0 40 44 49 6d e5 c4 2a 22 21 01 01 d5 72 30 e4 2d e5 95 be 50 ef 63 2d 1d 01 30 ca 81 00 56 02 44 8c 2c 81 66 02 40 92 7a b1 4c 6b db a0 e8 09 45 bf 56 Data Ascii: PNGIHDRQT IDATx{mqV3pFIEJ %AI,Almd89@>1e R ED5^k9jZ]];=8BD "@D='AG-KEmL@DIm*"!r0-Pc-0VD,f@zLkEV
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: ee 79 99 98 7c eb 53 4f f6 e2 e1 66 77 db 00 7c 4c ac 65 ee 6b 41 9b e8 5e 9d c9 b3 95 e7 98 3a f1 4d ce c1 da 50 07 f2 eb dc 39 33 39 00 75 a7 9d 76 da e9 76 88 e7 23 7b 2c e6 56 ca 59 18 fb 87 1e 05 1d 6f da d4 73 41 80 84 f5 b2 ad a1 2d f3 e1 02 a7 15 65 e5 3c dc 1b d4 80 ab 18 bc 53 ec 25 b9 e3 53 b6 9b 8e fe 97 03 31 a2 0c f6 f8 99 01 72 16 41 03 b0 38 00 83 51 06 e4 a9 38 02 5b c7 44 08 76 e3 ad a4 b6 f6 64 d0 85 05 30 c0 03 07 76 f3 af d1 56 f4 c4 e1 c2 a0 82 0c 26 31 72 9d 31 02 45 b6 92 d4 1e d3 24 b5 1c a4 06 c6 6e 72 ad 23 f6 7a 11 dc 75 85 aa fb 70 02 d2 69 05 00 7c 6c 2a 22 68 3c 98 44 6e 72 f5 9e b0 82 73 dd 86 24 98 10 60 66 7b 9e 17 30 01 e4 e2 37 c6 39 19 59 4f dd 90 1b 6a 97 e6 6f fa 03 0f b2 01 68 a1 1b 6c 25 5d f7 95 0e c7 61 40 c4 a7 Data Ascii: y\|SOfw\|LekA^:MP939uvv#{,VYosA-e<S%S1rA8Q8[Dvd0vV&1r1E$nr#zupi\|l*"h<Dnrs$`f{079YOjohl%]a@
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 87 14 f6 70 85 01 9e 6a 33 be 3c c1 97 ff cb 2f d2 68 d7 f8 f7 ff d3 16 a3 ba 45 69 b9 c4 f9 e7 cf 10 18 1d 84 3f 0b f0 3d 91 68 3e 8a 9c 84 c6 66 95 9e dd 26 5b 9a 25 55 48 10 4e eb 34 cc 2a 77 9f dc 44 8d 9f a6 eb d4 18 ee b5 41 90 d8 6b 6c 32 d6 c9 a0 28 1e 9d 51 93 48 4c 67 72 6a 8c 70 4c 23 9b cf 20 c9 32 d9 6c 8e a7 9f 7e 9a a5 c5 05 64 09 32 a9 04 a7 cf 9c a4 33 68 b3 53 de 61 63 67 1d 39 22 91 99 4d 11 c9 84 98 eb ce 90 9b 4b 31 71 32 4f 6e 27 85 be a6 a0 e7 34 04 cf 63 7c 32 c1 b1 2b 33 54 2b 15 72 f7 93 34 36 db 0c 84 1e 4a 0a 16 2f 96 b8 78 e1 02 aa aa 23 bf 1e f0 9d ef bc c1 8d 27 d7 08 8f 29 c4 27 27 38 f9 ec 12 2d bf 4a 79 64 e0 85 47 88 09 0f 35 a7 e2 44 1c 92 b3 11 42 9e 84 6d db 24 c2 69 c6 7a 63 3c d8 7f 48 e9 cc 24 b9 63 59 ac 1d 13 2b Data Ascii: pj3</hEi?=h>f&[%UHN4*wDAkl2(QHLgrjpL# 2l~d23hSacg9"MK1q2On'4c\|2+3T+r46J/x#')''8-JydG5DBm$izc<H$cY+
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: ae 84 14 4a dc bf fd 80 dd ed 7d 16 e6 aa 47 9e 39 be c7 8f 7f fc 2a 81 12 21 e7 60 30 18 62 88 69 04 41 a2 5c 2e 50 2a e5 a9 d5 ca 24 12 3a 92 24 12 45 21 9e ef d0 e9 37 88 c2 80 ed 83 03 3c d7 a5 d5 ea b0 78 72 8e a7 2f 9f 67 b1 5a c6 16 5d ca 85 22 44 11 71 18 22 4b 32 a2 28 11 47 50 2a 95 f8 fa 1f be 4c e9 74 9e 9c 91 a1 58 49 73 f6 fc 19 ea f3 65 24 57 c0 9d d9 f4 f7 db cc 57 ea a4 a4 14 43 bf cb cd b7 df 63 d2 9f e1 99 01 52 28 42 18 a3 08 02 86 aa f2 f4 95 ab 3c bc 7e 1f c1 8b 49 65 52 a4 32 19 54 45 a5 7d d8 22 17 65 39 75 ee 24 3b ec d3 6b 1d a0 44 2a f3 eb f3 7c e3 b9 af 63 06 2e 9b 8b 87 e8 aa 71 24 a2 a9 2a b2 28 12 fa 01 44 11 4f 5c b8 40 a5 52 41 d7 93 80 cc ed 5b 77 79 f3 cd 6b 74 87 1d 82 00 64 49 43 53 34 24 44 7a fd 3e 7b 07 07 b8 9e c7 Data Ascii: J}G9!`0biA\.P$:$E!7<xr/gZ]"Dq"K2(GPLtXIse$WWCcR(B<~IeR2TE}"e9u$;kD\|c.q$*(DO\@RA[wyktdICS4$Dz>{
2024-10-01 18:33:35 UTC	62	IN	Data Raw: dc 38 7f 8d d0 50 e1 d5 2f bd 4b 38 94 40 91 75 40 c1 f5 24 04 49 26 5b cc b2 72 e1 2c cb d1 33 44 82 10 66 67 c0 d9 a5 25 b2 a9 2c 13 d3 c5 35 41 17 55 0a f1 0c f9 48 8a 23 5f 42 90 65 Data Ascii: 8P/K8@u@$I&[r,3Dfg%,5AUH#_Be
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 22 b1 38 4b cb 4b e8 91 37 f0 71 99 9f af 50 99 29 03 90 4a 67 98 d6 5c 52 d9 24 e5 95 2c be 60 b1 38 bf c4 c7 3e f1 14 c6 74 c0 5e f3 98 60 6c 23 08 3e f3 2b 73 dc 7e 78 8f e5 b9 32 cb 95 19 64 11 74 59 66 e1 cc 0c e5 4a 81 00 0f 84 00 59 13 88 c4 75 d2 e9 02 8b 73 0b bc f2 ad 37 c9 17 f3 a4 66 92 44 a3 31 16 17 96 c8 44 33 44 85 28 61 31 46 58 8e 22 23 53 a9 cc f2 cc c7 3e c2 c3 8d 35 44 3c 94 a8 c2 d0 1e 31 98 0c 50 54 19 51 f0 a9 54 8a 5c be 7c 81 ca 4c 85 f2 4c 85 7c b3 88 ad 58 c4 f2 11 3a 3b 1d 0e d7 0f 68 5f 6e 72 78 b8 8f 16 55 51 42 12 91 98 ce d9 b3 8b 04 8e 8d 14 04 58 96 45 3c 95 c4 b4 1d 6a f5 1e 4e 20 a3 69 1a 93 f1 23 b1 22 a1 28 8c 26 63 b2 33 09 d2 d9 0c 21 db 46 57 43 ec 37 db 48 b6 c0 68 3c 66 77 6f 8f 54 3c c1 53 57 6f d0 33 3a 78 1e Data Ascii: "8KK7qP)Jg\R$,`8>t^`l#>+s~x2dtYfJYus7fD1D3D(a1FX"#S>5D<1PTQT\\|LL\|X:;h_nrxUQBXE<jN i#"(&c3!FWC7Hh<fwoT<SWo3:x
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 62 85 4b e7 96 d0 c3 08 8a 20 50 cc e5 98 9c a8 12 8f aa 44 f5 04 c5 7c 85 74 2a 87 31 1c 50 ae 64 c8 de b8 45 ad 38 81 65 48 4c 14 8b a4 e2 71 44 39 44 8a 0a 84 b1 90 89 da 04 a5 5c 8e 01 3d 88 0a 2c 5e 39 0f 9b 36 12 70 d2 6a 20 84 ff 1f 7b 6f 12 24 49 9a 9e e7 3d be 7b 78 ec 6b 46 66 e4 be 55 d6 5e 5d d5 55 bd 4f 37 30 33 00 09 90 20 4c a2 04 88 32 83 0e 32 99 41 32 1d 74 91 c9 64 e4 81 67 5d a5 b3 28 4a 07 11 20 01 cc 0c 86 b3 f4 36 dd 3d bd d6 d6 b5 66 55 56 ee 19 19 fb be fb ee 3a e4 0c 38 32 82 c4 8c 61 06 d6 35 cc c7 2c 33 0f 19 e1 e1 9e ff 9f 11 fe bf ff f7 bd af 80 21 85 49 47 d2 60 83 67 f9 04 38 ec ec ee e3 a9 01 83 f1 98 bd a7 7b 94 8e 8a 68 ba 42 28 a6 21 c8 0a 6a cc 40 0f 87 91 15 95 99 d9 02 d3 85 19 ba c3 1e ae 0b 87 47 47 a8 aa 46 38 12 Data Ascii: bK PD\|t*1PdE8eHLqD9D\=,^96pj {o$I={xkFfU^]UO703 L22A2tdg](J 6=fUV:82a5,3!IG`g8{hB(!j@GGF8
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: f3 4c 4d 4e e3 d9 55 24 41 a5 5d ef 30 91 a8 50 ab 36 68 36 5b d8 63 8f 98 aa a3 d9 10 d9 1e 52 24 32 e8 98 d4 4e da f8 8e 84 2a aa 04 82 40 71 a2 42 22 32 d8 5e db 47 8c 22 52 a9 24 d9 4c 06 5d 57 50 55 91 6c 36 ce f5 1b 97 39 69 1f f3 dd d7 bf 4b 60 08 8c 03 9b 7c 36 87 6e c8 0c ed 01 5d b3 83 e7 78 d8 be 8b a2 69 44 51 84 20 80 aa a8 5c b8 70 9e f7 ca b7 38 ad d6 90 24 89 4a a1 40 65 ae 48 56 4c 93 8c e9 98 a3 01 81 18 a2 26 62 e4 a7 4b a4 8d 02 86 16 67 e0 8d 50 13 0a 91 14 10 4b e8 a8 ba 42 3c 15 23 91 8c 31 bb 30 4d 36 93 25 9e d4 51 0d 89 b9 c5 19 5e 7d f9 45 16 2e ce b0 b5 fe 88 20 0a 79 ea 89 cb ac 7d 70 97 4e bd ce e9 71 95 7b b7 1e e1 59 22 e7 57 56 c8 65 4a 18 46 fc f1 3b 2e 04 14 0a 79 b2 d9 0c b6 3d a2 35 6c e2 79 16 db 5b 9b 94 4b 79 3c cf Data Ascii: LMNU$A]0P6h6[cR$2N*@qB"2^G"R$L]WPUl69iK`\|6n]xiDQ \p8$J@eHVL&bKgPKB<#10M6%Q^}E. y}pNq{Y"WVeJF;.y=5ly[Ky<
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 2b 96 d0 f5 18 a5 42 81 6a b9 44 3a 93 22 97 cf 50 9e 2e b1 b8 b2 c8 17 bf f8 25 ce af 9c 67 a6 3c 43 32 91 c4 88 c7 90 34 19 37 f2 99 9a 99 06 59 42 d2 15 2c cf c4 b6 87 20 07 a7 36 af 84 42 6e 2a 47 2c 65 10 4f e8 c8 aa c0 72 26 48 b2 c2 c2 e2 32 86 11 e3 f0 b0 4e 18 44 bc 72 eb 35 96 16 97 19 f4 87 84 7e 84 e7 04 6c 6e ec d0 ee 0e 70 83 90 b1 3b c2 48 a9 64 b2 31 5a 27 c7 ec bf d8 a1 90 2d b0 b8 b4 8c 2f 05 0c ed 01 46 5c 45 91 05 ab 2b 8b 5c be 74 81 58 cc 20 5b 4a a3 e7 14 5c 3c 46 13 8b 30 3c 5d 2b e9 aa ca 2b 37 6f 51 2a 95 38 ae 37 70 4c 8f 8f 3f b8 c7 b7 bf f5 0e ed e3 2e c3 d6 98 83 8d 3a 33 c5 39 be f8 c6 97 48 a8 09 a2 10 52 a9 14 e9 44 92 74 3c 8d 8a c6 b0 37 a6 db 1b b2 fe 6c 93 c6 fe 09 8d 83 3a 12 11 f1 b4 46 b9 56 60 ba 56 25 57 ca 23 27 Data Ascii: +BjD:"P.%g<C247YB, 6BnG,eOr&H2NDr5~lnp;Hd1Z'-/F\E+\tX [J\<F0<]++7oQ87pL?.:39HRDt<7l:FV`V%W#'
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 39 bb 4c 7d a9 40 71 36 8f 97 06 68 8e 02 aa c4 30 75 fa fd 1e 9e 1e 21 a5 8a 14 27 cb 5a 88 0f 06 62 c4 49 2d 7d 06 49 2a b8 fe de 0d 36 f7 77 98 f8 2e 12 95 56 ab 83 d4 05 c7 fb 1d b4 d8 26 0b 42 be fd ad ef 70 79 7c 9e df b9 f4 db a0 27 18 86 4e a9 54 44 d7 74 54 55 fd f1 c5 b6 2c 2c cb 42 48 10 40 a2 a4 28 7a 42 ae 6c 33 33 37 c5 b7 bf fd 4d 6a f5 06 cf 7d e2 19 4a 85 22 6e 7f 4c 39 9f c7 54 74 64 2a c9 12 81 a1 19 88 54 50 2a 95 31 0c 83 34 89 d1 75 95 66 73 8e b9 b9 39 0e 9f b4 39 6c 1f b2 db 2a 72 d4 3b 66 ff f8 80 4b 17 ae 3c 6d 04 94 44 71 c4 64 32 61 3c 1a 63 9a 26 f9 bc 8d 69 a9 08 19 33 1a f7 d8 de 79 42 92 24 c4 71 c4 a5 8b 97 58 0c 16 f8 c1 1b 6f 72 f7 f6 5d 76 76 f6 48 e3 8c 7b 0f ee b3 b3 bf 85 a6 2b 2c cc cf e3 18 36 a3 ee 90 62 be 84 04 Data Ascii: 9L}@q6h0u!'ZbI-}I6w.V&Bpy\|'NTDtTU,,BH@(zBl337Mj}J"nL9TtdTP14ufs99lr;fK<mDqd2a<c&i3yB$qXor]vvH{+,6b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49781	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:35 UTC	801	OUT	GET /s/player/d9418494/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:33:35 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 68476 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 17:58:17 GMT Expires: Wed, 01 Oct 2025 17:58:17 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 30 Sep 2024 04:15:05 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 2118 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:35 UTC	704	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 37 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 42 53 44 2d 33 2d 43 6c 61 75 73 65 0a 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 46 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6d 75 74 65 64 41 75 74 6f 70 6c 61 79 3d 21 31 3b 61 2e 65 6e 64 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 61 2e 6c 69 6d 69 74 65 64 50 6c 61 79 62 61 63 6b 44 75 72 61 74 69 6f 6e 49 6e 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 67 2e Data Ascii: (function(g){var window=this;/* SPDX-License-Identifier: Apache-2.0// Copyright 2017 Google LLC SPDX-License-Identifier: BSD-3-Clause*/'use strict';var Fhb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 58 3a 7b 64 3a 22 4d 20 31 36 2e 36 38 2c 2e 39 39 20 43 20 31 33 2e 35 35 2c 31 2e 30 33 20 37 2e 30 32 2c 31 2e 31 36 20 34 2e 39 39 2c 31 2e 36 38 20 63 20 2d 31 2e 34 39 2c 2e 34 20 2d 32 2e 35 39 2c 31 2e 36 20 2d 32 2e 39 39 2c 33 20 2d 30 2e 36 39 2c 32 2e 37 20 2d 30 2e 36 38 2c 38 2e 33 31 20 2d 30 2e 36 38 2c 38 2e 33 31 20 30 2c 30 20 2d 30 2e 30 31 2c 35 2e 36 31 20 2e 36 38 2c 38 2e 33 31 20 2e 33 39 2c 31 2e 35 20 31 2e 35 39 2c 32 2e 36 20 32 2e 39 39 2c 33 20 32 2e 36 39 2c 2e 37 20 31 33 2e 34 30 2c 2e 36 38 20 31 33 2e 34 30 2c 2e 36 38 20 30 2c 30 20 31 30 2e 37 30 2c 2e 30 31 20 31 33 2e 34 30 2c 2d 30 2e 36 38 20 31 2e 35 2c 2d 30 2e 34 20 32 2e 35 39 2c 2d 31 2e 36 20 32 2e 39 39 2c 2d 33 20 2e 36 39 2c 2d 32 2e 37 20 2e 36 38 2c 2d Data Ascii: X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 2e 30 39 2c 2d 32 2e 32 31 20 6c 20 30 2c 2d 30 2e 37 38 20 35 2e 37 31 2c 2d 30 2e 30 39 20 30 2c 2d 32 2e 36 32 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 31 30 2c 2d 32 2e 37 38 20 2d 30 2e 34 30 2c 2d 33 2e 36 38 20 2d 30 2e 32 2c 2d 30 2e 38 39 20 2d 30 2e 37 31 2c 2d 31 2e 35 39 20 2d 31 2e 33 31 2c 2d 31 2e 39 39 20 2d 30 2e 37 2c 2d 30 2e 34 20 2d 31 2e 34 38 2c 2d 30 2e 35 39 20 2d 32 2e 36 38 2c 2d 30 2e 35 39 20 7a 20 6d 20 2d 35 30 2e 34 39 2c 2e 30 39 20 63 20 2d 31 2e 30 39 2c 30 20 2d 32 2e 30 31 2c 2e 31 38 20 2d 32 2e 37 31 2c 2e 36 38 20 2d 30 2e 37 2c 2e 34 20 2d 31 2e 32 2c 31 2e 31 32 20 2d 31 2e 34 39 2c 32 2e 31 32 20 2d 30 2e 33 2c 31 20 2d 30 2e 35 2c 32 2e 32 37 20 2d 30 2e 35 2c 33 2e 38 37 20 6c 20 30 2c 32 2e 32 31 20 63 20 30 2c Data Ascii: .09,-2.21 l 0,-0.78 5.71,-0.09 0,-2.62 c 0,-1.6 -0.10,-2.78 -0.40,-3.68 -0.2,-0.89 -0.71,-1.59 -1.31,-1.99 -0.7,-0.4 -1.48,-0.59 -2.68,-0.59 z m -50.49,.09 c -1.09,0 -2.01,.18 -2.71,.68 -0.7,.4 -1.2,1.12 -1.49,2.12 -0.3,1 -0.5,2.27 -0.5,3.87 l 0,2.21 c 0,
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 2c 34 2e 36 38 20 63 20 30 2c 31 2e 31 20 2d 30 2e 30 38 2c 31 2e 39 30 20 2d 30 2e 32 38 2c 32 2e 34 30 20 2d 30 2e 32 2c 2e 35 20 2d 30 2e 35 2c 2e 36 38 20 2d 31 2c 2e 36 38 20 2d 30 2e 35 2c 30 20 2d 30 2e 37 39 2c 2d 30 2e 31 38 20 2d 30 2e 39 39 2c 2d 30 2e 36 38 20 2d 30 2e 32 2c 2d 30 2e 35 20 2d 30 2e 33 31 2c 2d 31 2e 33 30 20 2d 30 2e 33 31 2c 2d 32 2e 34 30 20 6c 20 30 2c 2d 34 2e 36 38 20 63 20 30 2c 2d 31 2e 31 20 2e 31 31 2c 2d 31 2e 39 30 20 2e 33 31 2c 2d 32 2e 34 30 20 2e 32 2c 2d 30 2e 35 20 2e 34 39 2c 2d 30 2e 36 38 20 2e 39 39 2c 2d 30 2e 36 38 20 7a 20 6d 20 33 39 2e 36 38 2c 2e 30 39 20 63 20 2e 33 2c 30 20 2e 36 31 2c 2e 31 30 20 2e 38 31 2c 2e 34 30 20 2e 32 2c 2e 33 20 2e 32 37 2c 2e 36 37 20 2e 33 37 2c 31 2e 33 37 20 2e 31 2c Data Ascii: ,4.68 c 0,1.1 -0.08,1.90 -0.28,2.40 -0.2,.5 -0.5,.68 -1,.68 -0.5,0 -0.79,-0.18 -0.99,-0.68 -0.2,-0.5 -0.31,-1.30 -0.31,-2.40 l 0,-4.68 c 0,-1.1 .11,-1.90 .31,-2.40 .2,-0.5 .49,-0.68 .99,-0.68 z m 39.68,.09 c .3,0 .61,.10 .81,.40 .2,.3 .27,.67 .37,1.37 .1,
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 20 31 31 33 2e 33 33 20 32 31 2e 38 31 20 31 31 33 2e 33 33 20 32 35 2e 32 39 4c 31 31 37 2e 34 35 20 32 35 2e 30 37 43 31 31 37 2e 37 37 20 31 39 2e 35 37 20 31 31 35 2e 37 31 20 31 37 2e 32 33 20 31 31 30 2e 39 37 20 31 37 2e 32 33 43 31 30 36 2e 35 37 20 31 37 2e 32 33 20 31 30 34 2e 31 37 20 31 39 2e 32 37 20 31 30 34 2e 31 37 20 32 33 2e 34 35 43 31 30 34 2e 31 37 20 32 37 2e 32 35 20 31 30 35 2e 39 37 20 32 38 2e 38 33 20 31 30 38 2e 39 33 20 33 31 2e 30 33 43 31 31 31 2e 38 39 20 33 33 2e 32 33 20 31 31 33 2e 35 35 20 33 34 2e 35 33 20 31 31 33 2e 35 35 20 33 36 2e 32 33 43 31 31 33 2e 35 35 20 33 37 2e 37 35 20 31 31 32 2e 35 31 20 33 38 2e 36 31 20 31 31 31 2e 30 31 20 33 38 2e 36 31 43 31 30 39 2e 31 33 20 33 38 2e 36 31 20 31 30 38 2e 31 31 20 Data Ascii: 113.33 21.81 113.33 25.29L117.45 25.07C117.77 19.57 115.71 17.23 110.97 17.23C106.57 17.23 104.17 19.27 104.17 23.45C104.17 27.25 105.97 28.83 108.93 31.03C111.89 33.23 113.55 34.53 113.55 36.23C113.55 37.75 112.51 38.61 111.01 38.61C109.13 38.61 108.11
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 34 2e 31 38 43 34 2e 30 33 20 33 37 2e 30 39 20 35 2e 37 39 20 33 39 2e 37 34 20 38 2e 30 32 20 34 31 2e 39 37 43 31 30 2e 32 35 20 34 34 2e 31 39 20 31 32 2e 38 39 20 34 35 2e 39 36 20 31 35 2e 38 31 20 34 37 2e 31 37 43 31 38 2e 37 32 20 34 38 2e 33 37 20 32 31 2e 38 34 20 34 39 20 32 34 2e 39 39 20 34 39 5a 4d 32 34 2e 39 39 20 31 32 2e 33 36 43 32 37 2e 34 39 20 31 32 2e 33 36 20 32 39 2e 39 34 20 31 33 2e 31 30 20 33 32 2e 30 32 20 31 34 2e 34 38 43 33 34 2e 31 30 20 31 35 2e 38 37 20 33 35 2e 37 32 20 31 37 2e 38 34 20 33 36 2e 36 38 20 32 30 2e 31 35 43 33 37 2e 36 34 20 32 32 2e 34 36 20 33 37 2e 38 39 20 32 35 2e 30 31 20 33 37 2e 34 31 20 32 37 2e 34 36 43 33 36 2e 39 32 20 32 39 2e 39 31 20 33 35 2e 37 32 20 33 32 2e 31 37 20 33 33 2e 39 35 20 Data Ascii: 4.18C4.03 37.09 5.79 39.74 8.02 41.97C10.25 44.19 12.89 45.96 15.81 47.17C18.72 48.37 21.84 49 24.99 49ZM24.99 12.36C27.49 12.36 29.94 13.10 32.02 14.48C34.10 15.87 35.72 17.84 36.68 20.15C37.64 22.46 37.89 25.01 37.41 27.46C36.92 29.91 35.72 32.17 33.95
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 29 7d 29 7d 2c 4f 68 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 64 34 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 3b 61 2e 6c 65 6e 67 74 68 3e 62 3b 29 61 2e 70 6f 70 28 29 7d 2c 50 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 41 72 72 61 79 28 61 29 3b 0a 64 34 28 61 2c 30 29 3b 72 65 74 75 72 6e 20 61 7d 2c 51 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 63 3d 3d 6e 75 6c 6c 29 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 62 29 3b 0a 65 6c 73 65 7b 76 61 72 20 64 3d 62 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 78 6d 6c 3a 22 2c 30 29 3d 3d 3d 30 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 58 4d 4c 2f Data Ascii: nction(a){return Array.from(a)})},Ohb=function(){},d4=function(a,b){for(;a.length>b;)a.pop()},Phb=function(a){a=Array(a);d4(a,0);return a},Qhb=function(a,b,c){if(c==null)a.removeAttribute(b);else{var d=b.lastIndexOf("xml:",0)===0?"http://www.w3.org/XML/
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 34 28 29 3b 63 21 3d 3d 61 3b 29 7b 76 61 72 20 64 3d 63 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 0a 62 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 29 3b 68 34 2e 6a 2e 70 75 73 68 28 63 29 3b 63 3d 64 7d 7d 2c 67 34 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 34 3f 6a 34 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3a 66 34 2e 66 69 72 73 74 43 68 69 6c 64 7d 2c 24 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 34 3d 67 34 28 29 3b 0a 76 61 72 20 63 3b 61 3a 7b 69 66 28 63 3d 6a 34 29 7b 64 6f 7b 76 61 72 20 64 3d 63 2c 65 3d 61 2c 66 3d 62 2c 68 3d 65 34 28 64 2c 66 29 3b 69 66 28 6b 34 28 64 2c 65 2c 68 2e 42 2c 66 2c 68 2e 6b 65 79 29 29 62 72 65 61 6b 20 61 7d 77 68 69 6c 65 28 62 26 26 28 63 3d 63 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 29 Data Ascii: 4();c!==a;){var d=c.nextSibling;b.removeChild(c);h4.j.push(c);c=d}},g4=function(){return j4?j4.nextSibling:f4.firstChild},$hb=function(a,b){j4=g4();var c;a:{if(c=j4){do{var d=c,e=a,f=b,h=e4(d,f);if(k4(d,e,h.B,f,h.key))break a}while(b&&(c=c.nextSibling))
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 74 22 2c 6e 75 6c 6c 29 3b 0a 76 61 72 20 62 3d 6a 34 3b 76 61 72 20 63 3d 65 34 28 62 29 3b 69 66 28 63 2e 74 65 78 74 21 3d 3d 61 29 7b 63 3d 63 2e 74 65 78 74 3d 61 3b 66 6f 72 28 76 61 72 20 64 3d 31 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 3d 31 29 63 3d 28 30 2c 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 28 63 29 3b 62 2e 64 61 74 61 21 3d 3d 63 26 26 28 62 2e 64 61 74 61 3d 63 29 7d 7d 2c 67 69 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 66 69 62 29 3b 0a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 66 69 62 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 71 34 5b 62 5d 21 3d 3d 76 6f 69 64 20 30 26 26 28 61 5b Data Ascii: t",null);var b=j4;var c=e4(b);if(c.text!==a){c=c.text=a;for(var d=1;d<arguments.length;d+=1)c=(0,arguments[d])(c);b.data!==c&&(b.data=c)}},gib=function(){var a=Object.assign({},fib);Object.getOwnPropertyNames(fib).forEach(function(b){q4[b]!==void 0&&(a[
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 66 2c 62 2e 68 61 73 45 72 72 6f 72 3d 21 30 7d 66 69 6e 61 6c 6c 79 7b 67 2e 63 62 28 62 29 7d 61 2e 6b 46 2e 6c 65 6e 67 74 68 3d 30 7d 7d 2c 6c 69 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 49 61 29 7b 61 2e 49 61 3d 21 30 3b 0a 76 61 72 20 62 3b 28 62 3d 61 5b 53 79 6d 62 6f 6c 2e 64 69 73 70 6f 73 65 5d 29 3d 3d 6e 75 6c 6c 7c 7c 62 2e 63 61 6c 6c 28 61 29 3b 64 65 6c 65 74 65 20 61 2e 70 61 72 65 6e 74 3b 6f 69 62 28 61 29 7d 7d 2c 70 69 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 2e 52 6f 28 74 68 69 73 29 3b 0a 69 66 28 67 2e 50 6f 28 74 68 69 73 29 29 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 74 68 69 73 2e 65 67 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 67 2e 51 6f 28 74 68 69 73 2e 65 67 5b 61 5d 2c 74 68 69 73 2e 43 6e 5b 61 5d 29 3b Data Ascii: f,b.hasError=!0}finally{g.cb(b)}a.kF.length=0}},lib=function(a){if(!a.Ia){a.Ia=!0;var b;(b=a[Symbol.dispose])==null\|\|b.call(a);delete a.parent;oib(a)}},pib=function(){g.Ro(this);if(g.Po(this))for(var a=0;a<this.eg.length;a++)g.Qo(this.eg[a],this.Cn[a]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49782	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:35 UTC	812	OUT	GET /s/player/d9418494/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:33:35 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 338877 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 08:26:34 GMT Expires: Wed, 01 Oct 2025 08:26:34 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 30 Sep 2024 04:15:05 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 36421 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:35 UTC	702	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 70 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 68 3d 66 3b 62 61 28 74 68 69 73 2c 22 64 Data Ascii: =c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.h=f;ba(this,"d
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 0a 76 61 72 20 6d 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 6c 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 0a 75 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 Data Ascii: bject.prototype.hasOwnProperty.call(a,b)}var ma=typeof Object.assign=="function"?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)la(d,e)&&(a[e]=d[e])}return a};u("Object.assign",function(a){return a
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 69 64 20 30 3b 74 68 69 73 2e 68 3d 31 3b 74 68 69 73 2e 44 3d 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 49 3d 74 68 69 73 2e 6a 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 69 66 28 61 2e 41 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 61 2e 41 3d 21 30 7d 0a 76 61 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 29 7b 61 2e 6a 3d 7b 65 78 63 65 70 74 69 6f 6e 3a 62 2c 6a 64 3a 21 30 7d 3b 61 2e 68 3d 61 2e 6f 7c 7c 61 2e 44 7d 0a 76 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: id 0;this.h=1;this.D=this.o=0;this.I=this.j=null}function xa(a){if(a.A)throw new TypeError("Generator is already running");a.A=!0}va.prototype.H=function(a){this.i=a};function ya(a,b){a.j={exception:b,jd:!0};a.h=a.o\|\|a.D}va.prototype.return=function(a
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 6e 65 78 74 2c 62 2c 61 2e 68 2e 48 29 3a 28 61 2e 68 2e 48 28 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 78 61 28 61 2e 68 29 3b 61 2e 68 2e 75 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 75 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 68 2e 48 29 3a 28 79 61 28 61 2e 68 2c 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 44 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: next,b,a.h.H):(a.h.H(b),b=Fa(a));return b};this.throw=function(b){xa(a.h);a.h.u?b=Ea(a,a.h.u["throw"],b,a.h.H):(ya(a.h,b),b=Fa(a));return b};this.return=function(b){return Da(a,b)};this[Symbol.iterator]=function(){return this}}function Ha(a){function
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 68 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 0a 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 57 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 44 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 57 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 44 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c Data Ascii: his.j(function(){throw g;})};b.prototype.o=function(){function g(l){return function(m){k\|\|(k=!0,l.call(h,m))}}var h=this,k=!1;return{resolve:g(this.W),reject:g(this.D)}};b.prototype.W=function(g){if(g===this)this.D(new TypeError("A Promise cannot resol
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 3c 74 68 69 73 2e 69 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 69 28 74 68 69 73 2e 69 5b 67 5d 29 3b 74 68 69 73 2e 69 3d 6e 75 6c 6c 7d 7d 3b 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 6f 28 29 3b 67 2e 58 62 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6f 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c 28 68 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f Data Ascii: <this.i.length;++g)f.i(this.i[g]);this.i=null}};var f=new c;b.prototype.ha=function(g){var h=this.o();g.Xb(h.resolve,h.reject)};b.prototype.oa=function(g,h){var k=this.o();try{g.call(h,k.resolve,k.reject)}catch(l){k.reject(l)}};b.prototype.then=functio
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 6c 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 62 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 Data Ascii: )).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!la(k,g)){var l=new c;ba(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m ins
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 2b 67 2c 66 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 6c 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 6e 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 6e 2e 6b 65 79 21 3d 3d 6e 2e 6b 65 79 7c 7c 6b 3d 3d 3d 6e 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 65 6e 74 72 79 3a 6e 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 65 6e 74 72 79 3a 76 6f 69 64 20 30 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 Data Ascii: +g,f.set(k,l)):l="p_"+k;var m=h[0][l];if(m&&la(h[0],l))for(h=0;h<m.length;h++){var n=m[h];if(k!==k&&n.key!==n.key\|\|k===n.key)return{id:l,list:m,index:h,entry:n}}return{id:l,list:m,index:-1,entry:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 69 7a 65 3d 30 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 28 68 3d 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 29 26 26 68 2e 76 61 6c 75 65 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e Data Ascii: ize=0};e.prototype.has=function(h){return!!d(this,h).entry};e.prototype.get=function(h){return(h=d(this,h).entry)&&h.value};e.prototype.entries=function(){return c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49783	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:35 UTC	800	OUT	GET /s/player/d9418494/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:33:35 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2442768 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 17:53:41 GMT Expires: Wed, 01 Oct 2025 17:53:41 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 30 Sep 2024 04:15:05 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 2394 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:35 UTC	702	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 55 73 65 20 6f 66 20 74 68 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright Google LLC All Rights Reserved. Use of th
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 0a Data Ascii: ge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 20 69 6e 63 6c 75 64 69 6e 67 20 63 6f 6d 6d 65 72 63 69 61 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 6f 20 61 6c 74 65 72 20 69 74 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 0a 20 20 20 66 72 65 65 6c 79 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 0a 20 20 20 31 2e 20 54 68 65 20 6f 72 69 67 69 6e 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6d 69 73 72 65 70 72 65 73 65 6e 74 65 64 3b 20 79 6f 75 20 6d 75 73 74 20 6e 6f 74 0a 20 20 20 20 20 20 63 6c 61 69 6d 20 74 68 61 74 20 79 6f 75 20 77 72 6f 74 65 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 73 6f 66 74 77 61 72 65 2e 20 49 66 20 79 6f 75 20 75 Data Ascii: including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented; you must not claim that you wrote the original software. If you u
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 Data Ascii: t to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDI
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 64 2c 47 63 61 2c 5a 64 2c 63 65 2c 64 65 2c 65 65 2c 24 64 2c 62 65 2c 61 65 2c 68 65 2c 41 63 61 2c 69 65 2c 48 63 61 2c 65 62 2c 6a 65 2c 6c 65 2c 55 64 2c 57 64 2c 6d 65 2c 4a 63 61 2c 6e 65 2c 6f 65 2c 70 65 2c 67 62 2c 71 65 2c 72 65 2c 73 65 2c 74 65 2c 75 65 2c 76 65 2c 77 65 2c 4b 63 61 2c 78 65 2c 4c 63 61 2c 79 65 2c 4d 63 61 2c 41 65 2c 7a 65 2c 42 65 2c 43 65 2c 45 65 2c 46 65 2c 47 65 2c 4e 63 61 2c 50 63 61 2c 49 65 2c 51 63 61 2c 52 63 61 2c 4a 65 2c 4b 65 2c 4e 65 2c 54 63 61 2c 55 63 61 2c 4f 65 2c 59 63 61 2c 61 64 61 2c 56 63 61 2c 24 63 61 2c 5a 63 61 2c 58 63 61 2c 57 63 61 2c 62 64 61 2c 50 65 2c 63 64 61 2c 55 65 2c 56 65 2c 65 64 61 2c 57 65 2c 67 64 61 2c 58 65 2c 59 65 2c 5a 65 2c 68 64 61 2c 24 65 2c 69 64 61 2c 0a 61 66 2c 62 Data Ascii: d,Gca,Zd,ce,de,ee,$d,be,ae,he,Aca,ie,Hca,eb,je,le,Ud,Wd,me,Jca,ne,oe,pe,gb,qe,re,se,te,ue,ve,we,Kca,xe,Lca,ye,Mca,Ae,ze,Be,Ce,Ee,Fe,Ge,Nca,Pca,Ie,Qca,Rca,Je,Ke,Ne,Tca,Uca,Oe,Yca,ada,Vca,$ca,Zca,Xca,Wca,bda,Pe,cda,Ue,Ve,eda,We,gda,Xe,Ye,Ze,hda,$e,ida,af,b
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 43 6b 2c 61 68 61 2c 67 68 61 2c 68 68 61 2c 69 68 61 2c 46 6b 2c 47 6b 2c 48 6b 2c 6a 68 61 2c 49 6b 2c 4a 6b 2c 4c 6b 2c 4d 6b 2c 6b 68 61 2c 4e 6b 2c 4f 6b 2c 50 6b 2c 6c 68 61 2c 6d 68 61 2c 51 6b 2c 6e 68 61 2c 44 6a 2c 71 68 61 2c 72 68 61 2c 73 68 61 2c 74 68 61 2c 6f 68 61 2c 52 6b 2c 53 6b 2c 54 6b 2c 55 6b 2c 76 68 61 2c 57 6b 2c 56 6b 2c 77 68 61 2c 78 68 61 2c 79 68 61 2c 24 6b 2c 7a 68 61 2c 61 6c 2c 62 6c 2c 41 68 61 2c 42 68 61 2c 63 6c 2c 44 68 61 2c 64 6c 2c 43 68 61 2c 45 68 61 2c 46 68 61 2c 47 68 61 2c 65 6c 2c 66 6c 2c 67 6c 2c 68 6c 2c 69 6c 2c 6a 6c 2c 6b 6c 2c 48 68 61 2c 6c 6c 2c 6d 6c 2c 6e 6c 2c 49 68 61 2c 4b 68 61 2c 4c 68 61 2c 70 6c 2c 72 6c 2c 71 6c 2c 74 6c 2c 75 6c 2c 76 6c 2c 4e 68 61 2c 4f 68 61 2c 77 6c 2c 78 6c 2c 79 Data Ascii: Ck,aha,gha,hha,iha,Fk,Gk,Hk,jha,Ik,Jk,Lk,Mk,kha,Nk,Ok,Pk,lha,mha,Qk,nha,Dj,qha,rha,sha,tha,oha,Rk,Sk,Tk,Uk,vha,Wk,Vk,wha,xha,yha,$k,zha,al,bl,Aha,Bha,cl,Dha,dl,Cha,Eha,Fha,Gha,el,fl,gl,hl,il,jl,kl,Hha,ll,ml,nl,Iha,Kha,Lha,pl,rl,ql,tl,ul,vl,Nha,Oha,wl,xl,y
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 2c 7a 70 2c 41 70 2c 43 70 2c 44 70 2c 64 6d 61 2c 45 70 2c 46 70 2c 47 70 2c 66 6d 61 2c 4a 70 2c 67 6d 61 2c 68 6d 61 2c 4b 70 2c 6a 6d 61 2c 4d 70 2c 4e 70 2c 4f 70 2c 50 70 2c 6b 6d 61 2c 51 70 2c 53 70 2c 54 70 2c 55 70 2c 56 70 2c 6c 6d 61 2c 58 70 2c 59 70 2c 5a 70 2c 24 70 2c 61 71 2c 62 71 2c 6d 6d 61 2c 6e 6d 61 2c 6f 6d 61 2c 70 6d 61 2c 71 6d 61 2c 72 6d 61 2c 63 71 2c 73 6d 61 2c 6a 71 2c 74 6d 61 2c 75 6d 61 2c 76 6d 61 2c 6b 71 2c 6d 71 2c 6e 71 2c 6f 71 2c 72 71 2c 73 71 2c 74 71 2c 78 6d 61 2c 77 71 2c 78 71 2c 79 71 2c 79 6d 61 2c 7a 6d 61 2c 7a 71 2c 41 6d 61 2c 42 6d 61 2c 42 71 2c 4a 6d 61 2c 4b 6d 61 2c 4c 6d 61 2c 43 71 2c 4d 6d 61 2c 4e 6d 61 2c 51 6d 61 2c 45 71 2c 53 6d 61 2c 52 6d 61 2c 47 71 2c 54 6d 61 2c 55 6d 61 2c 49 71 2c Data Ascii: ,zp,Ap,Cp,Dp,dma,Ep,Fp,Gp,fma,Jp,gma,hma,Kp,jma,Mp,Np,Op,Pp,kma,Qp,Sp,Tp,Up,Vp,lma,Xp,Yp,Zp,$p,aq,bq,mma,nma,oma,pma,qma,rma,cq,sma,jq,tma,uma,vma,kq,mq,nq,oq,rq,sq,tq,xma,wq,xq,yq,yma,zma,zq,Ama,Bma,Bq,Jma,Kma,Lma,Cq,Mma,Nma,Qma,Eq,Sma,Rma,Gq,Tma,Uma,Iq,
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 65 77 2c 64 77 2c 67 77 2c 68 77 2c 59 71 61 2c 64 72 61 2c 66 72 61 2c 63 72 61 2c 62 72 61 2c 65 72 61 2c 6b 77 2c 6e 77 2c 68 72 61 2c 67 72 61 2c 74 77 2c 75 77 2c 58 71 61 2c 71 72 61 2c 41 77 2c 70 72 61 2c 74 72 61 2c 6f 72 61 2c 6a 77 2c 42 77 2c 72 77 2c 79 77 2c 72 72 61 2c 70 77 2c 24 71 61 2c 5a 71 61 2c 0a 61 72 61 2c 6d 77 2c 6e 72 61 2c 46 77 2c 41 72 61 2c 7a 72 61 2c 47 77 2c 43 72 61 2c 44 72 61 2c 45 72 61 2c 49 77 2c 46 72 61 2c 47 72 61 2c 48 72 61 2c 4a 72 61 2c 4b 72 61 2c 4c 77 2c 4d 72 61 2c 4d 77 2c 4e 72 61 2c 4f 72 61 2c 51 72 61 2c 52 72 61 2c 4f 77 2c 53 72 61 2c 55 72 61 2c 50 77 2c 56 72 61 2c 51 77 2c 52 77 2c 70 74 2c 24 72 61 2c 65 73 61 2c 58 77 2c 67 73 61 2c 6a 73 61 2c 5a 77 2c 6c 73 61 2c 6d 73 61 2c 6e 73 61 2c 6f Data Ascii: ew,dw,gw,hw,Yqa,dra,fra,cra,bra,era,kw,nw,hra,gra,tw,uw,Xqa,qra,Aw,pra,tra,ora,jw,Bw,rw,yw,rra,pw,$qa,Zqa,ara,mw,nra,Fw,Ara,zra,Gw,Cra,Dra,Era,Iw,Fra,Gra,Hra,Jra,Kra,Lw,Mra,Mw,Nra,Ora,Qra,Rra,Ow,Sra,Ura,Pw,Vra,Qw,Rw,pt,$ra,esa,Xw,gsa,jsa,Zw,lsa,msa,nsa,o
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 2c 45 43 2c 46 43 2c 47 43 2c 48 43 2c 49 43 2c 4a 43 2c 4b 43 2c 4c 43 2c 4d 43 2c 4e 43 2c 4f 43 2c 50 43 2c 51 43 2c 52 43 2c 53 43 2c 54 43 2c 55 43 2c 56 43 2c 57 43 2c 58 43 2c 59 43 2c 5a 43 2c 24 43 2c 61 44 2c 62 44 2c 63 44 2c 64 44 2c 65 44 2c 66 44 2c 67 44 2c 68 44 2c 69 44 2c 6a 44 2c 6b 44 2c 6c 44 2c 6e 44 2c 6f 44 2c 72 76 61 2c 70 44 2c 71 44 2c 72 44 2c 6d 44 2c 73 44 2c 74 44 2c 75 44 2c 74 76 61 2c 77 44 2c 76 76 61 2c 76 44 2c 77 76 61 2c 79 44 2c 78 76 61 2c 41 44 2c 78 44 2c 42 44 2c 43 44 2c 44 44 2c 46 44 2c 7a 76 61 2c 41 76 61 2c 42 76 61 2c 43 76 61 2c 4f 44 2c 50 44 2c 4b 44 2c 51 44 2c 45 76 61 2c 46 76 61 2c 47 76 61 2c 48 76 61 2c 0a 79 76 61 2c 49 76 61 2c 45 44 2c 4a 76 61 2c 4b 76 61 2c 53 44 2c 58 44 2c 54 44 2c 48 44 Data Ascii: ,EC,FC,GC,HC,IC,JC,KC,LC,MC,NC,OC,PC,QC,RC,SC,TC,UC,VC,WC,XC,YC,ZC,$C,aD,bD,cD,dD,eD,fD,gD,hD,iD,jD,kD,lD,nD,oD,rva,pD,qD,rD,mD,sD,tD,uD,tva,wD,vva,vD,wva,yD,xva,AD,xD,BD,CD,DD,FD,zva,Ava,Bva,Cva,OD,PD,KD,QD,Eva,Fva,Gva,Hva,yva,Iva,ED,Jva,Kva,SD,XD,TD,HD
2024-10-01 18:33:35 UTC	1390	IN	Data Raw: 49 2c 4b 79 61 2c 4c 79 61 2c 4d 79 61 2c 4d 49 2c 4e 49 2c 4f 49 2c 50 49 2c 51 49 2c 4e 79 61 2c 4f 79 61 2c 52 49 2c 53 49 2c 54 49 2c 50 79 61 2c 55 49 2c 56 49 2c 57 49 2c 51 79 61 2c 52 79 61 2c 58 49 2c 53 79 61 2c 59 49 2c 5a 49 2c 24 49 2c 61 4a 2c 54 76 61 2c 54 79 61 2c 55 79 61 2c 56 79 61 2c 57 79 61 2c 58 79 61 2c 59 79 61 2c 62 4a 2c 63 4a 2c 64 4a 2c 65 4a 2c 66 4a 2c 67 4a 2c 68 4a 2c 69 4a 2c 6a 4a 2c 6b 4a 2c 6c 4a 2c 5a 79 61 2c 24 79 61 2c 73 4a 2c 74 4a 2c 61 7a 61 2c 75 4a 2c 7a 4a 2c 63 7a 61 2c 67 7a 61 2c 6c 7a 61 2c 68 7a 61 2c 6e 7a 61 2c 6f 7a 61 2c 6d 7a 61 2c 70 7a 61 2c 71 7a 61 2c 72 7a 61 2c 4b 4a 2c 75 7a 61 2c 77 7a 61 2c 79 7a 61 2c 7a 7a 61 2c 41 7a 61 2c 4e 4a 2c 43 7a 61 2c 44 7a 61 2c 48 7a 61 2c 4f 4a 2c 49 7a 61 Data Ascii: I,Kya,Lya,Mya,MI,NI,OI,PI,QI,Nya,Oya,RI,SI,TI,Pya,UI,VI,WI,Qya,Rya,XI,Sya,YI,ZI,$I,aJ,Tva,Tya,Uya,Vya,Wya,Xya,Yya,bJ,cJ,dJ,eJ,fJ,gJ,hJ,iJ,jJ,kJ,lJ,Zya,$ya,sJ,tJ,aza,uJ,zJ,cza,gza,lza,hza,nza,oza,mza,pza,qza,rza,KJ,uza,wza,yza,zza,Aza,NJ,Cza,Dza,Hza,OJ,Iza

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49787	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:35 UTC	613	OUT	GET /dist/img/graphic-map.png?v=8 HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:35 UTC	2259	IN	HTTP/1.1 200 OK Cache-Control: public, immutable, max-age=604800 Content-Type: image/png Expires: Tue, 08 Oct 2024 18:34:48 GMT Last-Modified: Tue, 18 Jun 2024 12:20:50 GMT Accept-Ranges: bytes ETag: "3091cff479c1da1:0" Vary: Accept-Encoding ImageProcessedBy: ImageProcessor/2.7.0.100 - ImageProcessor.Web/4.10.0.100 X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:48 GMT Connection: close Content-Length: 97998
2024-10-01 18:33:35 UTC	14125	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 90 00 00 03 cc 08 03 00 00 00 b3 07 d5 18 00 00 02 fd 50 4c 54 45 00 00 00 80 80 80 7c 7c 7c 7e 7e 7e e2 e2 e2 e4 e4 e4 82 82 82 75 75 75 83 83 83 e1 e1 e1 82 82 82 dc dc dc dd dd dd 82 82 82 7b 7b 7b e0 e0 e0 80 80 80 df df df 81 81 81 83 83 83 d4 d4 d4 d9 d9 d9 da da da 80 80 80 c5 c5 c5 7c 7c 7c d9 d9 d9 81 81 81 cb cb cb 71 71 71 d7 d7 d7 d2 d2 d2 7b 7b 7b 82 82 82 83 83 83 c7 c7 c7 d7 d7 d7 c2 c2 c2 c8 c8 c8 8d 8d 8d d6 d6 d6 be be be d1 d1 d1 7c 7c 7c 85 85 85 cd cd cd bd bd bd d0 d0 d0 85 85 85 82 82 82 86 86 86 8f 8f 8f c9 c9 c9 ad ad ad 82 82 82 d2 d2 d2 95 95 95 84 84 84 c1 c1 c1 bd bd bd df df df ce ce ce b2 b2 b2 b0 b0 b0 82 82 82 85 85 85 9c 9c 9c ba ba ba cf cf cf 82 82 82 a6 a6 a6 c5 Data Ascii: PNGIHDRPLTE\|\|\|~~~uuu{{{\|\|\|qqq{{{\|\|\|
2024-10-01 18:33:35 UTC	16384	IN	Data Raw: 32 48 47 1b 10 43 52 69 74 6e b6 55 13 cb ce 66 f4 4e 25 9c 86 c9 81 2b c2 84 98 3c 60 14 47 30 9c 01 33 e8 c2 ea ea cd 19 74 a5 04 82 8a 19 39 dc 50 2a 3e 90 39 68 c6 e7 5c 20 25 41 14 bb 28 ca 0a ea ea 46 48 01 77 bd 78 f1 1b 25 60 31 8d 67 56 e2 a6 dc 4e e7 9a a9 fb 08 ae 0e 9e ed 47 ac 92 0e 4d 2a 20 0d ae 5e 75 3a 71 f2 97 b8 58 31 f9 22 7f f5 55 22 de 6d 97 f7 82 88 2f bf f4 cd bc ad 30 33 90 cf b8 2c 8a 19 11 1a 4e 4b 04 72 e7 dc 17 d5 d5 93 83 14 8a 47 f2 8b b8 7b 45 02 81 e5 65 66 19 a4 bb e2 eb 38 3e 5a 5b ad 9e 8d 60 42 75 c7 56 8b e2 28 0b 9c 81 6c 92 7c 90 00 17 20 2f cf 36 a2 2b 26 10 dc d8 79 b0 9f b0 de e9 c7 3b e5 8d 7b a1 3a 7a 71 41 d0 e9 74 c1 c1 41 23 29 82 39 02 36 d3 18 d5 54 ba 9d 6b 0c 1b 39 fb be 23 a7 31 5c 99 58 83 ee 35 62 95 Data Ascii: 2HGCRitnUfN%+<`G03t9P>9h\ %A(FHwx%`1gVNGM ^u:qX1"U"m/03,NKrG{Eef8>Z[`BuV(l\| /6+&y;{:zqAtA#)96Tk9#1\X5b
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: 4a 13 09 d0 81 98 44 af ca a5 c9 19 95 73 e9 89 d0 b7 57 1f db e6 66 59 06 0e c3 0c 2f 49 3f 98 91 98 98 76 2b 87 ac 55 34 dc b7 6f 63 24 1e 02 d0 cf 51 39 47 1e 8d e1 54 a5 31 88 c8 20 ab 27 2d d7 43 30 15 21 4e e1 a5 e5 61 38 40 bd 43 fb be 72 78 e0 2c 30 d5 a5 22 b4 f6 3e 45 22 3a 1f 41 ab 0a ae 5e 9b 50 28 6a 2c ee fc e2 66 5d 35 22 88 84 d4 a5 be 19 5d 72 c3 72 67 67 67 fe b7 9e 09 eb 7d b8 16 7c d9 cf 5b c9 2f 4a cc 41 47 09 5f 74 5a dd e0 c7 59 0c 42 74 84 64 74 72 5e 35 ad dc ab 0e 38 9b 02 82 d1 f7 b4 a6 26 26 8e ba 38 0c c1 e0 42 55 12 84 01 53 79 2a 06 42 69 d8 11 22 24 b0 c1 21 9e 77 2d df 46 fb 11 a3 c2 40 a9 e6 56 fa d6 13 cf 11 c9 22 51 e2 c3 87 8b 0d d9 d1 44 0e c4 ed 6e 65 a4 06 28 6a 99 f4 6a d7 aa e4 4c bd d6 4a 16 8a f9 2f 8f 81 50 b0 Data Ascii: JDsWfY/I?v+U4oc$Q9GT1 '-C0!Na8@Crx,0">E":A^P(j,f]5"]rrggg}\|[/JAG_tZYBtdtr^58&&8BUSy*Bi"$!w-F@V"QDne(jjLJ/P
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: 03 0b a1 b9 34 ce f3 af 91 10 34 6f ab ed b3 a0 db 3a 6a 60 c4 ad 30 03 e6 11 bd 4d 85 b2 65 aa f2 a9 22 14 9a 55 bd c7 d3 28 08 2c d4 81 bc 59 5c 63 85 b4 da c1 0e 56 e6 0b 1b b2 f2 1d f6 0f 04 9a c5 53 81 ac 1f 89 8f 4f a7 56 36 ac 90 17 a9 4c 2b 02 be ea 24 96 9e 60 08 91 38 f6 26 93 2b 1c 20 61 26 47 07 eb 8c a3 a3 2d 89 55 91 49 51 ca 03 07 d1 9f cb 00 0b a0 f9 7e 7c 96 3f 8d 88 ae a3 ba 52 6e c0 cb ec 80 15 19 6e d7 5e 29 96 50 b0 1a 0c 87 e3 51 b6 3c 31 fd ea 5b 51 60 f2 8e cd 33 5b 1d ca 40 be e3 3e 10 8f 88 cc d1 0a 6b 12 eb dd 33 a3 c3 a5 35 11 42 ce 63 38 98 95 55 9d 31 3a da 0c 54 18 75 32 4b 78 f3 34 4b 83 6c 06 be e7 89 1b 86 14 71 8b cb 01 09 db c1 fd 15 e5 b4 26 85 73 8f 45 45 26 68 fa 73 91 33 19 85 3c a5 b0 00 97 c6 7d fc 9d 95 b5 6a c0 Data Ascii: 44o:j`0Me"U(,Y\cVSOV6L+$`8&+ a&G-UIQ~\|?Rnn^)PQ<1[Q`3[@>k35Bc8U1:Tu2Kx4Klq&sEE&hs3<}j
2024-10-01 18:33:36 UTC	211	IN	Data Raw: a5 a5 2e 36 db 7f a8 a9 6b 89 f0 9a fd 75 c3 c2 81 58 20 d3 45 49 a5 2f 5c e3 3b a2 63 b3 ad 4d c1 44 a3 7a 79 64 1b e3 c6 97 96 2e f7 cf db 2b ef 4d 3b d6 49 4f 01 45 6d c7 de 76 32 16 83 f2 2e 69 79 20 ff f6 2b f1 5b ee 81 2c 76 7c c4 b2 f4 d1 12 85 a4 ef f2 7a c7 6b 21 15 b6 b6 6f c9 eb fd da 12 46 85 ea c6 f5 b0 6b 1f 0e 37 56 f0 92 24 85 c9 0f 6f 39 fa c8 6b 6c 96 3c 1e f8 fa 72 3f 61 59 57 09 36 27 03 44 f5 09 f4 f4 b4 fd aa ea 63 e1 42 16 32 63 af 6f c3 44 5f 9c 26 fb 84 dd 1b 67 f5 fb 79 29 22 78 1b d3 8e 75 d2 08 50 94 8c fe 51 94 91 d5 3a f2 46 41 97 b4 8c e2 40 46 fe 59 a0 0a ea dd 59 8b c5 ea ad 84 64 b5 a7 7b c7 Data Ascii: .6kuX EI/\;cMDzyd.+M;IOEmv2.iy +[,v\|zk!oFk7V$o9kl<r?aYW6'DcB2coD_&gy)"xuPQ:FA@FYYd{
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: fc 16 8b 45 42 a5 d6 ad 03 b0 6b fd b6 b7 84 e1 c6 86 0d 8d 6f 8e bd 0f 99 f5 4e 5a 78 29 0a 8f da f5 2c 44 a9 3f 41 aa b4 55 4d 8f 3b 59 c8 c2 f0 86 84 ff 59 2f 8f 5e 30 0e b5 2c 8f 05 4b 9c 4a 8a 7e b8 d9 22 a6 1d eb 4c 7a a0 28 b9 d7 6a c2 18 a7 a0 ae ab 8c 92 2e 69 b9 78 09 39 7a cb fa 8f 5c 03 99 af a8 e8 f8 10 a8 42 32 3c 51 15 0a f1 47 8f d7 26 bf d3 e5 98 b7 84 08 54 ae ec 12 d8 35 ae d6 ee 1a 70 cf 6c 70 fb 5c ad 90 d9 cb 0d 21 8c 91 1c 1a d8 70 e0 0d a4 4a 5b fb 48 a7 16 b2 69 b2 e0 7f 78 eb 8c 9b 5c 30 76 16 b6 30 47 de b2 84 e2 30 46 0a a5 1b eb d6 cb dd 40 51 09 5e 9a 31 d7 97 4b 48 28 a8 eb 2a a5 a4 4b 5a 6e eb 97 7e fb ed af 1c 9b ba 42 f5 3d a4 a1 ab 15 a8 42 ea aa 43 22 74 74 f0 83 ca 2d 2c 10 c6 e3 1f 5b 42 12 ee d2 f9 0c ec 1e c7 d5 7a Data Ascii: EBkoNZx),D?AUM;YY/^0,KJ~"Lz(j.ix9z\B2<QG&T5plp\!pJ[Hix\0v0G0F@Q^1KH(*KZn~B=BC"tt-,[Bz
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: 52 63 c9 f9 1e 47 17 d9 db e2 68 93 81 9f 6c a3 71 e2 41 2e b8 81 61 3c 73 1e 2d cb ad 17 98 13 22 05 12 0a 72 4e 14 59 a6 2e 58 fa f8 2a 41 ad 56 c1 c4 95 dd 2b b2 e8 d5 41 20 b7 1c cb ae 49 eb fc 2e 5a e2 1b 2c b2 0f 43 dc eb 1b 7f 11 c0 4f dd 35 f1 20 df 55 8d 71 55 bf 0e 84 90 c9 f6 a9 94 2e e1 8a f2 5f b6 40 d6 53 a9 e4 70 81 4c 17 71 e1 7b 93 8f 8b 30 5b 68 7a e6 02 11 29 cd 43 26 0c 71 cf 68 19 54 83 df fc 88 cf da 75 0d a4 4c fd 20 c3 b8 d8 22 20 84 4c b6 2a 49 9d c0 a8 98 bd 29 db b7 3f 5d 54 5a 8b c5 b2 34 0f b3 83 a6 67 1d 3d c4 0c 52 5a 1e 52 60 08 73 d7 0c 6a 41 24 5f 31 fc dd ff ce 9e 73 06 9c fa fd 0f 48 c5 4b 2f 63 7c c6 2e 20 84 4c 36 ed 2e 94 12 cf 8c 5b 81 a4 8f e3 38 a1 17 b3 82 38 3e a6 1e 8f e0 1e f9 0a c3 b8 6b 1c 6a 10 69 4f a2 a8 Data Ascii: RcGhlqA.a<s-"rNY.XAV+A I.Z,CO5 UqU._@SpLq{0[hz)C&qhTuL " LI)?]TZ4g=RZR`sjA$_1sHK/c\|. L6.[88>kjiO
2024-10-01 18:33:36 UTC	1742	IN	Data Raw: 09 c2 a8 4d 8b 20 21 17 35 04 61 24 2d 44 91 da 44 8b a6 85 2d 5c 04 22 a3 8b 71 5b 30 df e1 e1 d5 39 ee 1b 69 23 3a 31 e7 c0 9c 09 ce fc 7f 5f e2 0f ef fb bc cf 6b 97 f3 20 a7 22 81 46 a3 0e 54 0c cb 3e d6 d4 00 f0 b0 e0 93 06 4b d7 31 e9 55 09 46 ba e0 8a 61 4b 35 35 5c 7b ab c6 49 8e d3 49 ae 50 00 78 5a e0 c2 26 5d cf cc 9f ca b9 bf 4b 00 37 54 26 d2 e9 89 5a 79 b1 a4 b6 ed ec df 41 8f 01 78 5a d5 cf 3a 5d cf 7c af 17 c0 45 c1 fa fa 5a 91 89 a8 da 16 e7 37 6e 00 de 16 fa b1 59 37 d8 d3 29 80 fb 32 4d 6a 5b 8f 00 80 87 f9 33 af 2b 74 03 f3 98 6d c1 28 85 41 43 90 01 60 55 d5 5c 63 56 37 aa 9e 10 a0 04 da 95 20 03 40 4e 60 76 49 f3 39 28 40 3e 04 19 00 5c 71 be 4e f3 31 f3 02 38 e2 7e 90 4d 4c 00 c0 b3 3e 6a 5e 35 67 04 70 97 df ef 13 91 2e b5 ed e0 65 Data Ascii: M !5a$-DD-\"q[09i#:1_k "FT>K1UFaK55\{IIPxZ&]K7T&ZyAxZ:]\|EZ7nY7)2Mj[3+tm(AC`U\cV7 @N`vI9(@>\qN18~ML>j^5gp.e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49788	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:36 UTC	603	OUT	GET /images/YouTube.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:36 UTC	2111	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Wed, 08 May 2019 04:21:19 GMT Accept-Ranges: bytes ETag: "8091e7c555d51:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:48 GMT Connection: close Content-Length: 1518
2024-10-01 18:33:36 UTC	1518	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 33 70 78 22 20 68 65 69 67 68 74 3d 22 31 37 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 33 20 31 37 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="23px" height="17px" viewBox="0 0 23 17" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49790	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:36 UTC	609	OUT	GET /images/facebook-icon.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:36 UTC	2111	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 31 Dec 2018 13:33:54 GMT Accept-Ranges: bytes ETag: "34f2f79da1d41:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:48 GMT Connection: close Content-Length: 2124
2024-10-01 18:33:36 UTC	2124	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 70 78 22 20 68 65 69 67 68 74 3d 22 32 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 35 32 2e 35 20 28 36 37 34 36 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49791	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:36 UTC	608	OUT	GET /images/twitter-icon.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:36 UTC	2112	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 31 Dec 2018 13:33:53 GMT Accept-Ranges: bytes ETag: "c8b3d478da1d41:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:48 GMT Connection: close Content-Length: 2589
2024-10-01 18:33:36 UTC	2589	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 35 70 78 22 20 68 65 69 67 68 74 3d 22 32 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 20 32 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 35 32 2e 35 20 28 36 37 34 36 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="25px" height="20px" viewBox="0 0 25 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49789	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:36 UTC	606	OUT	GET /images/insta-icon.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:36 UTC	2112	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 31 Dec 2018 13:33:51 GMT Accept-Ranges: bytes ETag: "8e949777da1d41:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:48 GMT Connection: close Content-Length: 5481
2024-10-01 18:33:36 UTC	5481	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 70 78 22 20 68 65 69 67 68 74 3d 22 32 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 35 32 2e 35 20 28 36 37 34 36 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49801	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:36 UTC	366	OUT	GET /dist/img/subnav-bg.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:36 UTC	2111	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 07 Sep 2020 17:44:40 GMT Accept-Ranges: bytes ETag: "c7fb3f903e85d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:48 GMT Connection: close Content-Length: 23180
2024-10-01 18:33:36 UTC	14273	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0b 07 08 09 08 07 0b 09 09 09 0c 0b 0b 0d 10 1a 11 10 0f 0f 10 20 17 18 13 1a 26 22 28 28 26 22 25 24 2a 30 3d 33 2a 2d 39 2e 24 25 35 48 35 39 3f 41 44 45 44 29 33 4b 50 4a 42 4f 3d 43 44 41 ff db 00 43 01 0b 0c 0c 10 0e 10 1f 11 11 1f 41 2c 25 2c 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 ff c2 00 11 08 04 4b 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1a 00 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 05 03 04 07 ff c4 00 15 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 20 00 28 00 00 45 00 01 40 00 10 00 Data Ascii: JFIFC &"((&"%$0=3-9.$%5H59?ADED)3KPJBO=CDACA,%,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK@ (E@
2024-10-01 18:33:36 UTC	8907	IN	Data Raw: 00 00 00 00 00 3e 30 29 0a 16 00 50 40 00 40 40 28 00 80 14 85 58 00 29 0a 45 00 01 48 00 00 00 f0 a0 05 80 02 80 00 04 50 0d 1a 04 a0 28 89 56 00 00 00 00 00 01 2a c0 14 00 42 8a 00 00 80 00 02 82 80 50 01 0a 00 02 80 40 00 00 02 90 00 02 80 00 00 00 52 52 28 00 01 40 04 50 00 a4 00 28 28 00 a0 80 00 00 00 14 02 80 00 00 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 8c 52 02 85 80 14 11 2a 44 a0 11 40 a0 02 00 52 15 60 00 02 ac 00 00 52 00 00 0a 2b c4 c8 05 80 02 80 45 00 00 2b 71 40 00 00 00 00 00 00 00 00 01 40 00 00 00 01 01 40 00 0a 50 01 40 00 00 00 00 00 00 00 a0 02 00 01 41 0a 00 00 14 94 8a 00 00 50 01 14 00 29 00 00 15 60 52 82 00 Data Ascii: >0)P@@@(X)EHP(VBP@RR(@P((RD@R`R+E+q@@@P@AP)`R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49797	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:36 UTC	369	OUT	GET /media/vsln2m1e/london.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:36 UTC	2112	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Thu, 17 Sep 2020 05:23:28 GMT Accept-Ranges: bytes ETag: "4e46a3acb28cd61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:48 GMT Connection: close Content-Length: 335330
2024-10-01 18:33:36 UTC	14272	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 09 06 07 08 07 06 09 08 08 08 0a 0a 09 0b 0e 17 0f 0e 0d 0d 0e 1c 14 15 11 17 22 1e 23 23 21 1e 20 20 25 2a 35 2d 25 27 32 28 20 20 2e 3f 2f 32 37 39 3c 3c 3c 24 2d 42 46 41 3a 46 35 3b 3c 39 ff db 00 43 01 0a 0a 0a 0e 0c 0e 1b 0f 0f 1b 39 26 20 26 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 ff c2 00 11 08 06 c0 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 bf 6f 8a 82 83 Data Ascii: JFIFC"##! %*5-%'2( .?/279<<<$-BFA:F5;<9C9& &99999999999999999999999999999999999999999999999999@o
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: 50 08 00 00 a0 00 00 05 21 41 48 00 20 00 00 42 80 00 00 10 10 10 80 80 10 10 a4 00 80 10 14 80 80 80 c4 a4 21 48 01 08 52 02 02 02 10 10 03 10 08 08 01 01 01 0a 40 40 40 08 40 00 04 04 04 04 00 00 40 40 40 08 01 01 00 20 20 20 20 04 00 80 10 85 20 04 20 00 03 a0 14 00 50 52 82 02 82 94 a0 14 02 82 80 52 80 0c 81 4a 00 28 29 41 4a 0a 52 82 80 64 0a 0a 0a 0a 0a 42 82 90 a0 a0 14 00 52 80 0a 0a 50 00 21 01 0a 42 90 a4 00 02 94 14 a5 00 85 00 02 82 14 85 00 80 10 02 82 14 00 01 0a 40 0a 42 80 00 05 21 41 01 48 0a 42 80 52 00 50 08 50 00 00 80 a0 00 50 42 80 00 00 14 80 85 00 10 00 0a 08 01 01 01 01 01 00 00 80 02 10 00 08 40 08 08 00 21 00 20 04 00 80 84 04 04 04 20 20 04 00 80 10 10 00 40 40 40 40 08 50 42 00 40 42 90 02 02 00 08 40 08 01 01 01 00 21 48 08 Data Ascii: P!AH B!HR@@@@@@@ PRRJ()AJRdBRP!B@B!AHBRPPPB@! @@@@PB@B@!H
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: a4 15 a1 9f 3f 5c fb a7 4f 49 d3 d2 f1 77 f3 7d 9c 7d 4f 0f a3 87 d1 c3 db e7 9f 7f cf df c3 de bc be f8 dd c7 a6 ad cd d6 63 a9 d7 e6 e8 af 6f 83 d2 d6 3c 9e 7d 7c bf 4e 75 69 c7 b9 f9 4f bb 9f 23 3f 43 e5 df 87 e8 cf a7 cf af 8c c7 af ab f3 93 9f d1 67 5e 16 af bb a9 e7 73 e9 d3 34 eb cb 4e f1 d3 35 b7 3d 3d 0f 37 6f d1 7e 17 5b 95 cb 45 cf d2 f3 79 ba f5 f9 3d 38 e8 e8 e9 af 23 ef fc a7 4e 16 c1 9a 8c a3 20 63 64 28 21 01 55 0a b0 32 36 2e 71 89 4f 1e 74 f9 dc fa bd 7f 2f ab e6 3d 1e 54 9d 0d fa fe 6e a6 fc 0e dc be 9b c5 e9 fb 9f 8d bc f1 ae 8c e3 38 fc ef ee e7 b3 37 e8 3c 6e 9c 63 6e 5b eb 83 d3 8f 1f f4 5f 1f 32 59 01 2a 18 92 a1 00 41 42 c2 80 85 a0 a0 00 08 08 00 05 05 8a 55 25 96 94 b1 90 2a d0 64 a4 aa 92 55 8c 81 92 e4 53 23 24 a4 31 31 31 48 Data Ascii: ?\OIw}}Oco<}\|NuiO#?Cg^s4N5==7o~[Ey=8#N cd(!U26.qOt/=Tn87<ncn[_2YABU%dUS#$111H
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: 73 ed 3d 7f 27 5f 9a f6 73 f6 fc dd f0 b9 f3 fb f3 d1 67 d8 7c af 77 8d d7 3d 7c bd 3a b5 3d 6f 3e 30 b9 fa 1f 9f d7 cd f5 73 e7 eb 19 72 f6 b6 b5 75 cf 8f e8 e5 e5 f6 98 d9 ba dd 3b c8 c5 2d 17 19 32 b6 45 a8 99 d2 ca b2 22 d2 c7 ab e5 eb e1 f7 e5 d1 77 c7 78 fd 46 7a eb 8f 9c e9 cc 9c d2 67 a9 d5 9e 9c 3a e7 d9 c7 d1 a7 7c f3 6b 9a f2 f4 71 ea 2e cc bd be 1e df 07 b7 8f d0 d6 7c 6d f0 c2 e7 2c eb 41 d5 6f a1 8e da 3a 73 d3 33 a5 3a 25 fb 3f 2f a7 ea 79 5f 91 f6 70 e1 e9 8e 4d 4e 1c df 1a 63 9f 2a 76 69 cf 96 46 12 c3 59 b4 cc c4 1a 0a 66 44 e7 97 ab 53 ab 4f 47 73 2d 36 d9 95 b5 32 ab 05 ce b4 46 70 37 2c 31 8c cc 97 99 39 64 e4 48 5a db 66 dd 4e f5 9c fa 79 d8 9a 4e 1c ba ad f4 2b 48 b3 bf 4e cc ef d4 e3 ea f2 f7 cf 5e a5 eb 2f 41 3d cf 4f 5e 7c 3c fc Data Ascii: s='_sg\|w=\|:=o>0sru;-2E"wxFzg:\|kq.\|m,Ao:s3:%?/y_pMNc*viFYfDSOGs-62Fp7,19dHZfNyN+HN^/A=O^\|<
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: 32 81 9e 6d 5d 99 b9 26 45 4a b5 19 22 12 69 25 5b 11 71 b2 db 8d 9b a7 5d b3 59 cb 86 e7 46 35 d3 8e 9b 57 39 73 8d 92 e4 45 d5 a9 89 94 42 85 c5 34 ea 69 d6 6a 55 59 cf ac 73 ef 9e ba d1 71 af 53 4e b9 da d9 35 ae e3 46 b9 e3 58 82 00 a1 00 45 b1 50 b0 85 00 a8 54 52 d4 41 4a 02 65 5b 33 ac 53 1b 2d 96 58 40 a9 40 8b 48 b5 16 01 05 59 28 2a 8c 84 50 0a 80 5b 42 09 4a 54 cd 36 cb b2 5c a5 56 52 e2 12 1a ce 7d 67 0a c0 18 d4 21 8d b1 71 42 a8 8a 84 08 2d 40 40 85 80 84 05 2d 89 60 32 24 14 50 b0 90 aa 44 52 20 00 85 a0 24 b8 ac 96 45 ac 93 3b 28 4a b5 32 48 14 40 49 71 00 8a 04 85 55 a8 0a 8c 84 4a 92 d2 90 2d 80 42 d9 72 97 28 b1 9c 64 65 19 14 c8 a9 4b 60 a0 8b 01 41 48 54 16 86 88 10 42 85 08 04 22 d4 00 a1 00 a0 21 60 05 02 40 b5 61 50 21 41 00 54 24 Data Ascii: 2m]&EJ"i%[q]YF5W9sEB4ijUYsqSN5FXEPTRAJe[3S-X@@HY(*P[BJT6\VR}g!qB-@@-`2$PDR $E;(J2H@IqUJ-Br(deK`AHTB"!`@aP!AT$
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: 12 31 10 13 22 41 51 61 04 23 32 52 71 81 91 20 42 62 a1 30 33 40 50 53 72 14 24 43 60 70 80 92 b1 54 82 c1 d1 f0 63 73 a2 25 34 e1 05 83 b2 f1 15 64 93 e0 ff da 00 08 01 01 00 03 3f 02 ff 00 fe d3 cf 18 f1 b7 f2 d0 c1 8f 16 39 8d cb 64 7f 2c e7 11 1d ed 95 b9 16 e6 23 f9 65 e0 83 5a 03 cc a2 43 47 65 ad 19 85 21 86 4d db 91 fe 59 2f 9c 23 8e db 94 46 fb a1 03 9a 9d 5f e4 42 6e 3f 96 40 da ae 4e 69 dc 1b be 54 c6 ad b8 cb 77 9c 95 4b 07 e1 7f 31 b9 6c e2 53 7f e5 8e 59 0c 9a 8e de b6 f1 55 da 77 77 82 2f 77 c3 c0 64 9e 00 78 16 e4 aa 3d 86 db 03 7a f4 fe 58 ba cc 2e 25 df 08 4e 9d 9d 91 c8 a9 18 62 e8 93 39 ac 34 a7 b4 e0 51 65 07 34 7b d7 1c 96 2f e5 88 6b 1c 47 14 5e 64 a0 de 7a 33 5b 94 37 c7 f9 61 c0 cf 1f 63 25 b4 81 2f e4 b9 ff 00 2c 38 aa 47 05 75 Data Ascii: 1"AQa#2Rq Bb03@PSr$C`pTcs%4d?9d,#eZCGe!MY/#F_Bn?@NiTwK1lSYUww/wdx=zX.%Nb94Qe4{/kG^dz3[7ac%/,8Gu
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: e7 d2 87 34 6b 69 19 9e 28 ef c5 aa 7f a8 58 7f 33 56 e2 27 82 a5 51 a7 0c 83 39 2d a7 6d 1c 93 b6 36 b3 55 83 5d 0e de ab 49 b3 51 64 03 08 2b 8c ae ba 43 09 86 2e 91 f8 6c fe 95 d2 cd b5 4c fe 95 56 71 b9 90 51 94 54 e6 80 2a 11 2d 3a 61 f7 6c d9 38 fb a5 3b ba 9f dd 29 e7 dd 2a a1 f7 4a a9 1d 92 9f dd 28 82 10 70 70 71 85 44 f4 67 54 cc e0 c4 a8 6b 8b 70 80 35 52 99 af 1a b6 b8 5b 7a ad 50 cb 5a e9 4f 06 11 a4 dc 0e 65 93 20 c3 0c a7 f7 59 e8 aa 70 6f a2 7f 06 a9 ed 51 9f 3b 23 55 c1 a6 9b 1b e2 55 2a 9d 73 9e 03 c6 2d 9f 0c 91 7d ea 18 94 c6 b2 8c 67 8d 06 43 89 f0 4c 3d 83 7c e7 82 26 9e 1d 99 fe ca e0 cd c7 24 04 13 2b 0b 03 06 e4 71 03 19 29 26 47 6b 34 fa cf b6 1c 95 47 38 c8 65 95 51 4f 19 c0 61 74 86 be cd 68 3c 95 62 e7 6c 02 42 ae c6 77 41 dd Data Ascii: 4ki(X3V'Q9-m6U]IQd+C.lLVqQT-:al8;)J(ppqDgTkp5R[zPZOe YpoQ;#UU*s-}gCL=\|&$+q)&Gk4G8eQOath<blBwA
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 9b f8 21 61 45 54 a3 84 39 ec db 55 c7 57 89 9e 09 d9 84 68 f4 b0 48 36 54 dc 30 89 bd b2 5a b9 c2 49 f0 58 5c 03 81 23 d1 3a 19 81 8f 0e 69 cd 38 b8 1c 2e c5 ef 73 29 df b4 63 9f cb 8a 1a e0 18 0e 1c 3e 88 f4 7a 41 ec ac 64 aa d5 76 60 de db fd 50 7f 57 88 d9 bb 3c 13 cb b3 31 e0 a4 ed 5f c9 07 d4 6e 2c bc 13 7a 33 c1 61 92 02 a9 55 94 59 8e 03 db fd 96 06 32 90 63 e5 80 dc 22 75 07 54 e6 f0 4e 9e cb c6 de 2c 96 aa 83 5c d7 b8 e2 dc 9d fa 36 a9 a1 fa c7 6f 2a b3 5e da 9b 58 78 a7 3d 90 18 ec e6 f9 2a f4 4d 37 bd b8 a4 48 c2 85 4a 35 6a dd 93 b8 aa c5 f2 46 2c 3c 53 e9 39 a1 ec 8c cc 8e 09 e5 af 7e 6d 73 61 39 ed 03 01 cf fd 11 bd 9d e8 8b a2 ce f4 54 e8 b5 87 14 92 a0 20 10 71 88 2a 17 04 d6 4c b1 93 9d f7 a6 61 fa b6 08 1d a4 cd cd da 52 23 02 75 7a 46 Data Ascii: !aET9UWhH6T0ZIX\#:i8.s)c>zAdv`PW<1_n,z3aUY2c"uTN,\6o^Xx=M7HJ5jF,<S9~msa9T q*LaR#uzF
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 9c 64 96 1e e1 9d 1a bc fd 84 21 3a ae a9 10 5a e5 2c 13 2f 45 7c 35 3b ca a2 99 cd cb c9 ce 34 f1 dc 6a bc bf 22 c5 92 14 9b c9 4e ea 9a 0d e1 d1 d3 98 02 ed e7 31 b7 61 55 a8 a4 99 3d 4b 2d da e3 93 cd 15 7d c7 9b 90 d1 b8 d5 15 11 d0 6e aa ff 00 34 74 9d 03 1f dc 12 96 09 6c 61 ba a7 44 c7 a7 3e 7f f1 3a cd 56 32 f6 86 ed a9 2f 40 42 10 9e 9a 52 94 a5 29 4b e8 a5 fa 97 e9 52 fe 91 08 42 7d 68 4f a0 dc 1b f0 8a fa 52 ae 54 e6 f6 f0 29 ab 79 75 9d 21 08 42 10 84 16 04 48 d1 33 1b 84 9c a4 6c e4 75 67 03 d9 f5 78 6e 20 7f e3 13 19 64 48 c9 3d 6c 8a dc b5 22 ee 47 35 d1 6b 2b 51 8d a6 e4 5f 3f 46 10 84 21 3e da fa 14 57 9f bb 19 30 c1 b5 79 b5 65 eb 9c fd c0 67 a6 40 43 19 33 4d 92 2f 38 8d 17 b9 77 2f ec d6 26 c3 41 d5 a2 cd be 0b d5 b2 49 36 1b 7c 51 3c Data Ascii: d!:Z,/E\|5;4j"N1aU=K-}n4tlaD>:V2/@BR)KRB}hORT)yu!BH3lugxn dH=l"G5k+Q_?F!>W0yeg@C3M/8w/&AI6\|Q<
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 8e 29 71 8a 9f e0 c1 76 47 54 d7 f8 a6 9d 87 4c dc 9a 6d b1 07 bf af bb 53 1b de 7e 3b 91 37 66 f3 cd 74 7c b0 c2 e3 8e 53 9c 0d bf 69 42 ae ea a5 ec 14 36 83 4e 16 45 7b 02 46 5a 5c 18 aa bc 59 d8 19 3b 76 84 1a 54 fc 66 0d 31 b2 b1 5f b0 46 a8 50 26 12 d4 43 d8 cb b4 65 1a f3 81 87 3d e5 0b 19 12 c4 25 60 b6 66 43 a5 8f 19 14 84 9a 96 0d 6d f2 63 5a df 24 71 b8 a3 78 47 39 45 12 93 13 df 41 cc 9a a5 c9 0c db 41 6d 25 34 c6 4f 06 dc 1a 8a e1 d8 6c c3 fc 60 54 3d c4 1a 63 cc 5d c2 c0 c2 cb 0b b9 9d cc 4e cc b2 3f 08 a3 79 3c b4 1d 54 e9 91 91 f2 a5 b1 6f 22 43 90 5f 4d 6b d7 19 d3 3f 52 cb c1 95 b8 dd c6 6d bc 22 ec 6b 70 a4 4e 16 e5 6e 05 ff 00 90 bb 86 1c 65 1a 04 42 fc 8b 89 18 45 9e e0 49 a2 6d ee 61 57 e6 73 74 92 c8 b3 0a 88 f2 31 b4 48 dc 89 72 36 Data Ascii: )qvGTLmS~;7ft\|SiB6NE{FZ\Y;vTf1_FP&Ce=%`fCmcZ$qxG9EAAm%4Ol`T=c]N?y<To"C_Mk?Rm"kpNneBEImaWst1Hr6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49802	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:36 UTC	367	OUT	GET /dist/img/icn-search.png HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:36 UTC	2108	IN	HTTP/1.1 200 OK Content-Type: image/png Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 07 Sep 2020 17:44:40 GMT Accept-Ranges: bytes ETag: "25171a903e85d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:48 GMT Connection: close Content-Length: 479
2024-10-01 18:33:36 UTC	479	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 01 99 49 44 41 54 38 11 ad 93 4f 2b 05 51 18 c6 ef 50 77 41 59 59 5c 77 e3 fa 17 16 58 50 3e 82 f0 09 44 dd b2 55 d8 da b0 b8 0b 51 f2 01 2c 24 2b d2 4d a2 64 63 2b 2b 29 2b 2b ca 52 09 d7 bf 70 fc 9e a3 b9 77 e6 ce 99 26 5d 6f fd e6 9c f3 3e cf fb ce 9c 99 33 a9 54 42 18 63 da 61 15 2e e1 11 9e e0 0a d6 a1 37 a1 bc 22 63 f6 60 09 de e1 05 0e 60 05 96 a1 08 6a fc 09 6b 50 5f a9 8c 99 61 da 04 c5 11 64 ab 6d e4 9a 61 07 14 fb 50 57 ed 29 af 11 67 e4 22 0a e5 64 cc 04 cf bc 75 1a b3 e8 b4 20 36 c1 3d 9c 41 f2 56 e8 82 ef 18 4a 90 89 34 25 39 05 8a c1 88 18 93 c0 db 66 2b 8c 99 8b 58 10 36 e0 2e 22 24 24 a8 d1 29 28 Data Ascii: PNGIHDRsRGBIDAT8O+QPwAYY\wXP>DUQ,$+Mdc++)++Rpw&]o>3TBca.7"c``jkP_admaPW)g"du 6=AVJ4%9f+X6."$$)(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49798	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:36 UTC	364	OUT	GET /dist/img/quote1.json HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:36 UTC	2117	IN	HTTP/1.1 200 OK Content-Type: application/json Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 11 Sep 2020 11:33:48 GMT Accept-Ranges: bytes ETag: "cb63c06a2f88d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:48 GMT Connection: close Content-Length: 69694
2024-10-01 18:33:36 UTC	14267	IN	Data Raw: 7b 22 76 22 3a 22 35 2e 35 2e 38 22 2c 22 66 72 22 3a 32 39 2e 39 37 30 30 30 31 32 32 30 37 30 33 31 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 31 35 30 2e 30 30 30 30 30 36 31 30 39 36 32 35 2c 22 77 22 3a 38 30 30 2c 22 68 22 3a 33 32 30 2c 22 6e 6d 22 3a 22 51 75 6f 74 65 31 22 2c 22 64 64 64 22 3a 30 2c 22 61 73 73 65 74 73 22 3a 5b 5d 2c 22 6c 61 79 65 72 73 22 3a 5b 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 31 2c 22 74 79 22 3a 34 2c 22 6e 6d 22 3a 22 53 68 61 70 65 20 4c 61 79 65 72 20 31 22 2c 22 74 64 22 3a 31 2c 22 73 72 22 3a 31 2c 22 6b 73 22 3a 7b 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 Data Ascii: {"v":"5.5.8","fr":29.9700012207031,"ip":0,"op":150.000006109625,"w":800,"h":320,"nm":"Quote1","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Shape Layer 1","td":1,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: 32 39 34 2c 33 2e 35 35 36 5d 2c 5b 33 2e 31 39 32 2c 33 2e 35 35 36 5d 2c 5b 33 2e 31 39 32 2c 35 2e 30 36 31 5d 2c 5b 2d 33 2e 31 39 32 2c 35 2e 30 36 31 5d 2c 5b 2d 33 2e 31 39 32 2c 2d 35 2e 30 36 31 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 79 22 3a 22 66 6c 22 2c 22 63 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 2c 31 2c 31 2c 31 5d 2c 22 69 78 22 3a 34 7d 2c 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 35 7d 2c 22 72 22 3a 31 2c 22 62 6d 22 3a 30 2c 22 6e 6d 22 3a 22 46 69 6c 6c 20 31 22 2c 22 6d 6e 22 3a 22 41 44 42 Data Ascii: 294,3.556],[3.192,3.556],[3.192,5.061],[-3.192,5.061],[-3.192,-5.061]],"c":true},"ix":2},"nm":"Path 1","mn":"ADBE Vector Shape - Group","hd":false},{"ty":"fl","c":{"a":0,"k":[1,1,1,1],"ix":4},"o":{"a":0,"k":100,"ix":5},"r":1,"bm":0,"nm":"Fill 1","mn":"ADB
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: 2c 5b 30 2e 36 31 32 2c 2d 31 2e 38 39 37 5d 2c 5b 31 2e 31 34 39 2c 2d 31 2e 33 31 37 5d 2c 5b 31 2e 36 36 32 2c 2d 30 2e 36 39 31 5d 5d 2c 22 6f 22 3a 5b 5b 2d 32 2e 31 34 34 2c 30 5d 2c 5b 2d 31 2e 36 37 34 2c 2d 30 2e 36 39 31 5d 2c 5b 2d 31 2e 31 34 39 2c 2d 31 2e 33 31 37 5d 2c 5b 2d 30 2e 36 31 32 2c 2d 31 2e 38 39 37 5d 2c 5b 30 2c 2d 32 2e 33 36 39 5d 2c 5b 30 2e 36 31 32 2c 2d 31 2e 38 39 38 5d 2c 5b 31 2e 31 34 37 2c 2d 31 2e 33 31 36 5d 2c 5b 31 2e 36 37 33 2c 2d 30 2e 37 30 32 5d 2c 5b 32 2e 31 32 32 2c 30 5d 2c 5b 31 2e 36 36 32 2c 30 2e 37 30 32 5d 2c 5b 31 2e 31 34 39 2c 31 2e 33 31 36 5d 2c 5b 30 2e 36 31 32 2c 31 2e 38 39 38 5d 2c 5b 30 2c 32 2e 33 39 31 5d 2c 5b 2d 30 2e 36 31 34 2c 31 2e 38 39 38 5d 2c 5b 2d 31 2e 31 34 38 2c 31 2e 33 Data Ascii: ,[0.612,-1.897],[1.149,-1.317],[1.662,-0.691]],"o":[[-2.144,0],[-1.674,-0.691],[-1.149,-1.317],[-0.612,-1.897],[0,-2.369],[0.612,-1.898],[1.147,-1.316],[1.673,-0.702],[2.122,0],[1.662,0.702],[1.149,1.316],[0.612,1.898],[0,2.391],[-0.614,1.898],[-1.148,1.3
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: 2d 32 35 37 2e 38 32 32 2c 2d 32 33 2e 39 37 33 5d 2c 5b 2d 32 35 37 2e 38 32 32 2c 34 2e 34 32 36 5d 2c 5b 2d 32 35 36 2e 34 31 31 2c 31 32 2e 35 32 32 5d 2c 5b 2d 32 35 32 2e 33 34 32 2c 31 38 2e 38 37 33 5d 2c 5b 2d 32 34 35 2e 38 37 39 2c 32 33 2e 30 32 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 32 33 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 64 22 3a 32 33 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 32 34 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 31 2e 34 36 35 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 2d 30 2e 39 31 39 2c 2d 30 Data Ascii: -257.822,-23.973],[-257.822,4.426],[-256.411,12.522],[-252.342,18.873],[-245.879,23.02]],"c":true},"ix":2},"nm":"Path 23","mn":"ADBE Vector Shape - Group","hd":false},{"ind":23,"ty":"sh","ix":24,"ks":{"a":0,"k":{"i":[[1.465,0],[0,0],[0,0],[0,0],[-0.919,-0
2024-10-01 18:33:36 UTC	6275	IN	Data Raw: 37 30 31 2c 31 2e 39 36 31 5d 2c 5b 30 2e 39 30 36 2c 32 2e 38 32 37 5d 2c 5b 30 2c 33 2e 35 36 32 5d 2c 5b 2d 30 2e 39 30 38 2c 32 2e 38 32 37 5d 2c 5b 2d 31 2e 37 2c 31 2e 39 36 31 5d 2c 5b 2d 32 2e 34 37 38 2c 31 2e 30 34 36 5d 2c 5b 2d 33 2e 31 37 35 2c 30 5d 2c 5b 2d 32 2e 34 36 33 2c 2d 31 2e 30 34 36 5d 2c 5b 2d 31 2e 37 30 31 2c 2d 31 2e 39 36 31 5d 2c 5b 2d 30 2e 39 30 36 2c 2d 32 2e 38 32 37 5d 2c 5b 30 2c 2d 33 2e 35 33 5d 2c 5b 30 2e 39 30 38 2c 2d 32 2e 38 32 37 5d 2c 5b 31 2e 37 2c 2d 31 2e 39 36 31 5d 2c 5b 32 2e 34 36 31 2c 2d 31 2e 30 33 5d 5d 2c 22 6f 22 3a 5b 5b 2d 33 2e 31 37 35 2c 30 5d 2c 5b 2d 32 2e 34 37 38 2c 2d 31 2e 30 33 5d 2c 5b 2d 31 2e 37 2c 2d 31 2e 39 36 31 5d 2c 5b 2d 30 2e 39 30 38 2c 2d 32 2e 38 32 37 5d 2c 5b 30 2c 2d Data Ascii: 701,1.961],[0.906,2.827],[0,3.562],[-0.908,2.827],[-1.7,1.961],[-2.478,1.046],[-3.175,0],[-2.463,-1.046],[-1.701,-1.961],[-0.906,-2.827],[0,-3.53],[0.908,-2.827],[1.7,-1.961],[2.461,-1.03]],"o":[[-3.175,0],[-2.478,-1.03],[-1.7,-1.961],[-0.908,-2.827],[0,-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49804	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:36 UTC	364	OUT	GET /dist/img/quote2.json HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:36 UTC	2117	IN	HTTP/1.1 200 OK Content-Type: application/json Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 11 Sep 2020 11:33:45 GMT Accept-Ranges: bytes ETag: "15d2f1682f88d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:48 GMT Connection: close Content-Length: 84866
2024-10-01 18:33:36 UTC	14267	IN	Data Raw: 7b 22 76 22 3a 22 35 2e 35 2e 38 22 2c 22 66 72 22 3a 32 39 2e 39 37 30 30 30 31 32 32 30 37 30 33 31 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 31 35 30 2e 30 30 30 30 30 36 31 30 39 36 32 35 2c 22 77 22 3a 38 30 30 2c 22 68 22 3a 33 32 30 2c 22 6e 6d 22 3a 22 51 75 6f 74 65 32 22 2c 22 64 64 64 22 3a 30 2c 22 61 73 73 65 74 73 22 3a 5b 5d 2c 22 6c 61 79 65 72 73 22 3a 5b 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 31 2c 22 74 79 22 3a 34 2c 22 6e 6d 22 3a 22 53 68 61 70 65 20 4c 61 79 65 72 20 34 22 2c 22 74 64 22 3a 31 2c 22 73 72 22 3a 31 2c 22 6b 73 22 3a 7b 22 6f 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 31 30 30 2c 22 69 78 22 3a 31 31 7d 2c 22 72 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 30 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 Data Ascii: {"v":"5.5.8","fr":29.9700012207031,"ip":0,"op":150.000006109625,"w":800,"h":320,"nm":"Quote2","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Shape Layer 4","td":1,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: 6c 73 65 7d 2c 7b 22 69 6e 64 22 3a 31 30 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 31 31 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 31 2e 30 35 34 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 2d 30 2e 36 36 33 2c 2d 30 2e 31 38 39 5d 2c 5b 2d 30 2e 34 30 31 2c 2d 30 2e 33 34 35 5d 2c 5b 2d 30 2e 31 36 36 2c 2d 30 2e 35 30 31 5d 2c 5b 30 2c 2d 30 2e 36 32 37 5d 2c 5b 30 2e 31 34 32 2c 2d 30 2e 35 33 34 5d 2c 5b 30 2e 33 37 38 2c 2d 30 2e 34 32 33 5d 2c 5b 30 2e 36 36 39 2c 2d 30 2e 32 36 36 5d 5d 2c 22 6f 22 3a 5b 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 30 2c 30 5d 2c 5b 31 2e 30 30 37 2c 30 5d 2c 5b 30 2e 36 36 31 2c 30 2e 31 38 37 5d 2c 5b 30 2e 34 30 32 2c 30 2e 33 34 34 5d 2c 5b 30 2e 31 36 35 Data Ascii: lse},{"ind":10,"ty":"sh","ix":11,"ks":{"a":0,"k":{"i":[[1.054,0],[0,0],[0,0],[0,0],[-0.663,-0.189],[-0.401,-0.345],[-0.166,-0.501],[0,-0.627],[0.142,-0.534],[0.378,-0.423],[0.669,-0.266]],"o":[[0,0],[0,0],[0,0],[1.007,0],[0.661,0.187],[0.402,0.344],[0.165
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: 2e 34 30 33 2c 2d 31 37 2e 31 32 34 5d 2c 5b 2d 33 34 31 2e 33 38 35 2c 2d 31 37 2e 31 32 34 5d 2c 5b 2d 33 34 31 2e 33 38 35 2c 31 37 2e 31 32 34 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 33 35 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 64 22 3a 33 35 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 33 36 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 2d 32 2e 35 31 39 2c 30 5d 2c 5b 2d 31 2e 32 32 31 2c 30 2e 31 34 31 5d 2c 5b 2d 31 2e 30 37 39 2c 30 2e 32 39 38 5d 2c 5b 2d 30 2e 39 35 32 2c 30 2e 34 36 33 5d 2c 5b 2d 30 2e 38 38 32 2c 30 2e 36 34 33 5d 2c 5b 30 2c 30 Data Ascii: .403,-17.124],[-341.385,-17.124],[-341.385,17.124]],"c":true},"ix":2},"nm":"Path 35","mn":"ADBE Vector Shape - Group","hd":false},{"ind":35,"ty":"sh","ix":36,"ks":{"a":0,"k":{"i":[[-2.519,0],[-1.221,0.141],[-1.079,0.298],[-0.952,0.463],[-0.882,0.643],[0,0
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: 2c 5b 31 2e 39 30 36 2c 30 2e 35 37 32 5d 2c 5b 31 2e 34 38 33 2c 30 2e 36 38 36 5d 2c 5b 30 2e 39 31 32 2c 30 2e 39 34 38 5d 2c 5b 30 2c 31 2e 34 33 39 5d 2c 5b 2d 31 2e 35 31 36 2c 31 2e 33 32 34 5d 2c 5b 2d 33 2e 30 39 36 2c 30 5d 2c 5b 2d 31 2e 34 30 31 2c 2d 30 2e 34 37 33 5d 2c 5b 2d 31 2e 30 39 31 2c 2d 30 2e 35 38 38 5d 2c 5b 2d 30 2e 38 36 33 2c 2d 30 2e 34 37 34 5d 2c 5b 2d 30 2e 37 35 2c 30 5d 2c 5b 2d 30 2e 35 33 38 2c 30 2e 33 39 32 5d 2c 5b 2d 30 2e 34 38 39 2c 30 2e 37 38 34 5d 2c 5b 30 2c 30 5d 2c 5b 31 2e 36 31 33 2c 30 2e 39 33 32 5d 2c 5b 31 2e 38 35 38 2c 30 2e 36 37 5d 2c 5b 32 2e 30 36 39 2c 30 2e 33 34 34 5d 2c 5b 32 2e 31 38 33 2c 30 5d 2c 5b 33 2e 30 33 2c 2d 31 2e 31 39 33 5d 2c 5b 32 2e 30 38 36 2c 2d 31 2e 39 39 34 5d 2c 5b 31 Data Ascii: ,[1.906,0.572],[1.483,0.686],[0.912,0.948],[0,1.439],[-1.516,1.324],[-3.096,0],[-1.401,-0.473],[-1.091,-0.588],[-0.863,-0.474],[-0.75,0],[-0.538,0.392],[-0.489,0.784],[0,0],[1.613,0.932],[1.858,0.67],[2.069,0.344],[2.183,0],[3.03,-1.193],[2.086,-1.994],[1
2024-10-01 18:33:36 UTC	16384	IN	Data Raw: 32 34 34 2c 30 2e 32 38 5d 2c 5b 30 2e 31 33 31 2c 30 2e 34 30 33 5d 2c 5b 30 2c 30 2e 35 30 39 5d 2c 5b 2d 30 2e 31 33 2c 30 2e 34 30 33 5d 2c 5b 2d 30 2e 32 34 35 2c 30 2e 32 38 5d 2c 5b 2d 30 2e 33 35 37 2c 30 2e 31 34 39 5d 2c 5b 2d 30 2e 34 35 37 2c 30 5d 2c 5b 2d 30 2e 33 35 34 2c 2d 30 2e 31 34 39 5d 2c 5b 2d 30 2e 32 34 35 2c 2d 30 2e 32 38 5d 2c 5b 2d 30 2e 31 33 31 2c 2d 30 2e 34 30 34 5d 2c 5b 30 2c 2d 30 2e 35 30 34 5d 2c 5b 30 2e 31 33 31 2c 2d 30 2e 34 30 34 5d 2c 5b 30 2e 32 34 35 2c 2d 30 2e 32 38 5d 2c 5b 30 2e 33 35 35 2c 2d 30 2e 31 34 38 5d 5d 2c 22 6f 22 3a 5b 5b 2d 30 2e 34 35 37 2c 30 5d 2c 5b 2d 30 2e 33 35 37 2c 2d 30 2e 31 34 38 5d 2c 5b 2d 30 2e 32 34 35 2c 2d 30 2e 32 38 5d 2c 5b 2d 30 2e 31 33 2c 2d 30 2e 34 30 34 5d 2c 5b 30 Data Ascii: 244,0.28],[0.131,0.403],[0,0.509],[-0.13,0.403],[-0.245,0.28],[-0.357,0.149],[-0.457,0],[-0.354,-0.149],[-0.245,-0.28],[-0.131,-0.404],[0,-0.504],[0.131,-0.404],[0.245,-0.28],[0.355,-0.148]],"o":[[-0.457,0],[-0.357,-0.148],[-0.245,-0.28],[-0.13,-0.404],[0
2024-10-01 18:33:36 UTC	5063	IN	Data Raw: 35 2e 31 5d 2c 5b 2d 31 33 31 2e 35 32 33 2c 2d 35 2e 31 5d 2c 5b 2d 31 33 31 2e 35 32 33 2c 35 2e 31 5d 2c 5b 2d 31 32 39 2e 31 34 33 2c 35 2e 31 5d 5d 2c 22 63 22 3a 74 72 75 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 32 38 22 2c 22 6d 6e 22 3a 22 41 44 42 45 20 56 65 63 74 6f 72 20 53 68 61 70 65 20 2d 20 47 72 6f 75 70 22 2c 22 68 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 64 22 3a 32 38 2c 22 74 79 22 3a 22 73 68 22 2c 22 69 78 22 3a 32 39 2c 22 6b 73 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 7b 22 69 22 3a 5b 5b 30 2c 30 5d 5d 2c 22 6f 22 3a 5b 5b 30 2c 30 5d 5d 2c 22 76 22 3a 5b 5b 2d 31 32 39 2e 31 34 33 2c 35 2e 31 5d 5d 2c 22 63 22 3a 66 61 6c 73 65 7d 2c 22 69 78 22 3a 32 7d 2c 22 6e 6d 22 3a 22 50 61 74 68 20 32 39 22 2c 22 Data Ascii: 5.1],[-131.523,-5.1],[-131.523,5.1],[-129.143,5.1]],"c":true},"ix":2},"nm":"Path 28","mn":"ADBE Vector Shape - Group","hd":false},{"ind":28,"ty":"sh","ix":29,"ks":{"a":0,"k":{"i":[[0,0]],"o":[[0,0]],"v":[[-129.143,5.1]],"c":false},"ix":2},"nm":"Path 29","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49803	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:36 UTC	369	OUT	GET /media/fajftxg3/syndey.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:37 UTC	2110	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 11 Sep 2020 11:38:11 GMT Accept-Ranges: bytes ETag: "5ee1a73088d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:49 GMT Connection: close Content-Length: 299595
2024-10-01 18:33:37 UTC	14274	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 09 06 07 08 07 06 09 08 08 08 0a 0a 09 0b 0e 17 0f 0e 0d 0d 0e 1c 14 15 11 17 22 1e 23 23 21 1e 20 20 25 2a 35 2d 25 27 32 28 20 20 2e 3f 2f 32 37 39 3c 3c 3c 24 2d 42 46 41 3a 46 35 3b 3c 39 ff db 00 43 01 0a 0a 0a 0e 0c 0e 1b 0f 0f 1b 39 26 20 26 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 ff c2 00 11 08 06 c0 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 ff 00 6f 88 50 0a Data Ascii: JFIFC"##! %*5-%'2( .?/279<<<$-BFA:F5;<9C9& &99999999999999999999999999999999999999999999999999@oP
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 00 00 10 aa 40 00 10 a4 05 04 29 0a 00 00 00 42 80 00 04 2d 21 40 00 00 0a 91 40 14 00 02 02 81 08 52 15 0b 02 14 00 00 00 01 01 01 48 01 00 01 22 d2 00 08 01 00 21 00 20 04 00 84 04 04 04 41 14 4b 11 16 00 90 02 29 21 00 20 04 20 21 48 4a 44 a1 20 a2 52 22 2d 48 21 00 a8 04 4a 44 21 48 0c 40 14 88 42 52 04 04 04 52 40 4a 10 08 18 94 95 20 08 01 01 da a0 50 0a 0a 01 4a 85 55 85 58 55 8a 2a c1 2d a9 0b 41 41 4a 85 a5 05 05 05 28 28 29 4a 2c a5 96 94 14 a0 14 a0 a0 a5 00 14 00 85 a0 14 80 a4 28 21 48 0a 01 40 28 00 00 00 00 14 04 28 00 02 5a 92 90 a0 02 14 00 09 14 52 00 00 00 10 a8 51 0a 00 00 02 14 00 00 08 50 00 00 54 8b 52 28 00 0a 10 b4 85 20 00 a0 11 0a 28 00 14 10 24 50 09 16 90 02 90 00 85 00 00 20 04 00 10 a0 80 10 14 80 10 02 25 58 85 80 84 00 10 Data Ascii: @)B-!@@RH"! AK)! !HJD R"-H!JD!H@BRR@J PJUXU*-AAJ(()J,(!H@((ZRQPTR( ($P %X
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 54 7d 46 a7 9b d3 0b 9f 86 f6 fc 7c 2a d5 3c fc 76 fb bf 95 f6 7e 87 9f 5e 6f 57 93 c4 f6 7c de 26 7c d6 79 d7 a7 3b f9 0e 7e 9f 1b 3d bd c8 e8 ed e1 c4 fd 0b c3 f5 3e b3 cb ea e8 d3 5d 9f 92 f6 e7 ab d5 e1 e2 df 2f 07 3d 30 5d 52 c5 f6 35 cf d0 b3 df 99 87 8d 9e df 69 e1 f7 7e 91 9d ec 36 d9 89 8a f2 a7 8b ac 7c cd d7 ca 5c 6b b3 9a b6 c7 a6 7d 5e 35 e6 e3 63 8f 79 fb 6c 5f 43 a6 7e 83 53 e7 b1 af ca 75 9f d6 38 f4 f9 9e 5d 3e 7b d3 c7 cc e9 cf d8 ce be db 9f 4c 6b 97 13 d0 e9 30 93 c8 97 d0 af 0b 33 eb b4 f2 65 f3 32 e9 e9 9e cf 67 05 88 03 cc af 97 cc e7 38 8f b2 e1 dc cf a5 9d 7a b3 53 ae 34 76 e7 2a c8 20 15 f0 58 e7 e3 5e 7a 53 39 bd 36 79 d6 7d 47 af e7 e6 c8 15 37 79 3e 87 da fc bf b1 f9 ef 6c 7c 97 a7 cd db 26 56 fe 9b e7 ef ab a6 3d 2e 3d ba 39 Data Ascii: T}F\|<v~^oW\|&\|y;~=>]/=0]R5i~6\|\k}^5cyl_C~Su8]>{Lk03e2g8zS4v X^zS96y}G7y>l\|&V=.=9
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 75 2d 58 99 cb a2 91 ae b6 40 f4 3e 6e 93 3e 37 b7 3b 71 7a 39 6f b3 95 ec e7 a9 be 9e 77 af 37 33 b7 9e fa 31 7c 2e fc 7c 6f 57 1e dc df a0 e1 d7 c7 d6 7a bc ed 1d 1a f4 a7 9f df 39 46 35 9c 61 5d 9c 75 bf 9d ce 38 bd 19 f3 fb 63 a7 9e b7 66 f6 f0 df 0f 7c 72 f4 cf b3 e3 eb c7 df 3d dc 35 a3 a4 ec e3 74 e9 cf d6 13 b3 8f 4e ae 5a e9 c5 d9 1e 77 6e 1e 47 ab 1e bf 97 b7 87 ec e5 92 fa 5c 3a fd 67 97 b7 d0 63 5e 0d c7 3f b7 cf f6 3d b3 ea 4d 7a 3c b7 f0 7c af c6 67 3d 58 bb f0 9b d7 b7 e7 df 81 d7 97 27 56 ec dc 6e 3e 67 e8 f1 e5 e9 06 34 33 8d 35 15 1d 78 9d 9c b4 6b d6 f2 f4 d6 b9 9b 32 1b 72 e4 eb 8f 99 fa 3c 8b d1 9b a3 59 c4 ce 34 e8 b3 d6 f2 b9 b7 78 bb 4d 8b 9c 76 66 7a 5e 6d db 9f 9d f5 c4 66 bb f3 79 b5 31 af 43 9b d4 f3 dd 3b 72 6d e8 71 df 8f e9 Data Ascii: u-X@>n>7;qz9ow731\|.\|oWz9F5a]u8cf\|r=5tNZwnG\:gc^?=Mz<\|g=X'Vn>g435xk2r<Y4xMvfz^mfy1C;rmq
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: e5 8d 98 b3 af 59 84 52 55 89 40 22 80 05 b1 0a 92 80 21 61 40 42 96 c0 00 b1 6c 50 a8 52 20 b8 a8 00 0a 8a 00 48 2c 10 a0 04 96 a2 d2 0c 90 29 02 d4 28 85 48 c5 61 44 28 09 28 16 c0 21 48 50 00 05 20 10 14 05 21 16 a0 02 4a ad 53 74 03 15 92 e5 66 31 16 99 5c d2 4b 6c 58 94 00 ab 24 14 96 11 71 9a 20 29 32 b3 26 6d 00 22 c8 c5 69 6c 45 09 6a d9 8c a2 ad b9 c9 22 a2 d9 8c aa c9 33 42 54 51 64 51 58 cb 08 a2 2d 40 00 18 a9 45 4a 82 a5 00 8a 20 a4 00 00 12 58 00 58 0a 12 28 a1 24 a2 d1 0b 24 c8 04 ce cb 99 9b 23 39 72 9a c6 e6 cd 4b 30 b2 02 16 a1 6a 14 c5 71 b6 98 cb 16 a2 a4 b5 22 c1 10 a4 28 04 94 00 32 41 50 51 19 26 d9 ad f9 e9 b3 3b ce 5e 9c ef 2c eb 9f 59 c4 2a 30 b1 35 8a 63 66 15 8a 69 d6 21 af 58 97 38 51 01 6d 91 6a 45 15 05 b2 80 54 ce 6b 39 76 Data Ascii: YRU@"!a@BlPR H,)(HaD((!HP !JStf1\KlX$q )2&m"ilEj"3BTQdQX-@EJ XX($$#9rK0jq"(2APQ&;^,Y*05cfi!X8QmjETk9v
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 3d 22 27 43 d3 d3 d3 d3 d3 d3 d3 d3 d3 d3 d3 d3 d3 d1 d3 d3 d3 d3 db db d9 d9 db db d9 d9 be fb 6d b5 ab be 2f 6d b6 bb bb da ee ff 00 05 dd fe 3b f8 b5 76 ae f8 aa aa aa aa fc 35 ae bf 35 5f 15 fa 55 55 55 55 c5 56 ba eb 55 fd 0d 55 6b 55 ae 9a 69 a6 86 33 16 9a d5 55 55 55 55 55 55 56 ba d6 b5 55 5a eb ae ba eb 4a be 36 df b7 bb bf d9 f6 7d 8f 67 d9 f6 bd af 6b da f6 bd af 67 d9 f6 7d 8e fe fe fe ee ee de de cd f6 d9 5f f5 37 6a ef 8b e2 ee fe ee ee ee ee ee ee ee d5 f1 7f a3 77 c5 da bb bb 5d bd fd fd dd bd dd fd bd 9b ed b5 dd fc d5 6b 55 55 5a eb 55 ae ba eb ae ba eb ae ba eb 5a eb ae ba d5 56 ba e9 a6 9a eb ae ba eb a6 95 55 ae b5 55 55 55 5a eb 55 55 55 55 55 5c d7 35 5f 92 ed 5d f3 77 77 b5 ed b5 de db 6f b5 dd dd dd dd da bf d9 06 ef 7d ee c9 e6 Data Ascii: ="'Cm/m;v55_UUUUVUUkUi3UUUUUUVUZJ6}gkg}_7jw]kUUZUZVUUUUZUUUUU\5_]wwo}
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 25 d2 a9 af cf 98 ba ea aa 32 ca ce c4 15 3b 6d 7c 48 2e 05 19 d5 51 9d ad ea 52 92 f6 7e 25 38 4b dd e6 1f 9a 7f ee 25 d6 7d 65 55 1f 53 a4 53 a4 fb e7 2a 37 d8 cc 97 a1 e0 f5 3e 72 8e f3 6c bc 3b 8c aa eb 3d 84 ed e3 fd 87 78 5a de 11 f5 cb c3 b1 95 3c 90 f8 8f e4 ef 57 3c 7b 0e ee 4f 0e e3 38 ea 4a 5a bb 85 d6 d3 d4 9c 73 de 45 4e 57 8c b6 ee 17 7b 64 d7 76 60 a6 9f 24 72 33 e4 51 db d5 de 57 cc 51 c3 81 61 6b 80 e5 42 0d bb bb 10 f2 47 e0 53 7e c4 7e 02 c3 6f ce cd 74 2b 6d 35 e3 fa 07 d5 4f bb b3 ce cb 89 57 a8 8e 15 6a 84 f1 53 c2 ec af ac 4b e5 09 e3 d5 c3 e1 3b da 9a d7 e5 c0 82 a1 52 d2 6e 39 dc 8f 53 0c 0f 53 70 b1 7f ef a3 bf f7 76 72 66 1e 8f 16 f7 e9 b5 2f 5d 1a f6 e0 5d d9 1d 54 30 ef de 6d 93 d9 1c ce a6 86 29 7d 6d 5f f8 3a aa 6e 7b f7 0a Data Ascii: %2;m\|H.QR~%8K%}eUSS*7>rl;=xZ<W<{O8JZsENW{dv`$r3QWQakBGS~~ot+m5OWjSK;Rn9SSpvrf/]]T0m)}m_:n{
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 3a 7f b9 b1 c5 18 23 e0 5e f2 35 16 19 55 8a 7c 91 0d f5 91 81 ea bb e9 e1 d9 b3 57 57 3a da 5d 5a a3 18 47 76 84 89 a9 dd dd 12 49 62 8b 6b 98 e1 15 6c 94 87 ed 2b 13 86 c6 d5 cd 6a b7 cf 23 53 a2 11 f9 45 4d d6 d3 de cf f4 3d 13 76 cb 69 6d 99 b1 ca 52 fc b9 12 7d 16 9d a3 7b 45 dc 6a 9c a7 1c b3 1b 79 8e 9a 85 df 89 5c cc a2 af 2c 6f ad cb 23 be a7 fa 8d 7b 73 2a 4f d9 27 1a f4 f1 41 f8 91 2a d5 1c 6d 83 03 f8 8e 56 b2 cc ab e5 2a 92 8d 7a 37 6b 29 12 9d 79 eb fb 4c 71 94 65 93 b0 aa d4 73 f0 5f 70 ad b5 8d 2b 72 b1 8f c3 75 e8 c7 08 be 05 5a 71 dc d7 32 35 2c e6 93 28 47 f8 68 e8 f4 61 79 42 3c 91 8e 4e 56 4b d3 b5 69 bd 3a cb 46 21 08 42 be cf a6 cb 46 1c d0 df 6e 56 c9 f6 f3 d1 cc 9e 1b 62 c8 cb 4c 4b 95 29 46 dd 6a 71 f4 3a 57 fe 22 1f ec 3a 4f e3 Data Ascii: :#^5U\|WW:]ZGvIbkl+j#SEM=vimR}{Ejy\,o#{sO'AmV*z7k)yLqes_p+ruZq25,(GhayB<NVKi:F!BFnVbLK)Fjq:W":O
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 6e d4 d8 06 e9 91 d0 3c 86 50 dc f6 5c 21 81 f2 b6 79 1b a3 ce ff 00 b0 f6 2c fc b3 20 e9 9e 85 b7 b4 87 e5 8b 4f c0 5d 8b 57 d2 ec a9 44 be 4b 02 c1 ab d8 70 4c c6 33 e6 1e c5 6d dc dc 3d 56 85 a8 b6 d2 7e 48 d5 61 46 b1 f6 8c fa 50 47 2d 99 2e fb 1e fd 78 7f b8 f7 4b 62 9a 7a 32 3b d8 6e b7 e4 ef 2c ba f0 64 ae b6 1f a0 fb 5b 6c 1c 39 d9 0c 5c 4a 29 a5 2d 10 c4 81 37 62 12 bf c8 ca 59 b1 f7 0e 6d b7 17 81 68 ee fc 23 f1 82 e8 5b 08 5a 4e e9 67 4e e4 e0 de 42 7d 28 e0 96 49 f7 b7 e2 1f 6e fc d8 e2 9f d9 d7 76 66 3b 21 ee 2a 2e 1e 45 be e3 e4 48 9b 90 6c bd 22 92 fa 0a 3f 83 70 e0 98 a3 8c 4f fe 11 4a dc 0b 37 ba 72 53 66 61 4a f7 12 bb fe 4c 19 2c ae cc 26 df 23 db e2 31 74 64 9c d1 b4 55 0a 5b 3e c3 9b a1 61 b9 94 66 e3 0f f1 68 b1 fb 04 dd db a1 7f 62 Data Ascii: n<P\!y, O]WDKpL3m=V~HaFPG-.xKbz2;n,d[l9\J)-7bYmh#[ZNgNB}(Invf;!*.EHl"?pOJ7rSfaJL,&#1tdU[>afhb
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 67 c1 9e bd fe 07 e1 57 d0 a5 c3 19 df 82 76 3b a2 bd 76 fb 3b a2 63 d7 bc d1 44 a1 88 b5 2c 79 33 67 84 b4 4b 3f b8 71 15 65 11 79 c1 45 1a cf 25 a3 4f 08 66 a6 4d ed 81 a8 db ac 31 f0 12 6a 9a 1b 16 fe 46 bb 65 91 ae 8e 0d dc fd 29 cf 92 e0 ba aa 3b b9 8a b3 f0 8e 41 f6 11 55 a1 0c a8 b4 20 f6 0d 82 65 8d 2f 23 1b a6 2b 2c 79 1c 9f 32 b1 36 27 31 27 5c 10 31 ec 27 6b b7 71 e7 b8 a7 bb c9 76 52 aa 64 a1 b9 c2 ca 57 78 61 55 7d 06 58 6c 35 a9 7d c6 2a 8a b9 e4 7c 3b 99 db 9c 79 82 36 ba 32 db 15 45 04 8d 32 b2 2a 2e 90 b2 5a 67 ae 29 24 9e dd 91 49 36 4f 73 6e 5a 12 c9 38 c3 63 aa d8 14 a1 25 86 62 d0 c1 9a 96 dc 8f 1f 77 1a 46 cc 34 b0 2b 72 af 42 3c 4b d0 f6 6a ad e2 09 2d b6 13 34 bc e9 98 1c 77 ce 58 61 5b ba df 27 83 06 75 f8 47 11 7c 10 ae fb 4b 0e Data Ascii: gWv;v;cD,y3gK?qeyE%OfM1jFe);AU e/#+,y26'1'\1'kqvRdWxaU}Xl5}\|;y62E2.Zg)$I6OsnZ8c%bwF4+rB<Kj-4wXa['uG\|K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49795	35.190.8.230	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:36 UTC	355	OUT	GET /libs/avril.js HTTP/1.1 Host: static.srcspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:36 UTC	791	IN	HTTP/1.1 200 OK x-goog-generation: 1704277977015252 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 42084 Content-Encoding: gzip x-goog-hash: crc32c=+kYaSA== x-goog-hash: md5=Rl4Q7M5mhKMw9567MTwG1w== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 42084 X-GUploader-UploadID: AD-8ljuG7qPPwHRNma6Ucw8mip6CzLA0kBDKTGTMmcotG-s1vSy4ENt8Aleo5DbNRsMX1c4nXkM Server: UploadServer Date: Tue, 01 Oct 2024 18:27:51 GMT Expires: Tue, 01 Oct 2024 18:42:51 GMT Cache-Control: no-transform, public, max-age=900 Age: 345 Last-Modified: Wed, 03 Jan 2024 10:32:57 GMT ETag: "465e10ecce6684a330f79ebb313c06d7" Content-Type: application/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:36 UTC	599	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 6b 7b e2 4a 92 2d fc 57 7a 3f 33 bd 6d 77 79 a6 74 e5 d2 35 3e 3d dc 6c 40 e2 62 c0 16 a6 c6 73 1e 74 05 84 24 10 52 0a e8 de f3 db 4f 44 a6 04 4a 76 d5 f4 7e bf bc 1f 7a b7 85 a4 bc 44 46 ac 58 2b 32 a1 c8 32 fe d3 ff 15 8e 62 a5 26 08 a2 62 3f 7d bf 33 d4 9d 35 0e fc 85 31 1a 59 77 8f 77 81 e6 88 86 2a 5b b3 3d 5c 90 a9 3f 37 c6 2b fb 7d 21 c0 95 31 39 7f b1 6b be 1b bd c0 45 3a f5 b3 56 10 b5 8c ea 1a 6f 55 82 8a a1 0a 33 63 8c f7 8c d1 57 6b d8 8a de 2c a7 85 57 ca c2 1a 0c fa f6 70 50 a3 57 86 60 4c 94 b6 f1 8a 1d 18 e3 74 6b 28 cf 76 7f ea d7 e1 32 aa f9 e2 26 26 3a 6d 51 1d 42 fb 89 31 59 c2 d5 71 b1 8c ed a9 ff 8e 37 5e c7 6d a3 62 c3 2b d1 01 2e 93 5a 94 05 fa b3 d5 c7 e6 8e 2f f3 f0 39 4e e1 2f f3 b8 b2 f4 96 Data Ascii: k{J-Wz?3mwyt5>=l@bst$RODJv~zDFX+22b&b?}351Yww*[=\?7+}!19kE:VoU3cWk,WpPW`Ltk(v2&&:mQB1Yq7^mb+.Z/9N/
2024-10-01 18:33:36 UTC	1390	IN	Data Raw: 2f 11 9a a0 3f d2 60 cc 6f f0 e7 b2 e5 0b ad 56 14 b2 75 30 26 0b eb b5 15 c9 74 5e 5f ed be d0 5e 83 6f e2 f8 6b 7e c5 9d fa e3 03 76 d5 9e fa e9 d6 ae 5a 7d bc 63 54 83 67 63 bc 74 8c 57 ba 42 15 65 60 a8 b5 8e f1 4a e7 a2 2e ac a1 38 da b9 d4 7b dc 8d 6d bc c2 90 a8 d5 2a eb 67 af e5 6b 21 de 59 ea 3b 98 23 1a 80 4e ab da de 9c 6b be 63 a8 b4 89 11 98 be ff 6c 4d 6b 3e a1 37 b7 56 37 f0 2d b0 15 fa 67 96 04 ce 76 ea 4f e8 9d 85 3d cd be 5a ba 4b db 1f bd b8 86 da b7 c1 dd 15 3a ff 9d dd 1f bc 5b 7a 86 c6 69 ad ce 0a 04 a0 3d a0 4f aa ef 56 7f b0 b5 d0 cb e8 e5 fa d5 9c 82 5f 57 e8 7b ea c4 9a d4 60 a1 c6 eb 67 0c a5 56 a4 19 af f4 c6 78 5e 31 94 a1 3d 9e 46 0d 7a a9 9c e0 59 bb 5b f3 55 f4 a5 a9 1f c7 41 b4 37 14 0a 11 6a 10 1a 95 fd 91 85 4a f3 a5 7b Data Ascii: /?`oVu0&t^_^ok~vZ}cTgctWBe`J.8{m*gk!Y;#NkclMk>7V7-gvO=ZK:[zi=OV_W{`gVx^1=FzY[UA7jJ{
2024-10-01 18:33:36 UTC	1390	IN	Data Raw: 60 16 d4 fc ac 81 f1 f3 7a 9a 43 f8 01 35 c5 d1 4f 21 0b 57 4f ad 3d 9d bf 0a 7e 24 ec 37 f6 0b 73 ce 33 00 de a2 83 93 dc 04 91 1c 08 0b f6 0e b0 14 c0 96 a5 c6 10 7f e5 3e 63 58 7e 31 46 d4 68 d3 68 02 03 8c 36 2c bb 88 e9 0e 12 df 19 db 5b 12 db 02 f4 5b 43 ca a5 6d ac ec 7e 0a ce d2 c7 89 1c cd 0d b8 4c 88 a4 24 0d 22 6f d3 95 6d 3d 37 f4 76 df 8a 30 ab 27 22 31 31 f2 58 70 4e 90 4f 89 82 a1 a2 d3 ed 92 af 98 4c 86 39 db 1c 01 f7 6c 45 5f 56 14 4e 37 d3 a8 0b cb 9f 51 92 97 41 56 a0 98 44 39 ef 0e 3c f7 7d ea 7f 85 e9 d0 d7 da 60 95 95 3d a9 45 47 16 64 6d 63 dc b7 df 0c ca c4 c6 2d f0 17 d9 7a 0b 68 9a 04 66 ba 33 c6 cf d6 cb 81 21 76 3c cc 20 df 17 04 19 88 0c 98 c3 61 62 a2 dd 02 cb bc 4e 20 a8 a9 ff be d6 9a bb a9 ff 1c a3 e1 40 e0 bc 6d 16 2b 6b Data Ascii: `zC5O!WO=~$7s3>cX~1Fhh6,[[Cm~L$"om=7v0'"11XpNOL9lE_VN7QAVD9<}`=EGdmc-zhf3!v< abN @m+k
2024-10-01 18:33:36 UTC	1390	IN	Data Raw: 3f f0 2b 7b c8 a6 f9 0b 8a b9 83 bc 31 cf f3 52 e0 2f 02 6b 92 ab 46 20 11 af 41 d4 5d d1 b2 21 20 90 b2 c7 32 57 95 2a 3e 17 1e 6a 61 8d 07 5f 83 18 34 0f fa 3b 0b 58 73 1a 35 01 dd 02 56 37 03 c3 02 27 3b d1 a2 8c 55 f3 b5 0e d2 79 da c4 36 ee f6 bd 16 e5 b3 80 24 0d 70 20 20 f3 23 1a 27 a0 76 93 af 58 04 cb 0b 40 5b f3 65 67 bd 30 a0 30 5a 86 aa d5 98 9b 1d fb a3 dd aa 95 2f cd 57 7b ba 8a 47 2c a1 20 ff 7e 99 46 63 26 42 27 67 0d ac 14 52 ff 3e d4 fc b6 b5 dc 59 13 bc b0 d2 25 90 c8 05 83 35 60 18 eb a0 97 d8 4c 66 8d 26 36 90 19 cf 4f d1 4b 03 b1 1d 02 27 a0 c4 7f f2 0c 6a ab 8f 00 88 6b bb 9e fa af 99 9e e4 c1 3b 99 d8 d3 a9 9f c2 90 10 80 c0 87 be 3a fb ee 90 36 37 b4 46 31 cd 7e 74 86 95 00 12 f0 d4 cd 81 52 dd c7 e0 be 67 e3 15 47 eb b7 7c 0f d9 Data Ascii: ?+{1R/kF A]! 2W*>ja_4;Xs5V7';Uy6$p #'vX@[eg00Z/W{G, ~Fc&B'gR>Y%5`Lf&6OK'jk;:67F1~tRgG\|
2024-10-01 18:33:36 UTC	1390	IN	Data Raw: df b3 ea 7e b3 e7 04 c1 d4 af 62 08 c8 a0 a0 5a 7e 9e 85 fd 78 61 bd 50 0b 61 36 0b 9d 51 0d 37 61 99 ae 9f ac b0 b2 e1 6c 32 b4 e9 c9 6b 77 68 51 91 e1 e2 3e 04 f1 d0 38 32 d7 f0 d5 a0 0f 28 4e 89 c6 34 9a a5 ab af 6c 55 8d 57 60 e8 ce f9 2b 18 92 be 04 72 24 88 0e bb 0f aa 5c ab b8 fb 1a 9d 88 84 57 90 fe 77 6b 80 81 1e 5b 08 ff c3 9e af ac 21 eb 0a 14 b9 d1 c4 1a 51 35 c7 8b be 07 e4 91 29 a1 89 b3 dd 81 c6 cf a5 02 95 94 7b 9b 5d 4d a6 07 98 f1 cb 3e 67 03 e4 e4 f5 6d 9a 37 23 90 55 10 51 36 13 f2 a3 9d 35 3d d8 48 c1 df 19 5c a2 dc 81 ec dd b2 59 ca 58 e0 13 3a 2b 22 4c e2 ba 31 6a eb c8 a0 01 ba 23 dc b2 84 d0 05 4a be cb e3 42 35 97 c0 01 64 b6 cb 08 82 74 e0 42 ba 18 31 85 b4 b5 a6 83 b4 4a a5 34 50 d2 09 fc af 45 c3 2c 83 0c ba 36 56 2c 28 a8 0b Data Ascii: ~bZ~xaPa6Q7al2kwhQ>82(N4lUW`+r$\Wwk[!Q5){]M>gm7#UQ65=H\YX:+"L1j#JB5dtB1J4PE,6V,(
2024-10-01 18:33:36 UTC	1390	IN	Data Raw: 07 41 b4 a2 d8 d2 b6 dd 0f a3 12 0e 18 5a 7e 01 7c f4 41 06 61 34 2f 4e 6b dc cc a3 3e bb b0 de ec 96 c5 78 91 b9 38 22 12 15 a1 fa da 0e 5d b0 5a 9b 6d 2c f8 bd fd 34 72 80 a2 dd 51 06 d7 84 fc b4 f7 98 2f 4e ec 69 cb d7 c0 09 63 f4 52 50 cb c0 1d 67 47 c6 34 de ad b7 7d 1f fd 14 77 92 d2 94 1c 71 31 72 39 33 56 da 58 d4 cf e5 0c f8 8f 00 4b 7e cc 6b 3f 4b 08 de 2a 0b 33 b4 a5 0e 9d 93 23 fa 6a 7b 29 82 30 57 31 ad 47 c0 8b e3 43 9b 6d db d7 c6 c0 8b 57 b4 c4 e9 f4 6d bb df 8a a2 7c f7 e0 75 e4 63 1c 00 5f 2f 0e f4 74 b3 a1 d5 cb d8 8a 56 21 6c 12 4c 06 f4 b4 88 fa a2 83 46 1c 04 74 e3 34 f0 dd f5 61 cb 22 69 1d 44 53 b0 80 18 b0 e8 59 61 d9 e2 1d 70 1e 8f e9 1c 32 15 60 e7 9d 55 66 6d 3c 7f d0 ed 32 e7 7b 06 07 88 66 2b 27 60 59 0a 00 b2 dd 5a c5 cf f6 Data Ascii: AZ~\|Aa4/Nk>x8"]Zm,4rQ/NicRPgG4}wq1r93VXK~k?K*3#j{)0W1GCmWm\|uc_/tV!lLFt4a"iDSYap2`Ufm<2{f+'`YZ
2024-10-01 18:33:36 UTC	1390	IN	Data Raw: b9 b0 58 a7 43 af 6f 42 58 ac 1e b9 cf c9 db 32 3e 13 f8 fc ef bf 3d fe 38 8e 7e f9 e5 fb e7 b7 df 70 c6 0e 17 7b 30 fb cf 47 f7 69 f9 c5 79 f4 9e 7e d8 e6 77 97 86 a7 c7 87 e2 6d c0 7a fb 60 e0 9c 7f 14 b0 eb ab b3 6e c0 ac ab f5 e1 fb dd 62 ee cf 77 21 3c bd 79 64 1f 38 f6 eb fb f1 03 3e 80 01 89 8f b8 4c 74 60 ec 66 6f f6 11 cf b0 ed 4b 43 e0 ab d4 42 77 a1 93 4d 93 65 e2 dc 7d fb 2d 7f 78 39 1b 76 81 4e 7e 3e dd fd d7 51 b5 b2 2f ff 75 94 84 bf e0 9f f7 f8 9f 07 7a f9 f7 d2 ad bb fc bd c9 5b 7b f7 36 c1 f7 be c3 e7 d5 7f c0 7f a4 cf 7f ff 52 ba f8 f6 37 fa c2 6f d0 d7 37 80 82 5d 1c 25 51 72 da c1 ca 42 64 24 9b b7 d3 1b 3f 44 86 4d 30 c2 3f 4d 1c af 73 dc dd f3 03 fc c2 f7 fb f0 e8 63 dc 27 ce 81 7a 36 37 71 2e f2 1e 1e fe f6 6f ff c6 5b 0d 8d f6 f9 Data Ascii: XCoBX2>=8~p{0Giy~wmz`nbw!<yd8>Lt`foKCBwMe}-x9vN~>Q/uz[{6R7o7]%QrBd$?DM0?Msc'z67q.o[
2024-10-01 18:33:36 UTC	1390	IN	Data Raw: 5c 97 5b 3f b9 a2 f0 eb 29 cb 1c 7e 4a a6 c5 c5 9b 5c ad 72 f6 55 ea 22 87 0f b2 5b e5 fd 41 50 f9 f6 64 93 9b bf a2 5a 5c 7c c8 b6 cd ad 87 52 a9 70 78 22 d5 15 1e 5f ea 18 ef ff 1d 5d fc c3 95 b9 fb 22 c6 7b 69 7c 0a e6 db d2 7a 29 e8 6f 65 ff 5e d6 6e f0 6c c9 db 1b ed 57 7e 5f 91 79 fc a8 db 7c fc e2 7c 4a 78 2f ab 37 78 83 f8 51 ce 1f b5 0a 1f 0f b6 c4 bd af c8 12 37 5f 45 10 38 3c 53 96 26 9f 1f ab 12 d7 9e 52 ad 71 f7 65 b4 1f 23 0f b9 7d aa 9c ff 4a d5 0a f7 bc 88 f8 5b c2 1f 09 29 5f 29 1e 94 8a c8 ad a7 b2 b4 0b ce 9b c7 ff b2 c8 ff 79 fc d8 37 78 ec 70 fe 2e 8b 26 3f 1e 57 e2 fd cf e4 fd 5d 16 1c 6e be 22 fa 43 69 7c b2 c5 f3 07 49 15 38 ff 10 91 1f 94 f1 1d fd b9 34 5e 19 f1 ac 94 6f 15 59 b8 c9 cf 15 6e be 12 f2 07 0e 2f 15 ce df 14 c4 83 52 Data Ascii: \[?)~J\rU"[APdZ\\|Rpx"_]"{i\|z)oe^nlW~_y\|\|Jx/7xQ7_E8<S&Rqe#}J[)_)y7xp.&?W]n"Ci\|I84^oYn/R
2024-10-01 18:33:36 UTC	1390	IN	Data Raw: 74 60 e1 ac cc 63 24 be 50 2f 3a 7c a1 41 34 79 dd a2 60 61 ba 9c 37 10 bf ca ed 2f 79 1d 23 c9 bc b0 96 45 be 50 2f 63 de 29 cf 0f 79 4c f9 79 d4 05 65 7f ad aa 9c bd 15 14 fa e5 bc 2e f0 85 71 05 79 76 b9 d0 ee f2 85 46 11 0b cd 65 a1 8e ba ae 5c 48 16 6f 0a a7 c8 9b ca 42 1c f3 7a d9 ff eb 7c a1 42 44 5e 54 2e 8c 20 cf 28 e7 79 f5 a6 d0 80 3c b5 5c 38 96 6e f2 18 f2 ca b2 bf 22 af 2a cf 57 b1 79 9e 6c f1 f1 2e a3 fd ca ba 19 75 0d 57 e8 ab dc 6c 54 54 6f 36 fa 44 3e 1f a8 36 8f 0f 58 98 e2 0a 17 7c a1 40 42 ff 2a e7 33 2c 14 94 f3 9d c0 17 86 15 e5 a6 30 2d f0 f1 2b dd ea 24 89 e7 4d 32 f2 f2 32 7e a2 ae 2e db cb bc d9 88 b9 d1 91 12 c6 4f 39 de f1 bc 49 c9 5f 14 2c b4 95 75 a6 7c 93 af eb 3c 0f 96 30 1f 97 79 29 e2 55 b9 f0 8f 1b 2d 65 fc c2 c2 61 b9 Data Ascii: t`c$P/:\|A4y`a7/y#EP/c)yLye.qyvFe\HoBz\|BD^T. (y<\8n"Wyl.uWlTTo6D>6X\|@B3,0-+$M22~.O9I_,u\|<0y)U-ea
2024-10-01 18:33:36 UTC	1390	IN	Data Raw: 0a d8 a9 70 3d 0d 0e 16 78 61 9f 2a 95 6b b5 96 ad 41 0f bf d1 c4 fc f6 05 6c f2 a8 3f e5 0d 28 35 e9 ea 94 f8 d5 a8 7e fe 39 0a a0 62 63 82 7e 4d f4 ee df ef 1e 1e fe 96 bf 26 a1 de 63 64 80 de 81 d1 ff b5 f3 38 2c 5a 15 1d f9 ea 6b 7a 3e d4 ca 55 21 50 67 cb 7b 92 90 4a e5 00 46 07 fb 38 7e 2a 5e c1 aa 5d ae 8a d9 20 fa 8f c3 87 6b 37 ca f2 72 5c 91 7e 41 54 7c 1c a3 03 17 a6 a9 5f 68 f4 fd 18 de c3 90 1c fe fa eb 7d 31 46 94 c0 f9 61 f3 62 8c 12 6e 3b e4 60 58 1e a3 58 bf 1e 1b a0 63 fc c7 3f 0a 43 54 2e 85 55 ce 7e 72 f5 4a 18 4b f6 bb 78 26 f5 d9 eb 62 fb 39 86 2c c5 a7 f7 47 58 f7 ab 6f 2e 45 4a 9c aa d7 b9 ac 1e 8b 4f c5 cb 69 cb cf fb 6c 1d da 51 f6 f8 f7 df 1e c0 9d 6a 8f 10 28 55 f8 a3 aa 7c e2 9f 15 f8 b3 e2 d0 3f 55 fc 53 a5 7f 2a f8 a7 4d ff Data Ascii: p=xakAl?(5~9bc~M&cd8,Zkz>U!Pg{JF8~^] k7r\~AT\|_h}1Fabn;`XXc?CT.U~rJKx&b9,GXo.EJOilQj(U\|?US*M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49815	104.22.0.204	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:37 UTC	538	OUT	GET /apps/app/dist/js/app.js HTTP/1.1 Host: acsbapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:37 UTC	847	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:33:37 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 321373 Connection: close x-goog-generation: 1727614053280840 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 321373 x-goog-hash: crc32c=zXpOew== x-goog-hash: md5=CHQoFCcOtBnxgImpzaPKGg== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: * x-guploader-uploadid: AD-8ljv-TNqiDbzJeeYKJ5b33j6cghFxU8n0LADGQeMoJgQ6FFiiNrJiGaSiIvmXZlbunL2kmE_ituxa6g expires: Wed, 01 Oct 2025 18:33:37 GMT Cache-Control: public, max-age=300, must-revalidate last-modified: Sun, 29 Sep 2024 12:47:33 GMT etag: "08742814270eb419f18089a9cda3ca1a" CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cbe8ac86c474316-EWR
2024-10-01 18:33:37 UTC	522	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 7b 72 65 74 65 6e 74 69 6f 6e 50 65 72 69 6f 64 44 61 79 73 3a 65 2c 74 69 6d 65 73 74 61 6d 70 3a 74 2c 64 61 79 73 42 65 66 6f 72 65 4e 6f 74 69 63 65 3a 69 2c 70 72 6f 64 75 63 74 4e 61 6d 65 3a 6e 2c 76 65 72 73 69 6f 6e 3a 73 2c 69 67 6e 6f 72 65 50 61 74 74 65 72 6e 3a 61 7d 29 7b 69 66 28 61 2e 73 6f 6d 65 28 28 65 3d 3e 52 65 67 45 78 70 28 65 29 2e 74 65 73 74 28 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 29 29 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 28 2d 31 2a 28 44 61 74 65 2e 6e 6f 77 28 29 2d 74 2d 32 34 2a 65 2a 36 30 2a 36 30 2a 31 65 33 29 2f 38 36 34 65 35 29 2e 74 6f 46 69 78 65 64 28 32 29 3b 72 3c 3d 69 26 26 72 3e 3d 30 3f 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e Data Ascii: !function({retentionPeriodDays:e,timestamp:t,daysBeforeNotice:i,productName:n,version:s,ignorePattern:a}){if(a.some((e=>RegExp(e).test(document.currentScript.src))))return;const r=(-1(Date.now()-t-24e6060*1e3)/864e5).toFixed(2);r<=i&&r>=0?console.warn
2024-10-01 18:33:37 UTC	1369	IN	Data Raw: 69 67 6e 6f 72 65 50 61 74 74 65 72 6e 3a 5b 22 2f 5e 28 3f 21 2e 2a 76 5c 5c 64 2b 5c 5c 2e 5c 5c 64 2b 5c 5c 2e 5c 5c 64 2b 29 2e 2a 2f 22 5d 7d 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 33 30 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 76 61 6c 75 65 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 2c 69 3d 74 26 26 65 5b 74 5d 2c 6e 3d 30 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 29 3b 69 66 28 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 72 65 Data Ascii: ignorePattern:["/^(?!.v\\d+\\.\\d+\\.\\d+)./"]}),(()=>{"use strict";var e={301:function(e,t,i){var n=this&&this.__values\|\|function(e){var t="function"==typeof Symbol&&Symbol.iterator,i=t&&e[t],n=0;if(i)return i.call(e);if(e&&"number"==typeof e.length)re
2024-10-01 18:33:37 UTC	1369	IN	Data Raw: 6d 65 22 29 29 2c 75 3d 64 2e 6e 65 78 74 28 29 3b 21 75 2e 64 6f 6e 65 3b 75 3d 64 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 68 3d 75 2e 76 61 6c 75 65 3b 65 2e 70 75 72 69 66 79 49 66 72 61 6d 65 57 69 6e 64 6f 77 28 68 29 7d 7d 63 61 74 63 68 28 65 29 7b 61 3d 7b 65 72 72 6f 72 3a 65 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 75 26 26 21 75 2e 64 6f 6e 65 26 26 28 72 3d 64 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 64 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 61 29 74 68 72 6f 77 20 61 2e 65 72 72 6f 72 7d 7d 65 2e 6f 62 73 65 72 76 65 72 2e 6f 62 73 65 72 76 65 28 74 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 29 7d 72 65 74 75 72 6e 20 65 2e 70 75 72 69 66 79 49 66 72 61 6d Data Ascii: me")),u=d.next();!u.done;u=d.next()){var h=u.value;e.purifyIframeWindow(h)}}catch(e){a={error:e}}finally{try{u&&!u.done&&(r=d.return)&&r.call(d)}finally{if(a)throw a.error}}e.observer.observe(t.document.body,{childList:!0,subtree:!0})}return e.purifyIfram
2024-10-01 18:33:37 UTC	1369	IN	Data Raw: 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 7d 7d 7d 63 61 74 63 68 28 65 29 7b 73 3d 7b 65 72 72 6f 72 3a 65 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 75 26 26 21 75 2e 64 6f 6e 65 26 26 28 61 3d 64 2e 72 65 74 75 72 6e 29 26 26 61 2e 63 61 6c 6c 28 64 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 73 29 74 68 72 6f 77 20 73 2e 65 72 72 6f 72 7d 7d 7d 2c 65 78 74 65 6e 64 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 72 2c 6f 2c 6c 3d 69 2e 72 65 66 2c 63 3d 69 2e 74 61 72 67 65 74 52 65 66 2c 64 3d 74 2e 6e 61 6d 65 73 2c 75 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 2c 68 3d 74 2e 70 6f 73 74 4d 65 74 68 6f 64 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 5b 75 5d 5b 65 2e Data Ascii: ]=arguments[t];c.apply(this,e)}}}catch(e){s={error:e}}finally{try{u&&!u.done&&(a=d.return)&&a.call(d)}finally{if(s)throw s.error}}},extendObject:function(t,i){var r,o,l=i.ref,c=i.targetRef,d=t.names,u=t.constructorName,h=t.postMethod,p=function(t){c[u][e.
2024-10-01 18:33:37 UTC	1369	IN	Data Raw: 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 57 69 74 68 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2c 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 3a 72 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 7d 2c 7b 6e 61 6d 65 73 3a 5b 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 57 69 6e 64 6f 77 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 57 69 74 68 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2c 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 3a 72 2e 45 76 65 6e 74 44 65 6c 65 Data Ascii: .ReplaceStrategies.extendPrototypeWithImplementation,implementation:r.EventDelegator.addEventListener},{names:["removeEventListener"],constructorName:"Window",replaceStrategy:e.ReplaceStrategies.extendPrototypeWithImplementation,implementation:r.EventDele
2024-10-01 18:33:37 UTC	1369	IN	Data Raw: 73 3a 5b 22 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 4e 6f 64 65 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 7d 2c 7b 6e 61 6d 65 73 3a 5b 22 72 65 64 75 63 65 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 41 72 72 61 79 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 7d 2c 7b 6e 61 6d 65 73 3a 5b 22 6b 65 79 73 22 2c 22 76 61 6c 75 65 73 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 4f 62 6a 65 63 74 22 2c 70 6f 73 74 4d 65 74 68 6f 64 3a 66 75 6e Data Ascii: s:["parentElement"],constructorName:"Node",replaceStrategy:e.ReplaceStrategies.extendPrototype},{names:["reduce"],constructorName:"Array",replaceStrategy:e.ReplaceStrategies.extendPrototype},{names:["keys","values"],constructorName:"Object",postMethod:fun
2024-10-01 18:33:37 UTC	1369	IN	Data Raw: 74 6f 72 4e 61 6d 65 3a 22 77 69 6e 64 6f 77 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 70 65 72 74 79 7d 5d 2c 65 2e 6f 62 73 65 72 76 65 72 3d 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 2c 73 2c 61 2c 72 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 3d 6e 28 74 29 2c 6c 3d 6f 2e 6e 65 78 74 28 29 3b 21 6c 2e 64 6f 6e 65 3b 6c 3d 6f 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 63 3d 6c 2e 76 61 6c 75 65 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 64 3d 28 61 3d 76 6f 69 64 20 30 2c 6e 28 63 2e 61 64 64 65 64 4e 6f 64 65 73 29 29 2c 75 3d 64 2e 6e 65 78 74 28 29 3b 21 75 2e 64 6f 6e 65 3b 75 3d 64 2e Data Ascii: torName:"window",replaceStrategy:e.ReplaceStrategies.extendProperty}],e.observer=new MutationObserver((function(t){var i,s,a,r;try{for(var o=n(t),l=o.next();!l.done;l=o.next()){var c=l.value;try{for(var d=(a=void 0,n(c.addedNodes)),u=d.next();!u.done;u=d.
2024-10-01 18:33:37 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 2c 30 2c 73 29 29 2c 6e 5b 73 5d 3d 74 5b 73 5d 29 3b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 6e 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 29 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 72 65 74 75 72 6e 20 65 2e 68 61 6e 64 6c 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 2c 72 2c 6f 2c 6c 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 3d 69 28 65 2e 65 76 65 6e 74 73 29 2c 64 3d 63 2e 6e Data Ascii: call(t,0,s)),n[s]=t[s]);return e.concat(n\|\|Array.prototype.slice.call(t))};Object.defineProperty(t,"__esModule",{value:!0}),t.EventDelegator=void 0;var a=function(){function e(){}return e.handleEvent=function(t){var a,r,o,l;try{for(var c=i(e.events),d=c.n
2024-10-01 18:33:37 UTC	1369	IN	Data Raw: 73 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 21 3d 3d 74 7d 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 65 2e 68 61 6e 64 6c 65 45 76 65 6e 74 2c 7b 63 61 70 74 75 72 65 3a 21 30 7d 29 29 29 7d 7d 2c 65 2e 65 76 65 6e 74 73 3d 5b 7b 7d 2c 7b 7d 5d 2c 65 2e 61 63 74 69 76 65 4c 69 73 74 65 6e 65 72 73 3d 5b 5d 2c 65 2e 6e 6f 6e 42 75 62 62 6c 69 6e 67 45 76 65 6e 74 73 3d 5b 22 66 6f 63 75 73 22 2c 22 62 6c 75 72 22 2c 22 66 6f 63 75 73 69 6e 22 2c 22 66 6f 63 75 73 6f 75 74 22 2c 22 63 68 61 6e 67 65 22 5d 2c 65 7d 28 29 3b 74 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 3d 61 7d 7d 2c 74 3d 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 76 61 72 Data Ascii: s.filter((function(e){return e!==t})),document.removeEventListener(t,e.handleEvent,{capture:!0})))}},e.events=[{},{}],e.activeListeners=[],e.nonBubblingEvents=["focus","blur","focusin","focusout","change"],e}();t.EventDelegator=a}},t={};!function i(n){var
2024-10-01 18:33:37 UTC	1369	IN	Data Raw: 53 63 72 65 65 6e 2d 72 65 61 64 65 72 20 6d 6f 64 65 20 69 73 20 6f 6e 2c 20 61 6c 74 2b 38 20 74 6f 20 63 61 6e 63 65 6c 22 2c 44 45 4c 45 54 45 44 5f 4e 55 4d 42 45 52 3a 22 57 61 73 22 2c 41 43 43 4f 55 4e 54 3a 22 41 63 63 6f 75 6e 74 22 2c 53 43 52 4f 4c 4c 3a 22 53 63 72 6f 6c 6c 20 50 61 67 65 22 2c 53 45 41 52 43 48 3a 22 53 65 61 72 63 68 22 2c 4f 52 44 45 52 3a 22 4f 72 64 65 72 22 2c 53 55 42 4d 49 54 3a 22 53 75 62 6d 69 74 22 2c 54 49 4d 45 5f 54 4f 5f 41 4c 45 52 54 5f 43 4c 4f 53 45 3a 22 53 65 63 6f 6e 64 73 20 75 6e 74 69 6c 20 63 6c 6f 73 69 6e 67 22 2c 4d 41 49 4e 5f 4d 45 4e 55 3a 22 4d 61 69 6e 20 4d 65 6e 75 22 2c 46 4f 4f 54 45 52 5f 4d 45 4e 55 3a 22 46 6f 6f 74 65 72 20 4d 65 6e 75 22 2c 48 45 41 44 45 52 5f 4d 45 4e 55 3a 22 48 Data Ascii: Screen-reader mode is on, alt+8 to cancel",DELETED_NUMBER:"Was",ACCOUNT:"Account",SCROLL:"Scroll Page",SEARCH:"Search",ORDER:"Order",SUBMIT:"Submit",TIME_TO_ALERT_CLOSE:"Seconds until closing",MAIN_MENU:"Main Menu",FOOTER_MENU:"Footer Menu",HEADER_MENU:"H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49809	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:37 UTC	609	OUT	GET /images/linkedin-icon.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:37 UTC	2112	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 31 Dec 2018 13:33:54 GMT Accept-Ranges: bytes ETag: "6b397979da1d41:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:49 GMT Connection: close Content-Length: 2476
2024-10-01 18:33:37 UTC	2476	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 70 78 22 20 68 65 69 67 68 74 3d 22 32 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 35 32 2e 35 20 28 36 37 34 36 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49807	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:37 UTC	606	OUT	GET /images/footerlogo.png HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:37 UTC	2109	IN	HTTP/1.1 200 OK Content-Type: image/png Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Tue, 01 Oct 2019 18:11:50 GMT Accept-Ranges: bytes ETag: "7dce61b28378d51:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:49 GMT Connection: close Content-Length: 8673
2024-10-01 18:33:37 UTC	8673	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8c 00 00 00 16 08 06 00 00 00 d3 b3 ab db 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 21 9b 49 44 41 54 78 01 ed 9d 79 6c de 67 7d c0 df d7 8e af 38 f7 7d 3a 49 93 f4 20 6d d3 00 3d 53 4a bb 55 43 65 dd d6 a1 0d ba 96 32 41 ff 18 ec d0 fe 40 13 d2 34 4d 48 93 d0 34 06 4c 1b 1d 12 1a 50 8e 42 25 2e 4d 6d 29 83 8e 51 28 6d 69 e9 41 8e d2 dc 8e ed dc 76 e2 24 76 9c d8 8e df 7d 3e cf f3 3e 7e 7f af af da ae ed 34 28 5f eb fb 3e cf ef 39 bf cf f7 7a 8e df e1 5c 6e 0a a1 50 28 6c 2a f4 15 7e 01 36 81 85 22 6e 27 f6 01 70 e1 14 92 72 a9 ab 49 e4 00 b2 9c 5e 38 5f f8 4f e4 fb d3 8c 9c bb 48 ff 27 f0 fd 93 d8 f5 05 69 9a 31 5d 0b 3e c0 58 7f 93 19 ef 36 78 f0 15 d2 a7 5c af e9 b3 0a dc 00 de 08 de 5e c4 5b Data Ascii: PNGIHDRsRGB!IDATxylg}8}:I m=SJUCe2A@4MH4LPB%.Mm)Q(miAv$v}>>~4(_>9z\nP(l*~6"n'prI^8_OH'i1]>X6x\^[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49808	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:37 UTC	370	OUT	GET /media/2eqgnp4n/newyork.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:37 UTC	2111	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 11 Sep 2020 11:38:13 GMT Accept-Ranges: bytes ETag: "eb826d83088d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:49 GMT Connection: close Content-Length: 377736
2024-10-01 18:33:37 UTC	14273	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 15 0e 0c 0b 0b 0c 19 12 13 0f 15 1e 1b 20 1f 1e 1b 1d 1d 21 25 30 29 21 23 2d 24 1d 1d 2a 39 2a 2d 31 33 36 36 36 20 28 3b 3f 3a 34 3e 30 35 36 33 ff db 00 43 01 09 09 09 0c 0b 0c 18 0e 0e 18 33 22 1d 22 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 ff c2 00 11 08 06 c0 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 af 77 82 95 b2 55 Data Ascii: JFIFC !%0)!#-$9-13666 (;?:4>0563C3""33333333333333333333333333333333333333333333333333@wU
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 42 a5 a1 49 41 49 41 49 64 88 29 88 88 94 1b 00 32 31 18 8a 82 8a 90 10 12 01 22 22 01 20 21 02 10 22 45 44 94 12 10 2a 21 22 a8 82 14 96 21 20 21 21 22 49 62 8a a2 22 01 21 82 a2 20 22 22 22 02 12 01 49 62 08 a8 22 02 01 22 00 12 22 4c 6d 89 19 71 b1 51 19 4b 05 92 51 25 10 22 58 01 20 13 12 00 02 00 20 24 14 2a 90 94 2b 23 15 89 20 aa 00 20 01 00 22 00 51 0a a0 22 02 02 02 20 22 31 1a 20 0a 21 02 20 00 22 49 40 00 24 16 20 28 ab 12 20 25 a2 41 4b 3b 65 a1 22 b1 9a 99 6d 52 96 b1 56 2a 46 1b 69 32 11 02 11 12 58 51 59 22 b5 85 12 2b 59 15 48 44 44 48 44 63 22 23 25 85 15 0c 88 c8 88 c8 04 95 48 48 48 84 40 88 88 40 80 88 88 8a 98 aa 84 88 88 6a 90 58 48 88 68 84 aa 80 85 05 88 52 59 2a a2 51 1a 82 25 52 52 a4 80 46 23 1a 84 04 80 41 64 44 08 88 88 04 08 Data Ascii: BIAIAId)21"" !"ED!"! !!"Ib"! """Ib"""LmqQKQ%"X $+# "Q" "1 ! "I@$ ( %AK;e"mRVFi2XQY"+YHDDHDc"#%HHH@@jXHhRYQ%RRF#AdD
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 62 2b 68 11 20 25 90 20 05 4c 6c 88 08 0a d2 44 02 99 4b 25 12 96 42 a0 82 98 2a 4a 5a 82 09 6b 02 8a a2 82 a8 82 c2 5a 98 c6 a8 28 20 10 49 42 0a 24 2a 96 00 48 a0 aa 02 a1 71 14 80 0a 02 a2 0a 8c 48 04 c4 08 00 88 00 88 22 a0 a0 2a 02 2a 20 22 03 d8 89 51 40 c8 17 24 49 52 22 11 01 12 22 45 52 21 01 aa 21 21 12 11 11 28 6a 5c 88 52 58 46 1b 22 58 ca 41 5b 19 64 6d 8c 88 61 84 4a 98 44 88 45 42 21 25 12 21 21 aa 0a 4a 2d 2c aa 86 20 1b 69 21 0a ca 24 89 52 21 15 04 64 a8 22 02 01 0a 2a cb c7 9a f2 bc 9e df 6f cb db 74 ba f6 f4 78 e7 ce f4 e7 cc ea cc e1 ed e6 e5 eb c1 8c 97 35 ca 6b 7c 4b a8 e5 d4 e3 b9 e0 4d c8 1f 45 ac 7d 5d ac 91 5b 24 4a c0 90 d0 51 50 24 06 27 83 ae 5f 29 bf 37 93 be 29 18 8f 3f 47 bf e7 f6 f2 6e fd 8f 93 d3 f1 1e df 17 77 3d fa bc Data Ascii: b+h % LlDK%BJZkZ( IB$HqH"** "Q@$IR""ER!!!(j\RXF"XA[dmaJDEB!%!!J-, i!$R!d"*otx5k\|KME}][$JQP$'_)7)?Gnw=
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 8f a3 c8 eb cb aa 5e ec 6f 93 19 bc dd ff 00 3d fa 3e 2f a5 c7 46 6b af 1b f4 f9 6b c0 f5 f9 ba 4e 32 3e a3 cb eb e3 5f 8d f5 79 3d 6d f2 e7 e1 d3 c5 ed cf d3 e5 ea e9 e3 d7 8b d5 e2 df ae 5a 13 b3 1b ed 9a f0 9d be cf 1a f3 bb 79 7a ce f8 08 88 80 08 12 52 4e 39 af 95 6b 05 e5 4d 99 df d8 5b f3 51 ce 6f 5d 97 3a a6 bd 79 be 36 38 a6 fd 4e 7d 7d 4e 73 cd f4 f1 f3 93 a7 97 a3 ab 2c 65 e3 b7 9b 78 c1 38 b5 8d d9 df 16 f9 f2 dc d2 fa fc ba f2 f4 e7 cb ac 53 5b b5 8c 25 fa 9f 37 af 8f 5c fc 1e dc be 8f cf df 83 af 2e 0d f3 17 ea 2e 7e 83 87 5f 98 f4 73 e8 ce ba 31 be dc 6f e7 7d 3e 5c ee 33 b8 c2 5d b9 ea 59 bd 31 34 4d 16 6d d7 3e 3c f4 b1 d3 49 8a ee 9a 21 3e b2 e3 7f 2d fc df 6e 5d 38 eb 86 b0 1c 96 6c b9 57 db ce bc a6 f0 b9 d3 2f 56 b1 81 ba 34 63 bd 66 Data Ascii: ^o=>/FkkN2>_y=mZyzRN9kM[Qo]:y68N}}Ns,ex8S[%7\..~_s1o}>\3]Y14Mm><I!>-n]8lW/V4cf
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 2a c4 a1 b1 22 59 23 2b 31 97 15 08 25 53 22 44 c5 52 44 aa 80 c5 61 2a 23 19 71 68 8c 57 24 4d 8c 36 44 44 24 42 04 a2 2a d9 14 09 34 24 4b 0a 0a 44 23 52 20 40 24 89 52 28 95 28 12 b1 55 15 48 2d 24 b1 51 08 10 d9 2c 51 00 82 c0 42 49 01 2c 11 95 24 91 24 a5 31 50 b4 49 15 12 c4 34 c8 d1 05 12 c0 46 48 95 44 20 19 16 a4 43 2e 73 51 b6 6f a7 1d 73 9a d9 35 bb 3b e9 c7 4d 93 5d 38 df a1 cb af 46 75 d3 8d ee cd df 9d 64 bc f7 31 d1 9d 6a d6 75 6a 62 81 d1 9d 62 9a b5 39 f7 9d 76 07 2e f1 8d 6a d6 39 77 8e 7d 63 9f 58 d3 ac 6a b9 e7 d6 35 5c 6b b9 d7 73 85 c8 04 06 40 50 2e 4b 94 d4 33 59 42 b9 cb 94 d2 45 2e e9 ad b2 e5 5b f3 76 1b f3 5a c6 ca 5c 6e 70 b3 9b 58 d5 ac 72 eb 9e ad 63 0b 9a a3 10 1a 90 58 91 b6 24 a5 6c 80 84 80 40 8c 93 2b 05 a1 44 c8 65 4e Data Ascii: "Y#+1%S"DRDa#qhW$M6DD$B*4$KD#R @$R((UH-$Q,QBI,$$1PI4FHD C.sQos5;M]8Fud1jujbb9v.j9w}cXj5\ks@P.K3YBE.[vZ\npXrcX$l@+DeN
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 6c 48 6e 68 e2 32 39 95 6d ea 8b 9a 3e 20 b7 8c f9 82 0e 69 f8 82 ad bf 30 55 b7 aa cd 39 94 ed 76 4a 8c 38 15 1f dd 0f e5 7b 21 fc b8 6d e1 46 01 76 91 e2 8f f2 f0 a9 c0 00 49 fd d5 18 55 67 68 ea b7 78 50 60 ad d3 20 4b cc a2 c1 5f bc 39 2d d0 bf ac 43 0d c7 08 7a c5 ba 75 60 56 16 e7 10 7c 69 ac c5 a3 84 a3 bf ac 75 55 7f 11 ab 25 35 f8 81 80 6e a5 56 2b 97 61 a2 e6 39 bc b0 54 e0 93 11 0a 30 a9 bb ee 9d c2 6c e5 86 4d 77 f4 31 7d d9 d8 5f c1 4c 6c 19 a2 f1 45 34 ed d3 d0 61 68 3c 41 1c ec 81 03 49 52 86 c1 7d 61 4b 8c d8 2a b1 24 70 b6 53 ab e2 96 8e ea b2 1e e3 48 9e 8a f3 20 20 9a dd e1 3c 50 83 5f 41 a3 17 c9 71 45 d8 1c 8d 36 a4 10 a3 88 ce 21 4e 68 a4 46 29 54 e2 6e f9 ec b0 81 2c e7 85 18 94 f3 08 47 fd 29 81 a6 69 7d 2a 0f 59 4c e4 1e 83 b9 4a Data Ascii: lHnh29m> i0U9vJ8{!mFvIUghxP` K_9-Czu`V\|iuU%5nV+a9T0lMw1}_LlE4ah<AIR}aK$pSH <P_AqE6!NhF)Tn,G)i}YLJ
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: d9 0a 2a bc c2 e0 93 04 ab 77 5c 31 99 94 16 9a fa 56 d9 e7 e8 79 ec 19 dd 3a 9f 84 94 1a df ea c2 81 43 f8 b5 fa ed 24 d2 2f b1 d8 54 b0 3a 73 42 ac c3 10 e6 4f 99 1c 30 9d e1 09 de 09 b3 0b 55 17 5a aa 8c 14 df 09 4d 1f 86 53 6c e4 e2 a4 c6 4a 1d 4f 21 f1 58 4e 8e 61 2b 1c 82 f1 02 2c 8f 82 74 68 13 08 d5 12 10 8b ce c9 ef 65 3b 27 0b 74 2d c7 b2 e9 bd d3 ac 04 4a b4 66 9d 02 23 65 95 54 f2 95 51 2a 50 84 d1 27 34 6c 56 1b 1a ec dd a2 c4 0d 6c 50 e9 44 5b 35 36 c9 35 c7 29 85 88 00 76 73 b2 94 c2 69 20 2d d0 98 ac 28 d8 1d 4b 1c 3a a6 33 78 62 40 4e 6d 06 11 6c 00 7a fa 2f 60 6b 41 aa 76 64 65 39 e5 f9 a1 92 d7 25 79 d1 49 6b e7 50 8b 8b ae 51 c9 69 b3 e2 43 34 25 05 78 2a f4 ad 15 e0 23 36 46 51 cd 13 c4 be 2c d0 37 54 80 3d e0 9e 89 cd 6b 72 c5 95 40 Data Ascii: w\1Vy:C$/T:sBO0UZMSlJO!XNa+,the;'t-Jf#eTQP'4lVlPD[565)vsi -(K:3xb@Nmlz/`kAvde9%yIkPQiC4%x*#6FQ,7T=kr@
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 04 f4 7d a6 57 82 5d 0b 51 74 ae 62 dc 57 95 e4 5c bb e8 36 5e 46 49 39 4b 03 cb b1 e8 c3 47 58 a3 1a 35 f5 cf ba 22 5b 41 a5 91 ce 47 c8 d7 51 fb c1 59 31 aa 42 4f 2d 8c 95 98 5a f4 2c e8 fb 08 93 f4 70 04 7c 05 5e 09 8a fd c0 34 d6 9f 81 f8 1a aa ff 00 4d 9f 69 67 42 4a 87 2d 3e cc ec 7f 73 b9 fd c5 6c b7 ee 8d af 63 89 51 9b 84 86 be 32 11 96 8c a2 77 a8 ad 46 91 43 1a 8f 46 8e c4 b8 58 78 82 9a d3 cb 47 f9 0b 6a 6e 4d 5b d0 9d 72 82 7d 21 f4 f1 af ef f6 6d 19 a5 ec 54 2e f0 97 ac 62 ca fa 1f 74 a8 dd 3d 11 8d cb f6 30 79 6b f4 7f 1f e9 df e9 60 88 c0 97 63 45 89 a1 54 ad 34 9c 26 c3 fb 78 5a 31 e2 9d 7e 0f 9f cf 8f 2b 3e 05 e5 2b 87 74 7a 90 2e 71 7c 8b a0 74 2a d4 5b ec 27 8b 63 bd 91 b3 6a d8 d4 eb bc 1c 38 42 ba 76 86 31 ba 0c 1f 91 21 77 1d 03 f3 Data Ascii: }W]QtbW\6^FI9KGX5"[AGQY1BO-Z,p\|^4MigBJ->slcQ2wFCFXxGjnM[r}!mT.bt=0yk`cET4&xZ1~+>+tz.q\|t*['cj8Bv1!w
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 87 f9 ba a1 17 c4 35 52 8a 14 ba 22 5a 48 b7 d8 55 99 bf 06 3d 17 14 6e d3 41 bc c9 7c ee 2c 1d b6 1a 46 6a ae ee 7e 64 72 d0 a3 d4 f9 f1 bb 8a e5 0b a7 d3 84 59 b7 a0 ab 3f ef 82 ae 4b e4 63 92 ed 38 04 56 b2 dc b0 db 52 c9 e8 1c 52 84 e8 da e1 f9 be 68 98 57 a9 f2 67 48 5e d1 07 77 31 9e d5 e3 ad 0a eb 8e db 95 33 3c 42 0d 41 34 0b 2c 99 37 3f c0 85 e1 ad 12 4a c2 1b c2 fb 1e 8f b1 fe 50 cd d6 d8 ee ac e0 be cc 58 1b 4a 53 0e c6 2b 23 2f 1b 3c 8b 41 56 5f 7d 83 d0 65 d3 03 6b 34 da 89 b4 1b 39 64 78 e8 8f b0 7a 96 cc 87 6c 9a b2 ce 0d 41 ec bc 4e 45 7a f6 16 22 eb b0 42 30 e4 1c 59 3b 1c c4 c6 b5 d2 ec 36 3b 56 30 3c 46 de 08 0f 2c 27 13 c2 d6 ee 3c a9 4f 82 19 ac 91 98 9a 64 d7 c0 fe 8d f1 5b f8 45 bc 74 e0 4f b1 44 cb 2c 9a cc e4 31 60 6d 03 0a c0 4e Data Ascii: 5R"ZHU=nA\|,Fj~drY?Kc8VRRhWgH^w13<BA4,7?JPXJS+#/<AV_}ek49dxzlANEz"B0Y;6;V0<F,'<Od[EtOD,1`mN
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: d4 33 39 e8 ed 46 5a ae 29 ba be c4 aa 82 73 01 c4 c7 70 57 13 2b 03 19 e0 1b 82 2a df 5b a0 fb 7d 8e af ee 36 9f a0 1f 8a fa 3d 00 b7 a1 32 54 d3 4d 84 fa c9 2d 76 5e 85 a5 34 38 b9 10 84 72 82 ae 5d c5 da 65 05 44 53 9e ad 38 9d 91 45 a9 6c ba 07 fa f8 8a 5c 4e 65 68 39 b8 b1 c6 a7 e2 af d9 40 60 ab 87 f7 15 6d 1b fe 71 84 b4 f4 ea 32 f3 dc d0 9c 6e 91 3b 31 8d 39 98 b5 10 ff 00 6f ac 51 90 4d b9 fc 83 9e 13 a9 24 f0 a9 59 a4 3d c4 2a d8 f4 f9 8a c6 1e 8f 18 17 63 6e b6 9f fa 44 b3 d0 1c 76 0d 4f 5f b0 de fe 22 2d 55 f3 08 46 2b bd f0 f4 65 ec 6f f6 50 ce 0b 96 15 27 53 dd 57 93 9a 54 95 90 b1 e2 8c 2e 51 82 ac 2d 58 b1 e9 83 5b 73 7c 1e c6 54 fd ff 00 d0 7c fb 36 3c 56 06 eb 7e d2 92 35 a2 7e ce 6c df ff 00 a1 67 71 05 a7 95 aa e8 25 5b 09 65 f2 6a b2 Data Ascii: 39FZ)spW+[}6=2TM-v^48r]eDS8El\Neh9@`mq2n;19oQM$Y=cnDvO_"-UF+eoP'SWT.Q-X[s\|T\|6<V~5~lgq%[ej

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49810	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:37 UTC	646	OUT	GET /dist/img/search-icon.png HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:37 UTC	2108	IN	HTTP/1.1 200 OK Content-Type: image/png Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 11 Sep 2020 11:33:42 GMT Accept-Ranges: bytes ETag: "27b9bc662f88d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:49 GMT Connection: close Content-Length: 783
2024-10-01 18:33:37 UTC	783	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 14 a0 03 00 04 00 00 00 01 00 00 00 14 00 00 00 00 b2 dd f0 fd 00 00 02 79 49 44 41 54 38 11 ad 94 4d 68 13 51 10 c7 67 de 66 db 24 54 0f f6 22 05 f1 a3 88 8a 07 c1 93 d4 a6 7b 51 c8 a6 6a b1 d8 4d 11 0f 22 56 94 5e 44 c4 83 94 52 e8 d1 93 17 0f 1e 44 2f da 44 13 25 31 b1 14 0f dd 88 a0 a2 27 29 55 22 94 46 c8 a9 b7 6d d9 98 74 77 9c 17 48 89 d9 6c 0d e2 83 4d e6 cd fc df ef cd 9b 9d b7 08 7f 19 c3 a9 77 07 9c 9a 73 1d 11 a3 2c dd 47 40 88 80 25 Data Ascii: PNGIHDRsRGBDeXIfMM*iyIDAT8MhQgf$T"{QjM"V^DRD/D%1')U"FmtwHlMws,G@%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49812	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:37 UTC	648	OUT	GET /dist/img/homepage-play.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:37 UTC	2113	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 30 Apr 2021 09:13:53 GMT Accept-Ranges: bytes ETag: "801ec723a13dd71:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:49 GMT Connection: close Content-Length: 1810
2024-10-01 18:33:37 UTC	1810	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 30 70 78 22 20 68 65 69 67 68 74 3d 22 32 30 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 30 20 32 30 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 38 41 32 30 32 45 36 35 2d 44 38 41 34 2d 34 37 34 41 2d 39 42 37 39 2d 42 41 39 45 41 31 30 31 42 34 34 44 40 31 78 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="200px" height="200px" viewBox="0 0 200 200" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>8A202E65-D8A4-474A-9B79-BA9EA101B44D@1x</title> <def

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49811	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:37 UTC	665	OUT	GET /dist/img/image-johnquinn-combined-hover.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:37 UTC	2111	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 18 Feb 2022 04:25:32 GMT Accept-Ranges: bytes ETag: "c2cd3c917f24d81:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:49 GMT Connection: close Content-Length: 29731
2024-10-01 18:33:37 UTC	14273	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 15 0e 0c 0b 0b 0c 19 12 13 0f 15 1e 1b 20 1f 1e 1b 1d 1d 21 25 30 29 21 23 2d 24 1d 1d 2a 39 2a 2d 31 33 36 36 36 20 28 3b 3f 3a 34 3e 30 35 36 33 ff db 00 43 01 09 09 09 0c 0b 0c 18 0e 0e 18 33 22 1d 22 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 ff c0 00 11 08 02 80 04 74 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 37 10 01 00 02 02 02 00 05 02 05 04 02 02 01 04 03 01 00 01 02 03 11 04 12 05 13 21 31 51 14 32 22 33 41 52 61 06 23 42 53 54 71 15 62 81 Data Ascii: JFIFC !%0)!#-$9-13666 (;?:4>0563C3""33333333333333333333333333333333333333333333333333t7!1Q2"3ARa#BSTqb
2024-10-01 18:33:37 UTC	15458	IN	Data Raw: e0 62 ae af 87 d6 24 62 38 71 70 e3 f6 8b 1b 5f 0f 4d 45 23 5a 65 ac c1 35 8b c4 ee 11 53 4e 3f 61 11 9b 14 f4 9d c7 b3 78 cf ac 70 cc 34 e4 f4 f0 5b fb 15 73 d6 b3 19 e7 89 65 a8 c6 95 eb 28 df 96 d1 3e bb 47 4c 6f 1c d8 c5 1f 89 71 ac 7b bf d2 5c c8 cb e3 38 e6 ae be 73 8c 7f 4f c7 e8 db 1e 63 10 c0 6c 53 d8 83 62 8d 81 80 d8 0d 80 d8 0d 82 65 06 73 b1 50 04 00 06 80 80 01 68 e8 40 c2 f1 3b 06 95 89 d1 d0 e4 e8 5a 3a 14 c1 d1 cb 9e 9b a4 ae 51 f2 7e 2d 8a 6b 79 93 6a 32 e0 55 3a 3d 88 8f 43 a3 6c 71 e8 0c 39 7e 94 95 57 c9 f3 bf 36 59 57 0c 82 24 1e 87 85 fd e3 3a fa 5c 1f 6a 8e ba 48 8d ea 0d 05 31 00 a0 42 04 ed 44 81 01 02 41 33 20 90 48 3f 37 56 00 80 50 05 28 21 14 80 01 80 84 17 46 f1 95 a8 60 00 00 00 00 15 00 a0 54 02 a2 62 01 71 68 14 e2 d0 0a Data Ascii: b$b8qp_ME#Ze5SN?axp4[se(>GLoq{\8sOclSbesPh@;Z:Q~-kyj2U:=Clq9~W6YW$:\jH1BDA3 H?7VP(!F`Tbqh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49813	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:37 UTC	609	OUT	GET /dist/img/world_image.png HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:37 UTC	2111	IN	HTTP/1.1 200 OK Content-Type: image/png Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 11 Sep 2020 11:33:45 GMT Accept-Ranges: bytes ETag: "7748e8682f88d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:49 GMT Connection: close Content-Length: 971903
2024-10-01 18:33:37 UTC	14273	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0b 40 00 00 04 4c 08 03 00 00 00 3d 1b e2 c0 00 00 03 00 50 4c 54 45 00 22 27 00 24 2a 00 1f 25 00 26 2b 00 1f 22 00 1b 1f 00 1a 1c 03 1f 2b 08 23 32 08 23 2f 07 26 36 0d 27 35 0e 26 31 04 26 34 0a 26 30 0a 27 33 02 1b 27 04 1d 28 11 2d 3a 03 24 34 0f 29 37 0a 28 38 02 23 30 00 17 1a 13 30 3b 07 20 2b 02 22 22 12 29 33 02 20 2f 1e 3a 46 09 2a 37 08 24 35 1a 36 43 0d 2a 33 0d 2e 3d 0f 2a 3b 01 22 33 12 2c 37 0b 31 3f 16 32 3e 0e 2c 37 07 23 2c 0d 33 42 05 23 25 00 1f 1f 08 2e 3c 0b 2c 3a 0d 23 2f 12 2e 3e 16 34 42 0c 24 34 04 21 28 17 30 3e 11 26 34 02 25 25 01 1b 23 0a 2a 3b 06 2b 3a 1d 37 44 0c 25 2e 15 2a 35 04 26 31 1d 3b 4a 0b 22 2c 15 31 41 07 20 2f 11 33 40 17 2e 39 19 32 41 19 35 45 10 30 40 09 Data Ascii: PNGIHDR@L=PLTE"'$%&+"+#2#/&6'5&1&4&0'3'(-:$4)7(8#00; +"")3 /:F7$56C3.=;"3,71?2>,7#,3B#%.<,:#/.>4B$4!(0>&4%%#;+:7D%.5&1;J",1A /3@.92A5E0@
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: f2 67 2c 53 60 46 fd d5 23 f4 df 52 68 ea 1b b2 d4 23 ae df 47 7c b8 9c 62 6b ea f5 23 7c ef c2 77 ac fe 2d e5 53 9f e4 47 9b 6a 2d 5d bf ed fa 27 d1 34 a8 3d f0 d3 20 d7 6f 51 f5 94 f5 7f e1 2d 0d 8b 02 09 41 40 f2 22 76 f0 58 37 11 52 db 60 ca 96 84 38 12 d9 09 09 73 38 e2 c2 d1 18 57 80 6c 4c a5 2a 5f 5a c8 70 bb 79 c4 87 3c 08 45 c1 6a fe 61 64 6d 67 77 74 d0 32 d5 4f 6e 9d 27 d0 68 5b 9d b2 18 2e eb ec ee eb c7 25 96 ed fe 3b 9a ca 03 c3 1c 9f f2 85 89 ae 7e 14 6c 87 4d e3 93 7f d7 7f ee a2 23 99 89 d0 e5 b7 d2 0f bb 8c 1f fe 0a 05 51 80 41 23 d4 89 fe 87 f2 20 96 5a 65 a9 65 d6 df c4 fa 57 fa 3f af 7e 34 f9 d7 fc fa 8b a4 ab 33 78 51 87 2b 91 6c 60 9a 7e 8e 15 a8 34 db e1 91 3f 03 58 8a 36 8d ed e8 63 a9 0c f8 5c a6 b1 e1 a3 1a 27 28 4c 98 7f a1 d7 Data Ascii: g,S`F#Rh#G\|bk#\|w-SGj-]'4= oQ-A@"vX7R`8s8WlL*_Zpy<Ejadmgwt2On'h[.%;~lM#QA# ZeeW?~43xQ+l`~4?X6c\'(L
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 71 f2 12 80 b6 d6 af 30 97 e8 3f f0 4e ff 22 fb 2d ea cf a4 0e f4 37 a4 02 63 c7 c5 da 7f 8d f9 db 27 fa bb 8c bb 94 0e eb ff 7a c6 23 5e c0 5a fd fc a0 bf 54 e0 89 f6 83 59 95 a9 09 f3 4c fb 53 2e d9 dd 3a 7e 3c 3b fe 4c 4a c3 7c 0c e4 ca 0f 4e d1 83 77 b8 7a fe 18 33 b1 7f e1 f5 f3 e7 a2 0b ac 5f e7 f0 c6 9e ce bf b2 b8 d7 87 a3 80 80 aa e4 e1 7f fe d1 18 7b cf f8 b7 f3 02 3d c9 9f 67 c7 ef ef 1f 81 b2 2d 2b 7c 31 7a f3 fe 7b 54 c7 ef 1b ff c1 ed f7 55 e3 f7 45 f3 f7 0c be ae 7d 41 39 47 07 fa 03 92 00 fc 88 d7 c0 55 40 40 02 87 e5 6f e5 6f 67 d7 ae f1 2b 5a f8 28 9f 7e e0 19 7f 82 fc 11 d3 f1 cf 7f 07 b6 75 03 53 9d cf 9d 4b d2 1b 8c 9f ff f9 7d bc f2 22 cd cf 40 fb eb 98 eb 3b c3 b6 71 0d 22 7f ce f2 a9 04 76 f9 5f 84 c7 c0 1b c7 bf 95 07 de 3c 7e 1b Data Ascii: q0?N"-7c'z#^ZTYLS.:~<;LJ\|Nwz3_{=g-+\|1z{TUE}A9GU@@oog+Z(~uSK}"@;q"v_<~
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: ec fb 37 34 20 b6 82 d0 87 97 4a b3 c2 f0 27 db 08 91 ad 47 a8 76 a6 32 8c d7 50 9c fe 38 45 aa f1 9a e1 ce 09 39 0c 4c 5b 21 45 c7 b6 6e 0c 92 16 b2 09 4d 67 ca 33 ac 61 5f e6 fa 40 f8 87 9e 34 c7 0e a3 ec ce 0b fc 0b a2 7a 3b 0c ea 09 f4 81 83 a5 29 f2 6a c9 a0 a6 f1 d9 bb a7 1a d3 7e 82 72 a1 1d 2b 09 67 5e 3f 00 9a 9d 0f 84 ca 39 d6 14 0c ea 69 d2 09 43 64 58 c1 35 04 97 47 89 2f 09 a8 c3 9e 29 26 0e 8a 49 27 e7 d3 e9 bf 39 65 12 ee 50 e0 78 c9 78 9b fb e7 ef 3e 63 f6 94 f6 4a d7 a4 60 89 bb 0f 14 c4 98 14 37 70 a7 61 a4 62 e7 7b c6 d1 2d b6 d0 a3 98 0b 63 cf 2d cd 6c 6d c3 bc 66 2b de 84 68 be 20 d4 cf 01 b9 c8 50 0c 9a 9c 64 93 e0 f9 48 8c 3e f3 fa 23 ab d9 bf 80 24 f3 bd ef 38 7a ac 0d d4 ef 58 72 18 ed 7b f7 36 c2 31 ad 3c 4d 43 e1 e5 21 2c 26 41 Data Ascii: 74 J'Gv2P8E9L[!EnMg3a_@4z;)j~r+g^?9iCdX5G/)&I'9ePxx>cJ`7pab{-c-lmf+h PdH>#$8zXr{61<MC!,&A
2024-10-01 18:33:37 UTC	63	IN	Data Raw: 85 bd 97 3a e8 7a bb a2 b4 ca 7f e9 e1 cd fc 45 e7 d0 68 5f 65 5f 86 be b8 e3 b6 e2 4c 8d b9 b6 8f 69 e1 42 2a 1b 54 92 ea a5 1d c6 d6 c5 94 24 c9 5a 03 3a 78 ba c9 28 5b 4d 99 77 7b e4 18 Data Ascii: :zEh_e_LiB*T$Z:x([Mw{
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: cb db 8e a3 4a dd 0b 3d 79 bf f3 89 b4 5c 6a 75 53 32 69 0a 0e 97 17 58 4b 8d 77 48 45 6b ec 90 d6 7d b3 14 a0 cd d6 07 ec 86 ab 36 17 bb 94 a7 9b 7e 64 6f 83 c2 3e bc bc cd 7e d4 49 a9 5c 88 9c 4d fc cd 02 af f3 9c 00 b5 32 51 eb 1e c4 ca 9e 1d 0c d5 77 2b 9b 77 72 87 ee 7e cf 51 e0 3c ce 95 7d 13 a0 9f 7b fa 83 af bf 9f fe 79 98 c0 37 d6 ce 3d 65 f7 5b d9 c2 81 c7 fb db 3f 69 cb 6c ec eb 8f 02 f4 f9 68 47 d1 00 0a ee b0 59 8d 6e 78 60 37 4e e2 49 24 68 b3 27 3f 0e fa 91 9f 70 3b fc a9 12 46 3f 6c 24 01 b5 3d ac cb ad c2 b3 96 44 3d 07 4b f7 9d 8d 5e 8d ec 5f cb 32 4a 34 cd 19 f7 13 19 a7 11 9c 53 a3 18 98 d1 e1 59 ac ec 22 43 ab 50 ea 24 dd 8b af a6 3c 04 4c c3 eb 3c 2c 5e 22 80 96 4a 89 36 ca 4a 57 38 16 ea 4a d7 52 c1 73 5b 8e 55 0d 25 b8 b1 33 57 1a Data Ascii: J=y\juS2iXKwHEk}6~do>~I\M2Qw+wr~Q<}{y7=e[?ilhGYnx`7NI$h'?p;F?l$=D=K^_2J4SY"CP$<L<,^"J6JW8JRs[U%3W
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 5e eb 62 c6 c7 0d da eb d2 45 ad 45 cf fd 40 2b fb b5 e8 ff 29 7e 9d ad ae ae 5d c7 8d 5d 04 d3 fd 30 26 b5 d6 3b 79 5b 3b af 44 c6 73 df 4c 71 b2 cb 2f a7 00 5e 01 75 80 b3 a2 62 a8 f7 91 52 36 b0 2d 82 be ee 17 57 f5 5d f6 ef f3 78 bb f9 d5 86 8a fc 4f 55 b6 39 f9 bc 21 a6 af 06 bc 6b ae f0 d7 78 6f 9b 7f fd fe f5 fc 4e 5b f5 d1 d4 4b fe a7 37 cf 1f f9 df 7c 8f 42 b6 ce 1f 45 f9 bf ed f9 bf 4f fe 36 07 69 8f c0 9f 10 81 fe f0 cf 7f fb cb 57 37 6d 51 8e f7 e2 fe 37 69 b4 68 db de e4 cf 34 ea f0 3f 6e df c3 e7 ff af fc cd e8 43 ad fa a3 a0 b2 ae ea e3 81 66 9c d9 26 b9 59 99 6d 49 85 d1 19 ba 24 9b b2 70 68 9c 7f 38 50 82 c5 35 b0 95 06 2f d0 63 aa 75 9c ce 3f 6e 9b a1 4c 0c 3c 8b 8e c5 cf 53 d0 b3 5f d5 18 74 4b 38 f6 55 18 84 c9 d5 cc c3 f9 37 4e 39 fc Data Ascii: ^bEE@+)~]]0&;y[;DsLq/^ubR6-W]xOU9!kxoN[K7\|BEO6iW7mQ7ih4?nCf&YmI$ph8P5/cu?nL<S_tK8U7N9
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 0e 25 41 4f 76 ee 66 08 fa a5 2d 24 70 1c 6d 1d 7d fa 29 f8 f9 e6 cd 9b f7 01 d0 00 67 25 3f a3 92 d2 f8 fe fe 23 ea 87 47 bf 4b 22 68 70 34 5e 2a fc 9e 04 fd 8d 60 1b de b7 91 c9 b1 cf e5 f0 6e 01 a0 a1 f7 c1 ce 78 75 f1 c3 05 12 f4 5b a0 67 65 95 ac ae 8e c1 d0 78 d2 55 47 90 09 cb eb 01 cd ea d5 0a 78 e4 de c3 6d f1 f0 06 b1 77 5d 76 33 92 8c 2c 0d 45 b0 b3 73 a9 a4 8b a8 53 17 e7 65 78 84 c4 ce 17 4a 9d a0 cb 1b a0 ba 30 2d 8e dc 46 ea 46 f6 73 74 b1 10 29 cb e6 15 c1 e5 68 5c bf b0 7d e1 02 5a 18 ba c0 a5 3b 24 21 31 e6 26 50 d3 80 1b ea 16 41 b3 7a 7e 13 6b de 05 4d 2b c3 ab b4 50 70 10 09 1f 9c c0 5e 74 bd a0 c5 f1 36 63 e9 78 14 8a 41 bf aa 02 af 2f a3 15 a8 5c d8 f9 12 fa 84 d6 28 f1 b9 44 ae a6 7a fa e1 98 51 af 9a 6f f2 5b 5e e2 cc 0d af 42 21 Data Ascii: %AOvf-$pm})g%?#GK"hp4^*`nxu[gexUGxmw]v3,EsSexJ0-FFst)h\}Z;$!1&PAz~kM+Pp^t6cxA/\(DzQo[^B!
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 0b 47 b4 58 c5 0c ab 82 8a b3 30 19 07 ce c4 13 0b 36 0f 3f f5 7a 9e 1f 85 aa 4e 80 2e 59 7f 76 f8 99 ce 7d 3a b1 9d fa f9 ff 53 eb 3b 0e e1 7c 59 d3 50 d4 73 42 b2 57 dc f2 e5 bf ff 09 d6 2f a6 a6 58 12 b3 3d 35 e6 b3 c8 f1 a1 a0 ce 38 9d 67 9c 95 e2 4d 3c a7 52 82 9f 81 66 bb a0 bf 93 dc 73 93 e4 ce 3e bf 43 42 e7 ef b8 05 3f 97 0b 5a 46 b7 c8 e9 ec 3a b0 7c 2b 9b a2 70 46 33 1d 22 d1 a9 6c 5d 82 d8 f4 d4 a2 eb 8b 3e 73 c3 cf ab c5 9a e8 76 fe 14 27 59 fc e1 2c a4 eb b0 0e c0 b8 ac cd e6 0b 17 51 94 f4 1a a6 66 48 1a 7a a6 71 c9 1d 0c c8 9c 2c 8f f2 a5 d1 03 a2 45 d1 48 91 1a ea 0b 9c a5 77 a8 0c cc 88 c6 52 1e 3a a4 ff 9b d2 de 66 d8 f9 a1 3d 2e 46 66 04 35 93 59 a3 91 79 e5 5e db ab f0 f9 b8 e9 19 81 78 87 87 8f 9f 3c 7e f2 64 99 f2 80 5e c0 70 6e 82 Data Ascii: GX06?zN.Yv}:S;\|YPsBW/X=58gM<Rfs>CB?ZF:\|+pF3"l]>sv'Y,QfHzq,EHwR:f=.Ff5Yy^x<~d^pn
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 6c b4 48 ed 5c 1b 09 8a 9b cd ce 66 e6 57 16 f9 9b 43 cd fe 4c 9d ce d9 05 a5 71 b9 e0 79 54 52 72 d2 b9 ae f6 64 10 95 a9 16 32 f3 f1 b0 ef d7 f0 be 1b 99 6c c7 35 73 08 81 a0 18 60 9a f7 e9 ae 4f 91 6c 9a 6c 37 d8 32 5c 72 38 ff 80 66 73 74 9c 82 bb 4e 67 d7 94 8a 44 f3 f1 95 8b a5 ee ec 3d d9 db db 17 55 1d ec 49 8f 2d f4 e4 f1 de e3 3d eb c9 be 46 71 67 a2 ed 83 e1 11 d7 a7 34 09 70 de 9e 70 9e fb c8 6b 98 18 16 f4 81 54 f1 13 f0 35 8d 84 fb 45 9f 29 77 bb 95 8a e5 1c 6d e9 80 e7 c0 34 f1 c0 f2 19 37 e0 53 54 aa 3c 09 34 0e ab 36 b9 e6 02 ca 5b 07 a5 67 a7 70 0e e6 4e 24 7b d1 73 3d 14 1d dd 7b 30 b4 8e de 29 3d 8c 1d 83 c5 1a 19 a6 5f 15 85 fb c7 db 9b b6 d7 23 65 50 c4 cc 9f 57 27 5d c0 19 e9 2f 2c f1 17 5f 2b dd 5c db d3 b1 b6 76 e7 e6 cd 55 6b 6f Data Ascii: lH\fWCLqyTRrd2l5s`Oll72\r8fstNgD=UI-=Fqg4ppkT5E)wm47ST<46[gpN${s={0)=_#ePW']/,_+\vUko

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49814	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:37 UTC	373	OUT	GET /media/id5e4qm4/losangeles.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:37 UTC	2110	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 11 Sep 2020 11:38:16 GMT Accept-Ranges: bytes ETag: "e276ea3088d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:49 GMT Connection: close Content-Length: 289763
2024-10-01 18:33:37 UTC	14274	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 09 06 07 08 07 06 09 08 08 08 0a 0a 09 0b 0e 17 0f 0e 0d 0d 0e 1c 14 15 11 17 22 1e 23 23 21 1e 20 20 25 2a 35 2d 25 27 32 28 20 20 2e 3f 2f 32 37 39 3c 3c 3c 24 2d 42 46 41 3a 46 35 3b 3c 39 ff db 00 43 01 0a 0a 0a 0e 0c 0e 1b 0f 0f 1b 39 26 20 26 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 ff c2 00 11 08 06 c0 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e2 fa be 01 40 8b 61 Data Ascii: JFIFC"##! %*5-%'2( .?/279<<<$-BFA:F5;<9C9& &99999999999999999999999999999999999999999999999999@@a
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 02 90 a0 80 b5 21 41 48 0a 00 05 20 05 89 54 10 a4 28 00 00 25 a1 16 a2 84 05 20 00 0a 00 01 40 02 90 a0 85 00 45 a4 28 20 05 01 62 04 28 14 00 29 21 40 a1 0b 14 52 00 08 12 80 01 14 80 14 54 11 48 52 01 12 ac 00 00 01 0a 40 00 0a 48 52 00 45 20 a4 00 2c 40 0a 22 00 0a 85 80 14 48 a4 08 0a 42 90 b0 00 01 0a 91 40 00 00 41 25 00 52 00 00 21 41 00 00 a4 00 00 0f 9b f4 f3 49 6d 85 09 62 ac 45 b4 19 44 ab 0a a2 29 40 05 00 a0 a1 41 32 0a 41 54 95 49 54 94 2d 05 85 01 94 01 42 aa c8 29 54 0a 0b 00 50 01 40 28 10 a1 62 90 a0 85 00 15 48 00 00 50 0a 00 28 10 14 2c 4a a2 14 10 a4 01 40 21 4a b1 29 56 02 14 15 21 41 0a 52 14 05 20 00 14 85 a8 04 29 16 c8 a2 8b 00 55 88 52 50 12 ac 08 0a 41 40 58 54 28 a4 00 14 08 50 aa 42 91 2a 92 02 90 50 00 00 29 01 48 0a 4a 91 Data Ascii: !AH T(% @E( b()!@RTHR@HRE ,@"HB@A%R!AImbED)@A2ATIT-B)TP@(bHP(,J@!J)V!AR )URPA@XT(PB*P)HJ
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 77 3a 16 a6 4b eb 70 df 9b db 18 58 2a fd 97 0f 47 e8 be 3d e2 53 9a bf 24 f5 ce 09 9c 79 ef 3b 3a b5 9d 15 a4 96 d8 a4 36 56 de 7a f4 38 f4 db 9b cb d7 3c de ae 3f a0 fe 4f eb fd 1f c5 f6 f5 7e b3 e4 63 eb f2 28 54 d1 6f c5 77 e9 c5 97 06 2e dd 4c ec ca 33 9a c7 59 db 26 33 7f a5 f1 e7 f1 9d 7a fe 7f d3 3a 52 a4 d4 b2 17 35 8c dc b5 5c fb 9a dd c7 5f 3d 8f 51 af 3d 17 3d 73 7c 57 18 27 26 b9 66 ba 75 3a b1 af 63 c9 d7 8f bc f6 7d 58 f9 fc cd 0c e1 65 cd df 2f b5 e2 eb c5 d6 7a 1c 7a 7d b7 c2 fb 7f 09 f7 fe 27 e9 79 c6 7a 82 02 05 21 49 17 91 af 3b 53 87 4f 0f 53 af 8e b6 6f 09 ac 25 ed ce 73 af 42 63 d7 bb 42 a4 00 a9 0a 40 01 12 90 a0 80 20 04 00 00 40 00 04 85 00 81 00 04 00 80 00 01 00 00 10 00 40 08 04 40 01 01 00 00 10 00 01 00 20 04 5e 4f 5f 31 4a Data Ascii: w:KpX*G=S$y;:6Vz8<?O~c(Tow.L3Y&3z:R5\_=Q==s\|W'&fu:c}Xe/zz}'yz!I;SOSo%sBcB@ @@@ ^O_1J
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 09 1e d4 f4 fa 1c ba 6b 3a f7 37 a6 b8 c1 31 4e 38 d5 be 7c 37 1c 09 91 ea 4e 9d f9 bc 7b c6 d9 af 43 8f 4c 37 9e 3b 3d 4f 3f a3 d5 e7 bf 99 f5 79 ad 98 74 e5 ad 74 9e e6 35 ea 1f 39 bc ef 31 8e 6e 98 c1 37 2d e7 bf 77 cb db ce d6 bc 8f 47 0d 5a ce ba d7 18 26 cc ea 59 8a e4 96 86 47 a4 d7 b7 9e 9f 43 9e 98 ae 8b 38 b9 ce bc 6b 5d b9 57 8d d3 9f 93 66 ec 4d 7d 33 82 e9 5e b6 bc f9 12 fd 65 9f 28 7b dc ae ee 97 1a e7 d7 3f 9b 8c da f7 e5 f7 f1 7e 6e df 25 c3 83 7c f7 69 a5 05 3a 6b 5c ba 4c 0d 86 ea e6 cd 86 76 6e ac cd 19 b9 98 1e 85 d7 ad c3 af cb 75 e1 89 91 91 bd 7b 36 d7 a9 ec 6a 6c ce f7 73 de 7d 67 0c d7 46 77 95 bd b2 fc f7 0e 7b b3 be 4b 9d b5 65 e5 de 36 71 eb a6 ce 9d 67 d0 bd 37 1d de 3d df 3f 6f cf fe a7 83 ab 3a d3 bc 6b b3 76 35 ea 79 bb 7a Data Ascii: k:71N8\|7N{CL7;=O?ytt591n7-wGZ&YGC8k]WfM}3^e({?~n%\|i:k\Lvnu{6jls}gFw{Ke6qg7=?o:kv5yz
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 69 34 d6 20 b1 b9 3a b2 dd 2e e3 33 46 9e 7d 60 53 13 23 3c b6 46 c3 23 13 32 1c 95 ab 4e 93 a6 36 9a 2b 8c c2 2c 6d 8e a3 33 9e de 3d 4c 4d d1 d2 61 2f 2e 8b 73 32 4a a8 da 6b ae 44 d2 62 0a 99 2f 41 b0 da bb e2 00 62 43 51 a6 a2 54 d9 5a 4d 31 08 b0 a6 c3 a6 33 5c 4b 5b 20 62 69 ad 26 32 55 a6 44 21 4a 53 59 53 a6 b3 97 98 d3 65 20 96 94 c8 de 67 19 1c e6 ba c4 c4 1b 63 af 37 da cd fa 39 be e6 bb 97 2c eb 5c 60 9c f6 72 57 35 9c f6 73 1e 5d c4 cb 76 35 b3 37 ed 7d ed ab 8e 58 6a 6a d3 18 d5 cb a4 c5 d0 e7 e4 c9 b7 87 6e 7e 3d f2 e9 7d 8e fc 77 6f 9f 9d 73 f3 d3 3c b1 d1 8e 9e c7 8b d1 d7 e6 eb 87 6c 6c bb cb 17 c7 f7 f8 f8 7d 3c 62 d9 ad 72 6a 8d bc f5 df cb af 55 b9 fa b8 63 d3 9c e7 bc a5 eb ac 78 f6 e2 e7 df 3e dc 33 eb c3 cf b8 e3 67 9f 33 0c 85 b9 Data Ascii: i4 :.3F}`S#<F#2N6+,m3=LMa/.s2JkDb/AbCQTZM13\K[ bi&2UD!JSYSe gc79,\`rW5s]v57}Xjjn~=}wos<ll}<brjUcx>3g3
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 9f 36 6c ab 27 0f 3f 2b 3b f1 e8 0f 8a 98 dc 66 e6 df e5 86 47 6e dd cb 93 db 60 63 be 40 c9 ab d7 8f 93 47 91 cd f2 21 3c 0f 1b ff 00 0a f0 ae b8 a4 b4 4b 3d 81 cd e2 f1 7f 7f 1b 1b fc dd ee e3 3d bc 85 f8 56 d7 2a af 0d cf fd 14 17 bc 66 7c ea db fc 36 70 c4 5c c9 4c a4 52 2c e6 8a 10 59 95 5b 5e 66 34 b9 18 98 5b 73 60 96 a9 df 23 c5 e2 73 91 2d 8f 16 57 c0 86 0e 32 4d 5c 89 54 b6 63 8f c7 41 83 eb 74 46 ce 5f 8a 98 de 83 42 d3 6d 7d 0a 09 f9 14 c7 54 ab d5 91 2e 1d 69 98 b1 25 f2 88 90 4d 53 2e 82 2f d7 53 14 f9 28 61 e0 4d ad af 95 f8 f0 03 c5 8c 61 af 3f 34 11 6a 5a 7d 6e 98 32 89 de 8f 24 9e 43 25 6f a5 8e 16 2a e2 e4 a8 55 a3 d0 10 e3 1c 60 2c a0 15 5d 7f 79 a3 7d 29 02 e2 e1 d5 c1 63 d5 86 31 7f f1 9a fd de 49 a8 98 9e 3a ff 00 11 8b e2 b3 bc 55 Data Ascii: 6l'?+;fGn`c@G!<K==Vf\|6p\LR,Y[^f4[s`#s-W2M\TcAtF_Bm}T.i%MS./S(aMa?4jZ}n2$C%oU`,]y})c1I:U
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 4d 84 10 6a 9d 6c 85 a1 05 48 82 0e 44 de dc 9f a8 82 00 46 80 d1 8d 35 c2 f0 dc 0f a2 f0 07 2d 1b f4 09 bd ef 7b de f7 bd ef 7b 83 e9 be dd b6 0a 9a e2 56 d8 e7 1c 50 b5 e9 83 88 87 b5 86 52 29 94 38 5e bd 4a 7a bd 5e af 58 ad 6b 64 2b 4d 7e ab eb c8 52 20 14 0a 17 af 5b 56 d2 5f b8 7a ee 6b 19 eb b2 bb 9b 28 e5 9c 86 b2 a3 49 77 6b 7d a6 3d 76 a1 0b 10 b3 06 62 63 70 38 12 a3 8c c5 72 51 c7 3b dc 1c 88 38 05 25 83 53 7d 81 30 c5 35 b2 dd f2 5b 24 e4 1b 9d f7 07 04 98 0a 18 61 e0 f2 39 30 c1 04 07 b6 e1 1a 00 4e be be 8c bd 3a 04 0a 20 60 e1 c5 9e df 62 3a 96 66 7b 4b 01 c7 6e db 0c af 5d 8b 75 d7 58 f3 a8 40 13 85 2b 63 59 63 16 ed b8 04 63 c0 80 ed 49 87 85 9d 75 c1 87 9d 98 91 78 de e1 95 cc 71 41 ba cc 87 72 e7 b4 31 48 8e bd 40 07 7b de e1 8d c0 1a Data Ascii: MjlHDF5-{{VPR)8^Jz^Xkd+M~R [V_zk(Iwk}=vbcp8rQ;8%S}05[$a90N: `b:f{Kn]uX@+cYccIuxqAr1H@{
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: f8 5c b0 cc c1 34 e2 98 e7 d2 da 68 d4 c2 f7 16 02 01 36 f0 5d e8 4f 72 1c d6 17 aa 15 69 18 07 ac 23 8a 61 a8 e3 4c 16 b2 6d e0 86 71 95 31 ad a6 ea 55 1f 55 ee 66 fc 8e ca ce cd 9c 99 95 a4 a6 65 74 cc f0 4c 6b 1d bb 2e e7 c9 61 a9 86 ed 30 e1 f1 48 b3 c4 f3 54 29 57 6b eb 52 da 30 7b 2b 0f 58 54 2c a2 29 b9 cf cc 23 80 e4 9d 8a ae da 34 c8 cc 6f 75 48 e1 5d b5 6b b2 6c c4 80 98 dc 5d 4f 77 21 8f aa 91 3f f0 25 94 68 65 a9 41 ef cd 70 5b 53 2a 69 75 a9 3b fc eb f7 4f f9 93 18 eb d2 79 ff 00 a9 0a 9d 7c 2c 52 a0 f6 16 6a 5d 53 37 f6 c8 7a c9 ca 27 29 ba 71 a0 d8 d1 75 8d f8 53 aa 1c ac 12 e5 eb 07 e1 5b 3a cc 12 0d c6 8b 6d 8f 18 7d bb 1b 9b db e0 b3 d2 c5 3c 55 67 51 c3 de f0 50 9a cc 55 3a 23 19 97 3b 27 38 1a 2a be 70 ea 5b 77 3f 67 30 e9 4f c6 11 d7 Data Ascii: \4h6]Ori#aLmq1UUfetLk.a0HT)WkR0{+XT,)#4ouH]kl]Ow!?%heAp[Siu;Oy\|,Rj]S7z')quS[:m}<UgQPU:#;'8p[w?g0O
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 21 ed 8c ff 00 54 4f 94 8b 49 dd b7 c9 51 a3 51 a2 8d 6d a7 35 84 cb 1b 67 dd ba 77 ac 11 c2 87 55 aa f6 3f 35 e1 30 d6 ab be 72 cd 8a eb 9d f0 a1 17 5f 35 bd 70 55 ce e1 85 4c e6 2f a4 e7 5a d0 80 c4 e2 77 7d a4 3c e3 1a 64 f6 f4 f9 29 ad 48 65 8d fd 7e 6b 7b 0f f3 e8 7e ec 0f d6 05 53 38 fe f8 aa 9d 54 f3 72 a9 95 bf dd b9 54 c8 7f ba e4 9f d6 c0 e0 d4 f9 7d bf 5a 38 27 67 6c 8b 6d 8a a4 29 0c d4 0b 84 fb cb 67 50 ec a8 06 ba 39 aa 99 5a 45 2a 43 29 b7 72 ae 33 01 91 be 0d 58 88 6f 5a 6f c9 56 39 a6 b3 be a9 ce c9 2f 71 9e f4 4e 6b 38 aa 84 32 28 bc fc 93 29 55 69 c4 e1 2a 3c 02 38 2c 21 a5 46 9d 2c 16 e1 10 fc cc ec dd 61 0e 16 8b 19 86 c8 f1 5e e3 27 b3 3c d6 12 bf 94 5c e6 37 77 2f 06 aa 0f a6 1b 5d 8f cb 49 bb b0 35 ba c2 b2 a3 18 70 07 66 da 8f 39 Data Ascii: !TOIQQm5gwU?50r_5pUL/Zw}<d)He~k{~S8TrT}Z8'glm)gP9ZEC)r3XoZoV9/qNk82()Ui<8,!F,a^'<\7w/]I5pf9
2024-10-01 18:33:37 UTC	16384	IN	Data Raw: 33 86 56 d8 c2 aa 78 35 56 c9 36 fa 2a d9 0e 9f 4f b9 df 1f 71 7e 83 90 a8 1d 11 d3 95 e6 4c c9 42 50 6b 29 9e f5 d5 15 88 af 9d 82 b1 68 58 aa 71 18 cf fc 2a ad 3a ef 05 c6 5a e3 78 54 71 14 a9 54 2e 76 67 b0 38 aa 54 28 54 78 cf 2d 6c 8b aa fa 8a 86 cb 16 e7 7e 31 55 72 6d 7c e0 ef 71 85 56 0f ad 7f 05 2d 05 b5 fc 4f 35 46 b3 c3 5c ec e0 eb 75 e6 15 ce 4a 6e 6d 0f 69 dd c9 b4 ea b4 50 12 d2 26 55 6c 53 2a d6 20 e5 6e 81 1a 8c aa e7 bc b6 a3 4f 82 7d 4a 86 93 ab 3c b0 f0 cc 9d 42 ac 3c 98 e1 27 54 d9 4d 43 bd 08 e2 aa b6 a6 e9 30 b1 1e f3 95 6e 6e 4e 80 0c a9 09 8d cd 5f db 3d 0d a4 1d 3c 56 f1 3d 33 e8 47 4c ab f4 4d 2d a6 66 c7 29 ba d2 13 ea bf 2b 51 0e 20 f3 52 b8 2b d9 47 41 94 4a d0 97 08 e9 00 2c a6 ea e5 c8 3d 8d 79 a9 35 38 b7 90 e9 6e 4d 0e 79 Data Ascii: 3Vx5V6Oq~LBPk)hXq:ZxTqT.vg8T(Tx-l~1Urm\|qV-O5F\uJnmiP&UlS* nO}J<B<'TMC0nnN_=<V=3GLM-f)+Q R+GAJ,=y58nMy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49817	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:38 UTC	684	OUT	GET /dist/img/play-btn.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616
2024-10-01 18:33:38 UTC	2113	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 07 Sep 2020 17:44:40 GMT Accept-Ranges: bytes ETag: "dec329903e85d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:50 GMT Connection: close Content-Length: 1925
2024-10-01 18:33:38 UTC	1925	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 32 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 36 20 31 32 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 35 36 2e 33 20 28 31 30 31 30 31 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="126px" height="126px" viewBox="0 0 126 126" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 56.3 (101010) - https://sketch.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49818	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:38 UTC	686	OUT	GET /dist/img/left-arrow.png HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616
2024-10-01 18:33:38 UTC	2107	IN	HTTP/1.1 200 OK Content-Type: image/png Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 07 Sep 2020 17:44:40 GMT Accept-Ranges: bytes ETag: "82620903e85d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:50 GMT Connection: close Content-Length: 306
2024-10-01 18:33:38 UTC	306	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 18 08 06 00 00 00 21 f0 77 54 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 ec 49 44 41 54 38 11 95 94 4d 0a c2 30 10 46 6b 77 d5 bd 52 3c 81 82 78 0c f1 22 8a 57 11 5d 78 0f 71 e1 5e d7 22 78 05 f1 e7 02 52 97 4a e3 2b 24 50 87 64 68 0a 1f a1 33 f3 66 86 24 93 24 69 f0 19 63 06 e8 80 f2 06 e1 49 42 60 17 5d cb b2 64 31 77 34 54 41 02 32 74 aa 00 27 fe 8f 41 08 67 0b 6d 5d b0 ad f4 c4 d6 d7 a0 a5 00 0a 80 b1 06 cc 05 f0 05 98 6a c0 84 80 8f 80 16 1a 30 02 28 04 b0 d2 80 1c e0 21 80 1d b6 d4 0b e1 e8 a0 8b 00 ce d8 b2 10 90 e2 dc 0b e0 86 ad e7 05 2a 23 ce 8d 00 5e d8 d4 53 f7 f7 1b 2c 61 1d 64 8d 6f cf b6 18 da 88 b6 5a 94 8a 71 5b ee b2 01 fa 0e 77 ed fc c1 15 30 ee 1a b9 4c 80 33 71 Data Ascii: PNGIHDR!wTsRGBIDAT8M0FkwR<x"W]xq^"xRJ+$Pdh3f$$icIB`]d1w4TA2t'Agm]j0(!*#^S,adoZq[w0L3q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49821	172.67.11.155	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:38 UTC	597	OUT	GET /config/quinnemanuel.com/config.json?page=%2F HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.quinnemanuel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:38 UTC	908	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:33:38 GMT Content-Type: application/json Content-Length: 153 Connection: close x-goog-generation: 1725428547500614 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 153 x-goog-hash: crc32c=cnZKbA== x-goog-hash: md5=IpBSs36O1jhW9p0fXUXmNA== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace x-guploader-uploadid: AD-8ljvarvYuhduZRtXNzVqWau3OaLI6wsis-2FbOQ-lhBWB9MC3GrwjpV3p5mm3sYMBT6W7TF0 expires: Wed, 01 Oct 2025 18:33:36 GMT Cache-Control: public, max-age=300, must-revalidate last-modified: Wed, 04 Sep 2024 05:42:27 GMT etag: "229052b37e8ed63856f69d1f5d45e634" Age: 2 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cbe8ad0b8477c9c-EWR
2024-10-01 18:33:38 UTC	153	IN	Data Raw: 7b 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 39 2d 30 34 54 30 35 3a 34 32 3a 32 37 2e 33 39 30 5a 22 2c 22 73 70 65 63 69 66 69 63 73 22 3a 22 22 2c 22 61 64 64 6f 6e 41 6e 61 6c 79 74 69 63 73 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 4d 65 74 61 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 49 6d 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 53 74 79 6c 65 73 22 3a 66 61 6c 73 65 2c 22 77 69 64 67 65 74 53 65 74 74 69 6e 67 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"time":"2024-09-04T05:42:27.390Z","specifics":"","addonAnalytics":false,"blockMeta":false,"blockImages":false,"blockStyles":false,"widgetSettings":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49823	142.250.185.110	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:39 UTC	1283	OUT	POST /g/collect?v=2&tid=G-MXPGK97YYN&gtm=45je49u0v9113890631za200&_p=1727807610603&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101671035~101686685~101747727&cid=655236864.1727807618&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AAAI&_s=1&sid=1727807617&sct=1&seg=0&dl=https%3A%2F%2Fwww.quinnemanuel.com%2F&dt=Quinn%20Emanuel%20Trial%20Lawyers%20-%20Quinn%20Emanuel%20Urquhart%20%26%20Sullivan%2C%20LLP&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=10412 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.quinnemanuel.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:39 UTC	851	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.quinnemanuel.com Date: Tue, 01 Oct 2024 18:33:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49822	74.125.133.155	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:39 UTC	844	OUT	POST /g/collect?v=2&tid=G-MXPGK97YYN&cid=655236864.1727807618&gtm=45je49u0v9113890631za200&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=101671035~101686685~101747727 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.quinnemanuel.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:39 UTC	851	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.quinnemanuel.com Date: Tue, 01 Oct 2024 18:33:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49832	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:43 UTC	560	OUT	GET /dist/img/graphic-map.png?v=8 HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:33:43 UTC	2259	IN	HTTP/1.1 200 OK Cache-Control: public, immutable, max-age=604800 Content-Type: image/png Expires: Tue, 08 Oct 2024 18:34:55 GMT Last-Modified: Tue, 18 Jun 2024 12:20:50 GMT Accept-Ranges: bytes ETag: "3091cff479c1da1:0" Vary: Accept-Encoding ImageProcessedBy: ImageProcessor/2.7.0.100 - ImageProcessor.Web/4.10.0.100 X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:54 GMT Connection: close Content-Length: 97998
2024-10-01 18:33:43 UTC	14125	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 90 00 00 03 cc 08 03 00 00 00 b3 07 d5 18 00 00 02 fd 50 4c 54 45 00 00 00 80 80 80 7c 7c 7c 7e 7e 7e e2 e2 e2 e4 e4 e4 82 82 82 75 75 75 83 83 83 e1 e1 e1 82 82 82 dc dc dc dd dd dd 82 82 82 7b 7b 7b e0 e0 e0 80 80 80 df df df 81 81 81 83 83 83 d4 d4 d4 d9 d9 d9 da da da 80 80 80 c5 c5 c5 7c 7c 7c d9 d9 d9 81 81 81 cb cb cb 71 71 71 d7 d7 d7 d2 d2 d2 7b 7b 7b 82 82 82 83 83 83 c7 c7 c7 d7 d7 d7 c2 c2 c2 c8 c8 c8 8d 8d 8d d6 d6 d6 be be be d1 d1 d1 7c 7c 7c 85 85 85 cd cd cd bd bd bd d0 d0 d0 85 85 85 82 82 82 86 86 86 8f 8f 8f c9 c9 c9 ad ad ad 82 82 82 d2 d2 d2 95 95 95 84 84 84 c1 c1 c1 bd bd bd df df df ce ce ce b2 b2 b2 b0 b0 b0 82 82 82 85 85 85 9c 9c 9c ba ba ba cf cf cf 82 82 82 a6 a6 a6 c5 Data Ascii: PNGIHDRPLTE\|\|\|~~~uuu{{{\|\|\|qqq{{{\|\|\|
2024-10-01 18:33:43 UTC	16384	IN	Data Raw: 32 48 47 1b 10 43 52 69 74 6e b6 55 13 cb ce 66 f4 4e 25 9c 86 c9 81 2b c2 84 98 3c 60 14 47 30 9c 01 33 e8 c2 ea ea cd 19 74 a5 04 82 8a 19 39 dc 50 2a 3e 90 39 68 c6 e7 5c 20 25 41 14 bb 28 ca 0a ea ea 46 48 01 77 bd 78 f1 1b 25 60 31 8d 67 56 e2 a6 dc 4e e7 9a a9 fb 08 ae 0e 9e ed 47 ac 92 0e 4d 2a 20 0d ae 5e 75 3a 71 f2 97 b8 58 31 f9 22 7f f5 55 22 de 6d 97 f7 82 88 2f bf f4 cd bc ad 30 33 90 cf b8 2c 8a 19 11 1a 4e 4b 04 72 e7 dc 17 d5 d5 93 83 14 8a 47 f2 8b b8 7b 45 02 81 e5 65 66 19 a4 bb e2 eb 38 3e 5a 5b ad 9e 8d 60 42 75 c7 56 8b e2 28 0b 9c 81 6c 92 7c 90 00 17 20 2f cf 36 a2 2b 26 10 dc d8 79 b0 9f b0 de e9 c7 3b e5 8d 7b a1 3a 7a 71 41 d0 e9 74 c1 c1 41 23 29 82 39 02 36 d3 18 d5 54 ba 9d 6b 0c 1b 39 fb be 23 a7 31 5c 99 58 83 ee 35 62 95 Data Ascii: 2HGCRitnUfN%+<`G03t9P>9h\ %A(FHwx%`1gVNGM ^u:qX1"U"m/03,NKrG{Eef8>Z[`BuV(l\| /6+&y;{:zqAtA#)96Tk9#1\X5b
2024-10-01 18:33:43 UTC	16384	IN	Data Raw: 4a 13 09 d0 81 98 44 af ca a5 c9 19 95 73 e9 89 d0 b7 57 1f db e6 66 59 06 0e c3 0c 2f 49 3f 98 91 98 98 76 2b 87 ac 55 34 dc b7 6f 63 24 1e 02 d0 cf 51 39 47 1e 8d e1 54 a5 31 88 c8 20 ab 27 2d d7 43 30 15 21 4e e1 a5 e5 61 38 40 bd 43 fb be 72 78 e0 2c 30 d5 a5 22 b4 f6 3e 45 22 3a 1f 41 ab 0a ae 5e 9b 50 28 6a 2c ee fc e2 66 5d 35 22 88 84 d4 a5 be 19 5d 72 c3 72 67 67 67 fe b7 9e 09 eb 7d b8 16 7c d9 cf 5b c9 2f 4a cc 41 47 09 5f 74 5a dd e0 c7 59 0c 42 74 84 64 74 72 5e 35 ad dc ab 0e 38 9b 02 82 d1 f7 b4 a6 26 26 8e ba 38 0c c1 e0 42 55 12 84 01 53 79 2a 06 42 69 d8 11 22 24 b0 c1 21 9e 77 2d df 46 fb 11 a3 c2 40 a9 e6 56 fa d6 13 cf 11 c9 22 51 e2 c3 87 8b 0d d9 d1 44 0e c4 ed 6e 65 a4 06 28 6a 99 f4 6a d7 aa e4 4c bd d6 4a 16 8a f9 2f 8f 81 50 b0 Data Ascii: JDsWfY/I?v+U4oc$Q9GT1 '-C0!Na8@Crx,0">E":A^P(j,f]5"]rrggg}\|[/JAG_tZYBtdtr^58&&8BUSy*Bi"$!w-F@V"QDne(jjLJ/P
2024-10-01 18:33:43 UTC	16384	IN	Data Raw: 03 0b a1 b9 34 ce f3 af 91 10 34 6f ab ed b3 a0 db 3a 6a 60 c4 ad 30 03 e6 11 bd 4d 85 b2 65 aa f2 a9 22 14 9a 55 bd c7 d3 28 08 2c d4 81 bc 59 5c 63 85 b4 da c1 0e 56 e6 0b 1b b2 f2 1d f6 0f 04 9a c5 53 81 ac 1f 89 8f 4f a7 56 36 ac 90 17 a9 4c 2b 02 be ea 24 96 9e 60 08 91 38 f6 26 93 2b 1c 20 61 26 47 07 eb 8c a3 a3 2d 89 55 91 49 51 ca 03 07 d1 9f cb 00 0b a0 f9 7e 7c 96 3f 8d 88 ae a3 ba 52 6e c0 cb ec 80 15 19 6e d7 5e 29 96 50 b0 1a 0c 87 e3 51 b6 3c 31 fd ea 5b 51 60 f2 8e cd 33 5b 1d ca 40 be e3 3e 10 8f 88 cc d1 0a 6b 12 eb dd 33 a3 c3 a5 35 11 42 ce 63 38 98 95 55 9d 31 3a da 0c 54 18 75 32 4b 78 f3 34 4b 83 6c 06 be e7 89 1b 86 14 71 8b cb 01 09 db c1 fd 15 e5 b4 26 85 73 8f 45 45 26 68 fa 73 91 33 19 85 3c a5 b0 00 97 c6 7d fc 9d 95 b5 6a c0 Data Ascii: 44o:j`0Me"U(,Y\cVSOV6L+$`8&+ a&G-UIQ~\|?Rnn^)PQ<1[Q`3[@>k35Bc8U1:Tu2Kx4Klq&sEE&hs3<}j
2024-10-01 18:33:43 UTC	16384	IN	Data Raw: a5 a5 2e 36 db 7f a8 a9 6b 89 f0 9a fd 75 c3 c2 81 58 20 d3 45 49 a5 2f 5c e3 3b a2 63 b3 ad 4d c1 44 a3 7a 79 64 1b e3 c6 97 96 2e f7 cf db 2b ef 4d 3b d6 49 4f 01 45 6d c7 de 76 32 16 83 f2 2e 69 79 20 ff f6 2b f1 5b ee 81 2c 76 7c c4 b2 f4 d1 12 85 a4 ef f2 7a c7 6b 21 15 b6 b6 6f c9 eb fd da 12 46 85 ea c6 f5 b0 6b 1f 0e 37 56 f0 92 24 85 c9 0f 6f 39 fa c8 6b 6c 96 3c 1e f8 fa 72 3f 61 59 57 09 36 27 03 44 f5 09 f4 f4 b4 fd aa ea 63 e1 42 16 32 63 af 6f c3 44 5f 9c 26 fb 84 dd 1b 67 f5 fb 79 29 22 78 1b d3 8e 75 d2 08 50 94 8c fe 51 94 91 d5 3a f2 46 41 97 b4 8c e2 40 46 fe 59 a0 0a ea dd 59 8b c5 ea ad 84 64 b5 a7 7b c7 fc 16 8b 45 42 a5 d6 ad 03 b0 6b fd b6 b7 84 e1 c6 86 0d 8d 6f 8e bd 0f 99 f5 4e 5a 78 29 0a 8f da f5 2c 44 a9 3f 41 aa b4 55 4d 8f Data Ascii: .6kuX EI/\;cMDzyd.+M;IOEmv2.iy +[,v\|zk!oFk7V$o9kl<r?aYW6'DcB2coD_&gy)"xuPQ:FA@FYYd{EBkoNZx),D?AUM
2024-10-01 18:33:43 UTC	16384	IN	Data Raw: cb b3 bd c8 b2 b2 e6 ee d1 79 6b 45 20 c6 66 f3 fb 4a 3f 41 f0 ff ab 33 9b 7b ac a2 4e f3 2a a5 0a c6 53 f6 26 46 b0 1b 2f f9 6c c7 05 67 fa 2c a7 27 ac 45 42 44 91 3d 0b 42 2f 62 92 7d c6 30 5c 9a 41 6e 7b 21 90 62 86 51 bc f6 a1 aa 2b 80 10 32 b6 ec 0c 32 a2 22 eb 8b 0c c2 15 cd 3b ad 76 64 b3 c4 e8 0e b5 37 37 b7 8a 21 e6 c2 93 2d 08 8f 34 8b ca 04 39 8c 8f bb db 8e 22 85 dd 1a d4 d9 95 75 ef b2 f0 3d 54 91 d3 13 d6 7e ca 88 22 f3 b3 f7 6b 21 a8 c2 8a e1 d2 0c f2 f2 62 8c 47 33 d4 b9 54 49 67 54 13 32 9e 6c 0d 72 2e 14 19 84 da 8d 1d c7 8f af 31 6f dc b8 54 eb 8f 71 0c 4e 10 41 72 b4 75 c7 45 43 1f 6f 0c 2a 99 3b e4 c6 ec 52 63 c9 f9 1e 47 17 d9 db e2 68 93 81 9f 6c a3 71 e2 41 2e b8 81 61 3c 73 1e 2d cb ad 17 98 13 22 05 12 0a 72 4e 14 59 a6 2e 58 fa Data Ascii: ykE fJ?A3{NS&F/lg,'EBD=B/b}0\An{!bQ+22";vd77!-49"u=T~"k!bG3TIgT2lr.1oTqNAruECo;RcGhlqA.a<s-"rNY.X
2024-10-01 18:33:43 UTC	1953	IN	Data Raw: f1 c8 45 64 30 80 40 a9 10 11 79 66 dc db 00 ba 0c ac 16 6d cc 0f a7 02 b0 4b de 98 cd 51 99 e4 01 7f fd cf 20 2f 47 ce 54 83 10 11 79 e7 ee 9b 04 d2 54 a2 7a b8 68 62 9a eb e7 20 db a4 15 42 e4 81 dd d1 bf 09 b2 95 50 00 b6 4d 14 22 22 0f 95 54 25 02 40 6b 59 b1 e8 61 9a 8b 2b d0 d3 3d 9e 57 93 27 6a d0 15 64 5f 4e 41 2e af 7c 1b 88 25 66 17 09 11 91 a7 1a 8e 26 da ea 44 8f 65 66 ed 24 85 5e 0a a6 08 91 07 b6 20 a3 49 5e 45 91 83 21 7b 67 1d 9d bd 82 3d 26 22 cf 15 af 38 29 5a 04 cd cb 91 14 fe a0 83 2b ee e8 07 7b f7 d2 12 55 18 06 70 fc 99 99 1c 75 ba 53 16 51 da 65 8a 28 51 69 cc 42 18 06 62 2c f1 d2 c2 48 c9 ae 74 c1 0a 09 c2 a8 4d 8b 20 21 17 35 04 61 24 2d 44 91 da 44 8b a6 85 2d 5c 04 22 a3 8b 71 5b 30 df e1 e1 d5 39 ee 1b 69 23 3a 31 e7 c0 9c 09 Data Ascii: Ed0@yfmKQ /GTyTzhb BPM""T%@kYa+=W'jd_NA.\|%f&Def$^ I^E!{g=&"8)Z+{UpuSQe(QiBb,HtM !5a$-DD-\"q[09i#:1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49831	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:43 UTC	550	OUT	GET /images/YouTube.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:33:43 UTC	2111	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Wed, 08 May 2019 04:21:19 GMT Accept-Ranges: bytes ETag: "8091e7c555d51:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:54 GMT Connection: close Content-Length: 1518
2024-10-01 18:33:43 UTC	1518	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 33 70 78 22 20 68 65 69 67 68 74 3d 22 31 37 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 33 20 31 37 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="23px" height="17px" viewBox="0 0 23 17" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 54.1 (76490) - https://sketchapp.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49835	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:43 UTC	558	OUT	GET /media/bccfwzuh/data-01.png HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:33:43 UTC	2110	IN	HTTP/1.1 200 OK Content-Type: image/png Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Tue, 26 Mar 2024 15:34:04 GMT Accept-Ranges: bytes ETag: "2a5ebb8937fda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:54 GMT Connection: close Content-Length: 667068
2024-10-01 18:33:43 UTC	14274	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 98 00 00 02 95 08 06 00 00 00 83 1a 51 54 00 00 20 00 49 44 41 54 78 9c ec bd 7b af 6d c9 71 1f 56 b5 f6 b9 8f b9 33 9c e1 70 46 14 49 93 14 45 4a 16 f5 20 25 eb 41 49 80 2c 41 11 6c 91 02 6d ca 06 64 18 01 94 38 8e 13 39 40 3e 84 f3 31 f2 85 f2 00 82 04 fe c3 b2 65 20 52 20 45 0f 86 a2 44 f1 35 9c b9 e7 ac ca 1f dd f5 ec ea 5e 6b ed bd cf 39 fb 9c bb 6a e6 9e bd f7 5a dd d5 d5 d5 bd ba ab 7f 5d 5d 0b ff a7 ff f9 93 04 3b 3d 38 42 44 20 22 40 44 b9 16 7f df 3d cd 27 e4 c5 fa 0f 00 80 ea bf 41 ea 13 eb 99 e6 47 2d 17 4b a2 45 1e 6d 0a 4c b2 0d ea 93 f0 40 44 49 6d e5 c4 2a 22 21 01 01 d5 72 30 e4 2d e5 95 be 50 ef 63 2d 1d 01 30 ca 81 00 56 02 44 8c 2c 81 66 02 40 92 7a b1 4c 6b db a0 e8 09 45 bf 56 Data Ascii: PNGIHDRQT IDATx{mqV3pFIEJ %AI,Almd89@>1e R ED5^k9jZ]];=8BD "@D='AG-KEmL@DIm*"!r0-Pc-0VD,f@zLkEV
2024-10-01 18:33:43 UTC	16384	IN	Data Raw: ee 79 99 98 7c eb 53 4f f6 e2 e1 66 77 db 00 7c 4c ac 65 ee 6b 41 9b e8 5e 9d c9 b3 95 e7 98 3a f1 4d ce c1 da 50 07 f2 eb dc 39 33 39 00 75 a7 9d 76 da e9 76 88 e7 23 7b 2c e6 56 ca 59 18 fb 87 1e 05 1d 6f da d4 73 41 80 84 f5 b2 ad a1 2d f3 e1 02 a7 15 65 e5 3c dc 1b d4 80 ab 18 bc 53 ec 25 b9 e3 53 b6 9b 8e fe 97 03 31 a2 0c f6 f8 99 01 72 16 41 03 b0 38 00 83 51 06 e4 a9 38 02 5b c7 44 08 76 e3 ad a4 b6 f6 64 d0 85 05 30 c0 03 07 76 f3 af d1 56 f4 c4 e1 c2 a0 82 0c 26 31 72 9d 31 02 45 b6 92 d4 1e d3 24 b5 1c a4 06 c6 6e 72 ad 23 f6 7a 11 dc 75 85 aa fb 70 02 d2 69 05 00 7c 6c 2a 22 68 3c 98 44 6e 72 f5 9e b0 82 73 dd 86 24 98 10 60 66 7b 9e 17 30 01 e4 e2 37 c6 39 19 59 4f dd 90 1b 6a 97 e6 6f fa 03 0f b2 01 68 a1 1b 6c 25 5d f7 95 0e c7 61 40 c4 a7 Data Ascii: y\|SOfw\|LekA^:MP939uvv#{,VYosA-e<S%S1rA8Q8[Dvd0vV&1r1E$nr#zupi\|l*"h<Dnrs$`f{079YOjohl%]a@
2024-10-01 18:33:43 UTC	16384	IN	Data Raw: 87 14 f6 70 85 01 9e 6a 33 be 3c c1 97 ff cb 2f d2 68 d7 f8 f7 ff d3 16 a3 ba 45 69 b9 c4 f9 e7 cf 10 18 1d 84 3f 0b f0 3d 91 68 3e 8a 9c 84 c6 66 95 9e dd 26 5b 9a 25 55 48 10 4e eb 34 cc 2a 77 9f dc 44 8d 9f a6 eb d4 18 ee b5 41 90 d8 6b 6c 32 d6 c9 a0 28 1e 9d 51 93 48 4c 67 72 6a 8c 70 4c 23 9b cf 20 c9 32 d9 6c 8e a7 9f 7e 9a a5 c5 05 64 09 32 a9 04 a7 cf 9c a4 33 68 b3 53 de 61 63 67 1d 39 22 91 99 4d 11 c9 84 98 eb ce 90 9b 4b 31 71 32 4f 6e 27 85 be a6 a0 e7 34 04 cf 63 7c 32 c1 b1 2b 33 54 2b 15 72 f7 93 34 36 db 0c 84 1e 4a 0a 16 2f 96 b8 78 e1 02 aa aa 23 bf 1e f0 9d ef bc c1 8d 27 d7 08 8f 29 c4 27 27 38 f9 ec 12 2d bf 4a 79 64 e0 85 47 88 09 0f 35 a7 e2 44 1c 92 b3 11 42 9e 84 6d db 24 c2 69 c6 7a 63 3c d8 7f 48 e9 cc 24 b9 63 59 ac 1d 13 2b Data Ascii: pj3</hEi?=h>f&[%UHN4*wDAkl2(QHLgrjpL# 2l~d23hSacg9"MK1q2On'4c\|2+3T+r46J/x#')''8-JydG5DBm$izc<H$cY+
2024-10-01 18:33:43 UTC	16384	IN	Data Raw: ae 84 14 4a dc bf fd 80 dd ed 7d 16 e6 aa 47 9e 39 be c7 8f 7f fc 2a 81 12 21 e7 60 30 18 62 88 69 04 41 a2 5c 2e 50 2a e5 a9 d5 ca 24 12 3a 92 24 12 45 21 9e ef d0 e9 37 88 c2 80 ed 83 03 3c d7 a5 d5 ea b0 78 72 8e a7 2f 9f 67 b1 5a c6 16 5d ca 85 22 44 11 71 18 22 4b 32 a2 28 11 47 50 2a 95 f8 fa 1f be 4c e9 74 9e 9c 91 a1 58 49 73 f6 fc 19 ea f3 65 24 57 c0 9d d9 f4 f7 db cc 57 ea a4 a4 14 43 bf cb cd b7 df 63 d2 9f e1 99 01 52 28 42 18 a3 08 02 86 aa f2 f4 95 ab 3c bc 7e 1f c1 8b 49 65 52 a4 32 19 54 45 a5 7d d8 22 17 65 39 75 ee 24 3b ec d3 6b 1d a0 44 2a f3 eb f3 7c e3 b9 af 63 06 2e 9b 8b 87 e8 aa 71 24 a2 a9 2a b2 28 12 fa 01 44 11 4f 5c b8 40 a5 52 41 d7 93 80 cc ed 5b 77 79 f3 cd 6b 74 87 1d 82 00 64 49 43 53 34 24 44 7a fd 3e 7b 07 07 b8 9e c7 Data Ascii: J}G9!`0biA\.P$:$E!7<xr/gZ]"Dq"K2(GPLtXIse$WWCcR(B<~IeR2TE}"e9u$;kD\|c.q$*(DO\@RA[wyktdICS4$Dz>{
2024-10-01 18:33:43 UTC	16384	IN	Data Raw: dc 38 7f 8d d0 50 e1 d5 2f bd 4b 38 94 40 91 75 40 c1 f5 24 04 49 26 5b cc b2 72 e1 2c cb d1 33 44 82 10 66 67 c0 d9 a5 25 b2 a9 2c 13 d3 c5 35 41 17 55 0a f1 0c f9 48 8a 23 5f 42 90 65 22 b1 38 4b cb 4b e8 91 37 f0 71 99 9f af 50 99 29 03 90 4a 67 98 d6 5c 52 d9 24 e5 95 2c be 60 b1 38 bf c4 c7 3e f1 14 c6 74 c0 5e f3 98 60 6c 23 08 3e f3 2b 73 dc 7e 78 8f e5 b9 32 cb 95 19 64 11 74 59 66 e1 cc 0c e5 4a 81 00 0f 84 00 59 13 88 c4 75 d2 e9 02 8b 73 0b bc f2 ad 37 c9 17 f3 a4 66 92 44 a3 31 16 17 96 c8 44 33 44 85 28 61 31 46 58 8e 22 23 53 a9 cc f2 cc c7 3e c2 c3 8d 35 44 3c 94 a8 c2 d0 1e 31 98 0c 50 54 19 51 f0 a9 54 8a 5c be 7c 81 ca 4c 85 f2 4c 85 7c b3 88 ad 58 c4 f2 11 3a 3b 1d 0e d7 0f 68 5f 6e 72 78 b8 8f 16 55 51 42 12 91 98 ce d9 b3 8b 04 8e 8d Data Ascii: 8P/K8@u@$I&[r,3Dfg%,5AUH#_Be"8KK7qP)Jg\R$,`8>t^`l#>+s~x2dtYfJYus7fD1D3D(a1FX"#S>5D<1PTQT\\|LL\|X:;h_nrxUQB
2024-10-01 18:33:43 UTC	16384	IN	Data Raw: 35 e8 4c 9d 76 2c 4c c5 62 e4 33 29 ca f9 2c b3 d5 29 94 a8 44 a3 3d 64 6d 6d 9b 83 c3 23 3e f5 f2 cb 94 32 19 b0 7c e2 a9 28 6e 60 a1 a8 02 a5 42 0e 31 aa d1 ef 18 f4 4f ba c4 d5 08 b5 62 85 4b e7 96 d0 c3 08 8a 20 50 cc e5 98 9c a8 12 8f aa 44 f5 04 c5 7c 85 74 2a 87 31 1c 50 ae 64 c8 de b8 45 ad 38 81 65 48 4c 14 8b a4 e2 71 44 39 44 8a 0a 84 b1 90 89 da 04 a5 5c 8e 01 3d 88 0a 2c 5e 39 0f 9b 36 12 70 d2 6a 20 84 ff 1f 7b 6f 12 24 49 9a 9e e7 3d be 7b 78 ec 6b 46 66 e4 be 55 d6 5e 5d d5 55 bd 4f 37 30 33 00 09 90 20 4c a2 04 88 32 83 0e 32 99 41 32 1d 74 91 c9 64 e4 81 67 5d a5 b3 28 4a 07 11 20 01 cc 0c 86 b3 f4 36 dd 3d bd d6 d6 b5 66 55 56 ee 19 19 fb be fb ee 3a e4 0c 38 32 82 c4 8c 61 06 d6 35 cc c7 2c 33 0f 19 e1 e1 9e ff 9f 11 fe bf ff f7 bd af Data Ascii: 5Lv,Lb3),)D=dmm#>2\|(n`B1ObK PD\|t*1PdE8eHLqD9D\=,^96pj {o$I={xkFfU^]UO703 L22A2tdg](J 6=fUV:82a5,3
2024-10-01 18:33:43 UTC	16384	IN	Data Raw: 82 88 d7 6b 1d bc c8 c3 1a db ac 3f 5c a7 b2 9a 61 7a 65 92 d6 69 07 d7 89 c0 8b 70 6d 8f b8 61 d0 6a 37 d8 3b d9 e5 ce da 6d bc d0 c5 90 e3 94 f2 05 92 89 24 c9 f4 e3 9b 69 41 92 28 e4 f3 4c 4d 4e e3 d9 55 24 41 a5 5d ef 30 91 a8 50 ab 36 68 36 5b d8 63 8f 98 aa a3 d9 10 d9 1e 52 24 32 e8 98 d4 4e da f8 8e 84 2a aa 04 82 40 71 a2 42 22 32 d8 5e db 47 8c 22 52 a9 24 d9 4c 06 5d 57 50 55 91 6c 36 ce f5 1b 97 39 69 1f f3 dd d7 bf 4b 60 08 8c 03 9b 7c 36 87 6e c8 0c ed 01 5d b3 83 e7 78 d8 be 8b a2 69 44 51 84 20 80 aa a8 5c b8 70 9e f7 ca b7 38 ad d6 90 24 89 4a a1 40 65 ae 48 56 4c 93 8c e9 98 a3 01 81 18 a2 26 62 e4 a7 4b a4 8d 02 86 16 67 e0 8d 50 13 0a 91 14 10 4b e8 a8 ba 42 3c 15 23 91 8c 31 bb 30 4d 36 93 25 9e d4 51 0d 89 b9 c5 19 5e 7d f9 45 16 2e Data Ascii: k?\azeipmaj7;m$iA(LMNU$A]0P6h6[cR$2N*@qB"2^G"R$L]WPUl69iK`\|6n]xiDQ \p8$J@eHVL&bKgPKB<#10M6%Q^}E.
2024-10-01 18:33:43 UTC	16384	IN	Data Raw: 13 04 10 49 02 3d 19 a3 6b 0e 18 7b 2e 4a 3c 4e 48 88 63 d9 f4 1a 5d 42 c7 63 69 76 9e 1b 57 af 62 8e c6 6c be d8 c2 75 4e 2b 9a b4 94 4e ba 90 61 ec 99 84 ba e0 c2 8d ab bc fd e5 2f 93 2b 96 d0 f5 18 a5 42 81 6a b9 44 3a 93 22 97 cf 50 9e 2e b1 b8 b2 c8 17 bf f8 25 ce af 9c 67 a6 3c 43 32 91 c4 88 c7 90 34 19 37 f2 99 9a 99 06 59 42 d2 15 2c cf c4 b6 87 20 07 a7 36 af 84 42 6e 2a 47 2c 65 10 4f e8 c8 aa c0 72 26 48 b2 c2 c2 e2 32 86 11 e3 f0 b0 4e 18 44 bc 72 eb 35 96 16 97 19 f4 87 84 7e 84 e7 04 6c 6e ec d0 ee 0e 70 83 90 b1 3b c2 48 a9 64 b2 31 5a 27 c7 ec bf d8 a1 90 2d b0 b8 b4 8c 2f 05 0c ed 01 46 5c 45 91 05 ab 2b 8b 5c be 74 81 58 cc 20 5b 4a a3 e7 14 5c 3c 46 13 8b 30 3c 5d 2b e9 aa ca 2b 37 6f 51 2a 95 38 ae 37 70 4c 8f 8f 3f b8 c7 b7 bf f5 0e Data Ascii: I=k{.J<NHc]BcivWbluN+Na/+BjD:"P.%g<C247YB, 6BnG,eOr&H2NDr5~lnp;Hd1Z'-/F\E+\tX [J\<F0<]++7oQ87pL?
2024-10-01 18:33:43 UTC	16384	IN	Data Raw: 46 44 21 f1 d0 45 4b 25 de 60 c4 fd bb f7 88 e2 84 c1 70 84 17 46 bc f8 b1 97 58 9a 5f e6 87 7f fa 03 92 38 22 08 22 8a c5 32 48 05 91 09 f2 4e e1 a4 32 5b 53 41 91 44 51 c0 b9 ab 57 58 39 bb 4c 7d a9 40 71 36 8f 97 06 68 8e 02 aa c4 30 75 fa fd 1e 9e 1e 21 a5 8a 14 27 cb 5a 88 0f 06 62 c4 49 2d 7d 06 49 2a b8 fe de 0d 36 f7 77 98 f8 2e 12 95 56 ab 83 d4 05 c7 fb 1d b4 d8 26 0b 42 be fd ad ef 70 79 7c 9e df b9 f4 db a0 27 18 86 4e a9 54 44 d7 74 54 55 fd f1 c5 b6 2c 2c cb 42 48 10 40 a2 a4 28 7a 42 ae 6c 33 33 37 c5 b7 bf fd 4d 6a f5 06 cf 7d e2 19 4a 85 22 6e 7f 4c 39 9f c7 54 74 64 2a c9 12 81 a1 19 88 54 50 2a 95 31 0c 83 34 89 d1 75 95 66 73 8e b9 b9 39 0e 9f b4 39 6c 1f b2 db 2a 72 d4 3b 66 ff f8 80 4b 17 ae 3c 6d 04 94 44 71 c4 64 32 61 3c 1a 63 9a Data Ascii: FD!EK%`pFX_8""2HN2[SADQWX9L}@q6h0u!'ZbI-}I6w.V&Bpy\|'NTDtTU,,BH@(zBl337Mj}J"nL9TtdTP14ufs99lr;fK<mDqd2a<c
2024-10-01 18:33:43 UTC	16384	IN	Data Raw: 3d 4a 45 8d 20 70 49 1d d0 90 31 0d 03 04 2c cc 2f 50 ce 57 88 92 84 e1 e9 90 24 4c 50 64 99 d1 64 44 b7 db 66 32 9a 25 09 2a 54 8b 65 fe de 6f fc 1a 63 77 84 ae ca 64 65 9d 7a a1 82 ef 85 78 89 20 45 22 6b 1a 94 f2 39 9c f1 88 93 d3 13 8e db 87 1c ed 1c f2 8d af 2d 92 cd e7 11 0a 18 9a ca 64 32 62 30 1a 10 12 20 ac a9 db 2a 4c 7c 1c 77 8c a2 4c 05 c4 d3 93 36 be eb 21 62 c8 e9 59 36 d6 66 d8 d8 58 e7 d3 1b 37 e9 f4 7b 1c 35 8f 89 22 1f 25 8e c9 6b 06 76 77 88 5a ca 60 68 2a b2 16 d3 1b b4 c8 65 1b e8 39 1d 3f 0a a9 d6 6a 48 42 50 ab 55 90 15 d0 33 06 92 a9 33 38 6a d2 eb f5 91 65 8d 62 be 42 ce c8 91 b3 72 44 42 d0 73 c6 7c f3 3b df 46 2f 1b 48 96 86 37 b6 51 10 c4 22 01 09 34 45 e3 f4 f8 94 5e a7 07 40 4a 42 94 26 dc 7d f4 98 d6 49 9f d1 c4 25 23 a9 54 Data Ascii: =JE pI1,/PW$LPddDf2%Teocwdezx E"k9-d2b0 L\|wL6!bY6fX7{5"%kvwZ`h*e9?jHBPU338jebBrDBs\|;F/H7Q"4E^@JB&}I%#T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49836	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:43 UTC	556	OUT	GET /images/facebook-icon.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:33:43 UTC	2111	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 31 Dec 2018 13:33:54 GMT Accept-Ranges: bytes ETag: "34f2f79da1d41:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:54 GMT Connection: close Content-Length: 2124
2024-10-01 18:33:43 UTC	2124	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 70 78 22 20 68 65 69 67 68 74 3d 22 32 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 35 32 2e 35 20 28 36 37 34 36 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49834	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:43 UTC	555	OUT	GET /images/twitter-icon.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:33:43 UTC	2112	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 31 Dec 2018 13:33:53 GMT Accept-Ranges: bytes ETag: "c8b3d478da1d41:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:54 GMT Connection: close Content-Length: 2589
2024-10-01 18:33:43 UTC	2589	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 35 70 78 22 20 68 65 69 67 68 74 3d 22 32 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 20 32 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 35 32 2e 35 20 28 36 37 34 36 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="25px" height="20px" viewBox="0 0 25 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49833	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:43 UTC	553	OUT	GET /images/insta-icon.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:33:43 UTC	2112	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 31 Dec 2018 13:33:51 GMT Accept-Ranges: bytes ETag: "8e949777da1d41:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:34:54 GMT Connection: close Content-Length: 5481
2024-10-01 18:33:43 UTC	5481	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 70 78 22 20 68 65 69 67 68 74 3d 22 32 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 35 32 2e 35 20 28 36 37 34 36 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49841	142.250.181.230	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:44 UTC	639	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:44 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 18:31:19 GMT Expires: Tue, 01 Oct 2024 18:46:19 GMT Cache-Control: public, max-age=900 Age: 145 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:44 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49837	142.250.184.194	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:44 UTC	661	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:44 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Tue, 01 Oct 2024 18:33:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49845	142.250.184.194	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:47 UTC	661	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:47 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Tue, 01 Oct 2024 18:33:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49850	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:49 UTC	556	OUT	GET /dist/img/search-icon.png HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:33:49 UTC	2108	IN	HTTP/1.1 200 OK Content-Type: image/png Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 11 Sep 2020 11:33:42 GMT Accept-Ranges: bytes ETag: "27b9bc662f88d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:01 GMT Connection: close Content-Length: 783
2024-10-01 18:33:49 UTC	783	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 14 a0 03 00 04 00 00 00 01 00 00 00 14 00 00 00 00 b2 dd f0 fd 00 00 02 79 49 44 41 54 38 11 ad 94 4d 68 13 51 10 c7 67 de 66 db 24 54 0f f6 22 05 f1 a3 88 8a 07 c1 93 d4 a6 7b 51 c8 a6 6a b1 d8 4d 11 0f 22 56 94 5e 44 c4 83 94 52 e8 d1 93 17 0f 1e 44 2f da 44 13 25 31 b1 14 0f dd 88 a0 a2 27 29 55 22 94 46 c8 a9 b7 6d d9 98 74 77 9c 17 48 89 d9 6c 0d e2 83 4d e6 cd fc df ef cd 9b 9d b7 08 7f 19 c3 a9 77 07 9c 9a 73 1d 11 a3 2c dd 47 40 88 80 25 Data Ascii: PNGIHDRsRGBDeXIfMM*iyIDAT8MhQgf$T"{QjM"V^DRD/D%1')U"FmtwHlMws,G@%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49852	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:49 UTC	556	OUT	GET /images/linkedin-icon.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:33:49 UTC	2112	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 31 Dec 2018 13:33:54 GMT Accept-Ranges: bytes ETag: "6b397979da1d41:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:01 GMT Connection: close Content-Length: 2476
2024-10-01 18:33:49 UTC	2476	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 70 78 22 20 68 65 69 67 68 74 3d 22 32 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 35 32 2e 35 20 28 36 37 34 36 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 52.5 (67469) - http://www.bohemiancoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49853	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:49 UTC	553	OUT	GET /images/footerlogo.png HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:33:49 UTC	2109	IN	HTTP/1.1 200 OK Content-Type: image/png Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Tue, 01 Oct 2019 18:11:50 GMT Accept-Ranges: bytes ETag: "7dce61b28378d51:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:01 GMT Connection: close Content-Length: 8673
2024-10-01 18:33:49 UTC	8673	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8c 00 00 00 16 08 06 00 00 00 d3 b3 ab db 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 21 9b 49 44 41 54 78 01 ed 9d 79 6c de 67 7d c0 df d7 8e af 38 f7 7d 3a 49 93 f4 20 6d d3 00 3d 53 4a bb 55 43 65 dd d6 a1 0d ba 96 32 41 ff 18 ec d0 fe 40 13 d2 34 4d 48 93 d0 34 06 4c 1b 1d 12 1a 50 8e 42 25 2e 4d 6d 29 83 8e 51 28 6d 69 e9 41 8e d2 dc 8e ed dc 76 e2 24 76 9c d8 8e df 7d 3e cf f3 3e 7e 7f af af da ae ed 34 28 5f eb fb 3e cf ef 39 bf cf f7 7a 8e df e1 5c 6e 0a a1 50 28 6c 2a f4 15 7e 01 36 81 85 22 6e 27 f6 01 70 e1 14 92 72 a9 ab 49 e4 00 b2 9c 5e 38 5f f8 4f e4 fb d3 8c 9c bb 48 ff 27 f0 fd 93 d8 f5 05 69 9a 31 5d 0b 3e c0 58 7f 93 19 ef 36 78 f0 15 d2 a7 5c af e9 b3 0a dc 00 de 08 de 5e c4 5b Data Ascii: PNGIHDRsRGB!IDATxylg}8}:I m=SJUCe2A@4MH4LPB%.Mm)Q(miAv$v}>>~4(_>9z\nP(l*~6"n'prI^8_OH'i1]>X6x\^[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49855	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:49 UTC	575	OUT	GET /dist/img/image-johnquinn-combined-hover.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:33:49 UTC	2111	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 18 Feb 2022 04:25:32 GMT Accept-Ranges: bytes ETag: "c2cd3c917f24d81:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:01 GMT Connection: close Content-Length: 29731
2024-10-01 18:33:49 UTC	14273	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 15 0e 0c 0b 0b 0c 19 12 13 0f 15 1e 1b 20 1f 1e 1b 1d 1d 21 25 30 29 21 23 2d 24 1d 1d 2a 39 2a 2d 31 33 36 36 36 20 28 3b 3f 3a 34 3e 30 35 36 33 ff db 00 43 01 09 09 09 0c 0b 0c 18 0e 0e 18 33 22 1d 22 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 ff c0 00 11 08 02 80 04 74 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 37 10 01 00 02 02 02 00 05 02 05 04 02 02 01 04 03 01 00 01 02 03 11 04 12 05 13 21 31 51 14 32 22 33 41 52 61 06 23 42 53 54 71 15 62 81 Data Ascii: JFIFC !%0)!#-$9-13666 (;?:4>0563C3""33333333333333333333333333333333333333333333333333t7!1Q2"3ARa#BSTqb
2024-10-01 18:33:49 UTC	15458	IN	Data Raw: e0 62 ae af 87 d6 24 62 38 71 70 e3 f6 8b 1b 5f 0f 4d 45 23 5a 65 ac c1 35 8b c4 ee 11 53 4e 3f 61 11 9b 14 f4 9d c7 b3 78 cf ac 70 cc 34 e4 f4 f0 5b fb 15 73 d6 b3 19 e7 89 65 a8 c6 95 eb 28 df 96 d1 3e bb 47 4c 6f 1c d8 c5 1f 89 71 ac 7b bf d2 5c c8 cb e3 38 e6 ae be 73 8c 7f 4f c7 e8 db 1e 63 10 c0 6c 53 d8 83 62 8d 81 80 d8 0d 80 d8 0d 82 65 06 73 b1 50 04 00 06 80 80 01 68 e8 40 c2 f1 3b 06 95 89 d1 d0 e4 e8 5a 3a 14 c1 d1 cb 9e 9b a4 ae 51 f2 7e 2d 8a 6b 79 93 6a 32 e0 55 3a 3d 88 8f 43 a3 6c 71 e8 0c 39 7e 94 95 57 c9 f3 bf 36 59 57 0c 82 24 1e 87 85 fd e3 3a fa 5c 1f 6a 8e ba 48 8d ea 0d 05 31 00 a0 42 04 ed 44 81 01 02 41 33 20 90 48 3f 37 56 00 80 50 05 28 21 14 80 01 80 84 17 46 f1 95 a8 60 00 00 00 00 15 00 a0 54 02 a2 62 01 71 68 14 e2 d0 0a Data Ascii: b$b8qp_ME#Ze5SN?axp4[se(>GLoq{\8sOclSbesPh@;Z:Q~-kyj2U:=Clq9~W6YW$:\jH1BDA3 H?7VP(!F`Tbqh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49849	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:49 UTC	558	OUT	GET /dist/img/homepage-play.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:33:49 UTC	2113	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 30 Apr 2021 09:13:53 GMT Accept-Ranges: bytes ETag: "801ec723a13dd71:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:01 GMT Connection: close Content-Length: 1810
2024-10-01 18:33:49 UTC	1810	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 30 70 78 22 20 68 65 69 67 68 74 3d 22 32 30 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 30 20 32 30 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 38 41 32 30 32 45 36 35 2d 44 38 41 34 2d 34 37 34 41 2d 39 42 37 39 2d 42 41 39 45 41 31 30 31 42 34 34 44 40 31 78 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="200px" height="200px" viewBox="0 0 200 200" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>8A202E65-D8A4-474A-9B79-BA9EA101B44D@1x</title> <def

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49851	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:49 UTC	555	OUT	GET /dist/img/left-arrow.png HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:33:49 UTC	2107	IN	HTTP/1.1 200 OK Content-Type: image/png Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 07 Sep 2020 17:44:40 GMT Accept-Ranges: bytes ETag: "82620903e85d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:01 GMT Connection: close Content-Length: 306
2024-10-01 18:33:49 UTC	306	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 18 08 06 00 00 00 21 f0 77 54 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 ec 49 44 41 54 38 11 95 94 4d 0a c2 30 10 46 6b 77 d5 bd 52 3c 81 82 78 0c f1 22 8a 57 11 5d 78 0f 71 e1 5e d7 22 78 05 f1 e7 02 52 97 4a e3 2b 24 50 87 64 68 0a 1f a1 33 f3 66 86 24 93 24 69 f0 19 63 06 e8 80 f2 06 e1 49 42 60 17 5d cb b2 64 31 77 34 54 41 02 32 74 aa 00 27 fe 8f 41 08 67 0b 6d 5d b0 ad f4 c4 d6 d7 a0 a5 00 0a 80 b1 06 cc 05 f0 05 98 6a c0 84 80 8f 80 16 1a 30 02 28 04 b0 d2 80 1c e0 21 80 1d b6 d4 0b e1 e8 a0 8b 00 ce d8 b2 10 90 e2 dc 0b e0 86 ad e7 05 2a 23 ce 8d 00 5e d8 d4 53 f7 f7 1b 2c 61 1d 64 8d 6f cf b6 18 da 88 b6 5a 94 8a 71 5b ee b2 01 fa 0e 77 ed fc c1 15 30 ee 1a b9 4c 80 33 71 Data Ascii: PNGIHDR!wTsRGBIDAT8M0FkwR<x"W]xq^"xRJ+$Pdh3f$$icIB`]d1w4TA2t'Agm]j0(!*#^S,adoZq[w0L3q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49863	104.22.0.204	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:49 UTC	383	OUT	GET /config/quinnemanuel.com/config.json?page=%2F HTTP/1.1 Host: cdn.acsbapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:49 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:33:49 GMT Content-Type: application/json Content-Length: 153 Connection: close x-goog-generation: 1725428547500614 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 153 x-goog-hash: crc32c=cnZKbA== x-goog-hash: md5=IpBSs36O1jhW9p0fXUXmNA== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: * x-guploader-uploadid: AD-8ljsxJNuucJ3s6oeamawLAWXXSYAIL52haWFax8vSV2Hi9G8I3fViJkfmCTTVgFeg9iTCONg expires: Wed, 01 Oct 2025 18:33:49 GMT Cache-Control: public, max-age=300, must-revalidate last-modified: Wed, 04 Sep 2024 05:42:27 GMT etag: "229052b37e8ed63856f69d1f5d45e634" CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cbe8b154ed2439d-EWR
2024-10-01 18:33:49 UTC	153	IN	Data Raw: 7b 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 39 2d 30 34 54 30 35 3a 34 32 3a 32 37 2e 33 39 30 5a 22 2c 22 73 70 65 63 69 66 69 63 73 22 3a 22 22 2c 22 61 64 64 6f 6e 41 6e 61 6c 79 74 69 63 73 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 4d 65 74 61 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 49 6d 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 62 6c 6f 63 6b 53 74 79 6c 65 73 22 3a 66 61 6c 73 65 2c 22 77 69 64 67 65 74 53 65 74 74 69 6e 67 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"time":"2024-09-04T05:42:27.390Z","specifics":"","addonAnalytics":false,"blockMeta":false,"blockImages":false,"blockStyles":false,"widgetSettings":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49847	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:49 UTC	802	OUT	GET /s/player/d9418494/player_ias.vflset/en_US/remote.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:33:49 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 120870 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 18:45:20 GMT Expires: Tue, 30 Sep 2025 18:45:20 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 30 Sep 2024 04:15:05 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 85709 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:49 UTC	702	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 37 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 7a 6b 28 61 2c 22 7a 78 22 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 31 34 37 34 38 33 36 34 38 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2b 4d 61 74 68 2e 61 62 73 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 31 34 37 34 38 33 36 34 38 29 5e 67 2e 59 61 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 66 37 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 7c 7c 28 63 3d 5b 53 74 72 69 6e 67 28 63 29 5d 29 3b 0a Data Ascii: (function(g){var window=this;'use strict';var e7=function(a){g.zk(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.Ya()).toString(36));return a},f7=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 20 65 3d 67 2e 4c 70 2e 70 72 6f 74 6f 74 79 70 65 2e 42 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 21 30 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 66 3d 3d 22 53 74 6f 72 61 67 65 3a 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 22 29 72 65 74 75 72 6e 3b 74 68 72 6f 77 20 66 3b 7d 65 3d 3d 3d 76 6f 69 64 20 30 3f 63 2e 70 75 73 68 28 64 29 3a 67 2e 69 6d 61 28 65 29 26 26 63 2e 70 75 73 68 28 64 29 7d 2c 61 29 3b 0a 72 65 74 75 72 6e 20 63 7d 2c 4a 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 49 72 62 28 61 2c 62 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 67 2e 4c 70 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 2e 63 61 6c 6c 28 74 68 69 73 2c 63 29 7d 2c 61 29 7d 2c 4b 72 62 3d Data Ascii: e=g.Lp.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.ima(e)&&c.push(d)},a);return c},Jrb=function(a,b){Irb(a,b).forEach(function(c){g.Lp.prototype.remove.call(this,c)},a)},Krb=
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 68 2c 64 3d 30 3b 64 3c 63 3b 64 2b 2b 29 62 2e 70 75 73 68 28 61 5b 64 5d 29 3b 72 65 74 75 72 6e 20 62 7d 72 65 74 75 72 6e 20 67 2e 43 67 28 61 29 7d 2c 51 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 44 6f 26 26 74 79 70 65 6f 66 20 61 2e 44 6f 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 20 61 2e 44 6f 28 29 3b 0a 69 66 28 21 61 2e 5a 6d 7c 7c 74 79 70 65 6f 66 20 61 2e 5a 6d 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 69 66 28 74 79 70 65 6f 66 20 4d 61 70 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 2e 6b 65 79 73 28 29 29 3b 69 66 28 21 28 74 79 70 65 6f 66 20 53 65 74 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 Data Ascii: h,d=0;d<c;d++)b.push(a[d]);return b}return g.Cg(a)},Qrb=function(a){if(a.Do&&typeof a.Do=="function")return a.Do();if(!a.Zm\|\|typeof a.Zm!="function"){if(typeof Map!=="undefined"&&a instanceof Map)return Array.from(a.keys());if(!(typeof Set!=="undefined"&
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 76 61 72 20 61 3d 68 37 28 29 3b 0a 74 68 69 73 2e 6a 3d 61 3b 61 2e 71 6b 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 65 72 72 6f 72 22 2c 67 2e 6c 62 28 22 63 68 61 6e 6e 65 6c 5f 74 79 70 65 22 29 29 7d 2c 24 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6a 2e 44 6d 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 65 72 72 6f 72 22 2c 62 29 7d 2c 61 73 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 68 37 28 29 3b 0a 74 68 69 73 2e 6a 3d 61 3b 61 2e 71 6b 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 Data Ascii: var a=h7();this.j=a;a.qk("/client_streamz/youtube/living_room/mdx/channel/error",g.lb("channel_type"))},$rb=function(a,b){a.j.Dm("/client_streamz/youtube/living_room/mdx/channel/error",b)},asb=function(){var a=h7();this.j=a;a.qk("/client_streamz/youtube
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 6d 6f 64 65 6c 3d 74 68 69 73 2e 62 72 61 6e 64 3d 22 22 3b 74 68 69 73 2e 79 65 61 72 3d 30 3b 74 68 69 73 2e 63 68 69 70 73 65 74 3d 74 68 69 73 2e 6f 73 56 65 72 73 69 6f 6e 3d 74 68 69 73 2e 6f 73 3d 22 22 3b 74 68 69 73 2e 6d 64 78 44 69 61 6c 53 65 72 76 65 72 54 79 70 65 3d 22 4d 44 58 5f 44 49 41 4c 5f 53 45 52 56 45 52 5f 54 59 50 45 5f 55 4e 4b 4e 4f 57 4e 22 3b 61 26 26 28 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 63 6c 69 65 6e 74 4e 61 6d 65 3d 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 3f 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 22 55 4e 4b 4e 4f 57 4e 5f 49 4e 54 45 52 46 41 43 45 22 2c 0a 74 68 69 73 2e 61 70 70 3d 61 2e Data Ascii: model=this.brand="";this.year=0;this.chipset=this.osVersion=this.os="";this.mdxDialServerType="MDX_DIAL_SERVER_TYPE_UNKNOWN";a&&(this.id=a.id\|\|a.name,this.name=a.name,this.clientName=a.clientName?a.clientName.toUpperCase():"UNKNOWN_INTERFACE",this.app=a.
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 2c 62 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 63 6c 65 61 72 28 29 3b 0a 62 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 61 64 64 28 63 29 7d 29 7d 2c 6c 37 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 7c 7c 7b 7d 3b 0a 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 73 63 72 65 65 6e 49 64 7c 7c 22 22 3b 74 68 69 73 2e 74 6f 6b 65 6e 3d 61 2e 74 6f 6b 65 6e 7c 7c 61 2e 6c 6f 75 6e 67 65 54 6f 6b 65 6e 7c 7c 22 22 3b 74 68 69 73 2e 75 75 69 64 3d 61 2e 75 75 69 64 7c 7c 61 2e 64 69 61 6c 49 64 7c 7c 22 22 3b 74 68 69 73 2e 69 64 54 79 70 65 3d 61 2e 73 63 72 65 65 6e 49 64 54 79 70 65 7c 7c Data Ascii: ,b){a.experiments.clear();b.split(",").forEach(function(c){a.experiments.add(c)})},l7=function(a){a=a\|\|{};this.name=a.name\|\|"";this.id=a.id\|\|a.screenId\|\|"";this.token=a.token\|\|a.loungeToken\|\|"";this.uuid=a.uuid\|\|a.dialId\|\|"";this.idType=a.screenIdType\|\|
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 74 75 72 6e 20 67 2e 45 6c 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 30 3f 64 3a 64 2e 73 75 62 73 74 72 69 6e 67 28 63 2e 6c 65 6e 67 74 68 29 7d 29 7d 2c 73 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 4f 73 28 22 79 74 2d 72 65 6d 6f 74 65 2d 63 6f 6e 6e 65 63 74 65 64 2d 64 65 76 69 63 65 73 22 2c 61 2c 38 36 34 30 30 29 7d 2c 71 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 73 62 29 72 65 74 75 72 6e 20 74 73 62 3b 0a 76 61 72 20 61 3d 67 2e 50 73 28 22 79 74 2d 72 65 6d 6f 74 65 2d 64 65 76 69 63 65 2d 69 64 22 29 3b 61 7c 7c 28 61 3d 6e 73 62 28 29 2c 67 2e 4f 73 28 22 79 74 2d 72 65 6d 6f 74 65 2d 64 65 76 69 63 65 2d 69 64 22 2c 61 2c 33 31 35 33 36 45 33 29 29 3b 66 6f 72 28 76 61 72 20 62 3d 70 Data Ascii: turn g.El(a,function(d,e){return e==0?d:d.substring(c.length)})},ssb=function(a){g.Os("yt-remote-connected-devices",a,86400)},q7=function(){if(tsb)return tsb;var a=g.Ps("yt-remote-device-id");a\|\|(a=nsb(),g.Os("yt-remote-device-id",a,31536E3));for(var b=p
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 43 68 72 6f 6d 65 5c 2f 28 5b 30 2d 39 5d 2b 29 2f 29 3b 0a 72 65 74 75 72 6e 20 61 3f 70 61 72 73 65 49 6e 74 28 61 5b 31 5d 2c 31 30 29 3a 30 7d 2c 44 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 26 26 28 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 22 3f 22 2b 61 29 21 3d 2d 31 7c 7c 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 22 26 22 2b 61 29 21 3d 2d 31 29 7d 2c 45 73 62 3d 66 75 6e 63 74 69 6f Data Ascii: unction(){var a=window.navigator.userAgent.match(/Chrome\/([0-9]+)/);return a?parseInt(a[1],10):0},Dsb=function(a){return!!document.currentScript&&(document.currentScript.src.indexOf("?"+a)!=-1\|\|document.currentScript.src.indexOf("&"+a)!=-1)},Esb=functio
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 74 68 69 73 2e 41 35 2c 74 68 69 73 29 3b 74 68 69 73 2e 6a 3d 21 31 3b 74 68 69 73 2e 42 3d 30 3b 74 68 69 73 2e 43 3d 74 68 69 73 2e 75 64 3d 6e 75 6c 6c 3b 74 68 69 73 2e 44 3d 5b 5d 7d 2c 78 37 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 2e 4f 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 74 68 69 73 2e 44 3d 63 21 3d 6e 75 6c 6c 3f 61 2e 62 69 6e 64 28 63 29 3a 61 3b 74 68 69 73 2e 64 6a 3d 62 3b 74 68 69 73 2e 43 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6a 3d 21 31 3b 74 68 69 73 2e 42 3d 30 3b 74 68 69 73 2e 75 64 3d 6e 75 6c 6c 7d 2c 4f 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 75 64 3d 67 2e 43 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 75 64 3d 6e 75 6c 6c 3b 0a 61 2e 6a 26 26 21 61 2e 42 26 26 28 61 2e 6a 3d 21 31 2c 4f 73 62 28 61 29 29 Data Ascii: this.A5,this);this.j=!1;this.B=0;this.C=this.ud=null;this.D=[]},x7=function(a,b,c){g.O.call(this);this.D=c!=null?a.bind(c):a;this.dj=b;this.C=null;this.j=!1;this.B=0;this.ud=null},Osb=function(a){a.ud=g.Ci(function(){a.ud=null;a.j&&!a.B&&(a.j=!1,Osb(a))
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 3b 0a 45 37 28 61 29 3b 61 2e 58 61 3d 61 2e 5a 2e 63 6c 6f 6e 65 28 29 3b 66 37 28 61 2e 58 61 2c 22 74 22 2c 61 2e 4f 62 29 3b 61 2e 4e 3d 30 3b 76 61 72 20 63 3d 61 2e 43 2e 4f 61 3b 61 2e 42 3d 6e 65 77 20 57 73 62 3b 61 2e 6a 3d 5a 73 62 28 61 2e 43 2c 63 3f 62 3a 6e 75 6c 6c 2c 21 61 2e 57 29 3b 61 2e 56 61 3e 30 26 26 28 61 2e 54 61 3d 6e 65 77 20 78 37 28 28 30 2c 67 2e 57 61 29 28 61 2e 42 56 2c 61 2c 61 2e 6a 29 2c 61 2e 56 61 29 29 3b 61 2e 72 62 2e 6c 69 73 74 65 6e 28 61 2e 6a 2c 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 61 2e 43 35 29 3b 62 3d 61 2e 4c 61 3f 67 2e 4b 67 28 61 2e 4c 61 29 3a 7b 7d 3b 61 2e 57 3f 28 61 2e 43 61 7c 7c 28 61 2e 43 61 3d 22 50 4f 53 54 22 29 2c 62 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 3d Data Ascii: ;E7(a);a.Xa=a.Z.clone();f7(a.Xa,"t",a.Ob);a.N=0;var c=a.C.Oa;a.B=new Wsb;a.j=Zsb(a.C,c?b:null,!a.W);a.Va>0&&(a.Ta=new x7((0,g.Wa)(a.BV,a,a.j),a.Va));a.rb.listen(a.j,"readystatechange",a.C5);b=a.La?g.Kg(a.La):{};a.W?(a.Ca\|\|(a.Ca="POST"),b["Content-Type"]=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49859	104.22.1.204	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:49 UTC	358	OUT	GET /apps/app/dist/js/app.js HTTP/1.1 Host: acsbapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:49 UTC	840	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:33:49 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 321373 Connection: close x-goog-generation: 1727614053280840 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 321373 x-goog-hash: crc32c=zXpOew== x-goog-hash: md5=CHQoFCcOtBnxgImpzaPKGg== x-goog-storage-class: STANDARD access-control-allow-origin: * access-control-expose-headers: * x-guploader-uploadid: AD-8ljvntgdaQxcL2Zwep_rjZf2CyRTS7k6FsWdzLFsJ7jScjHJZaFHT1qd0lu4NTtHofO2k5tM expires: Wed, 01 Oct 2025 18:33:49 GMT Cache-Control: public, max-age=300, must-revalidate last-modified: Sun, 29 Sep 2024 12:47:33 GMT etag: "08742814270eb419f18089a9cda3ca1a" CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cbe8b154c0242c8-EWR
2024-10-01 18:33:49 UTC	529	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 7b 72 65 74 65 6e 74 69 6f 6e 50 65 72 69 6f 64 44 61 79 73 3a 65 2c 74 69 6d 65 73 74 61 6d 70 3a 74 2c 64 61 79 73 42 65 66 6f 72 65 4e 6f 74 69 63 65 3a 69 2c 70 72 6f 64 75 63 74 4e 61 6d 65 3a 6e 2c 76 65 72 73 69 6f 6e 3a 73 2c 69 67 6e 6f 72 65 50 61 74 74 65 72 6e 3a 61 7d 29 7b 69 66 28 61 2e 73 6f 6d 65 28 28 65 3d 3e 52 65 67 45 78 70 28 65 29 2e 74 65 73 74 28 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 29 29 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 28 2d 31 2a 28 44 61 74 65 2e 6e 6f 77 28 29 2d 74 2d 32 34 2a 65 2a 36 30 2a 36 30 2a 31 65 33 29 2f 38 36 34 65 35 29 2e 74 6f 46 69 78 65 64 28 32 29 3b 72 3c 3d 69 26 26 72 3e 3d 30 3f 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e Data Ascii: !function({retentionPeriodDays:e,timestamp:t,daysBeforeNotice:i,productName:n,version:s,ignorePattern:a}){if(a.some((e=>RegExp(e).test(document.currentScript.src))))return;const r=(-1(Date.now()-t-24e6060*1e3)/864e5).toFixed(2);r<=i&&r>=0?console.warn
2024-10-01 18:33:49 UTC	1369	IN	Data Raw: 61 74 74 65 72 6e 3a 5b 22 2f 5e 28 3f 21 2e 2a 76 5c 5c 64 2b 5c 5c 2e 5c 5c 64 2b 5c 5c 2e 5c 5c 64 2b 29 2e 2a 2f 22 5d 7d 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 33 30 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 61 72 20 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 76 61 6c 75 65 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 2c 69 3d 74 26 26 65 5b 74 5d 2c 6e 3d 30 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 29 3b 69 66 28 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 Data Ascii: attern:["/^(?!.v\\d+\\.\\d+\\.\\d+)./"]}),(()=>{"use strict";var e={301:function(e,t,i){var n=this&&this.__values\|\|function(e){var t="function"==typeof Symbol&&Symbol.iterator,i=t&&e[t],n=0;if(i)return i.call(e);if(e&&"number"==typeof e.length)return{ne
2024-10-01 18:33:49 UTC	1369	IN	Data Raw: 3d 64 2e 6e 65 78 74 28 29 3b 21 75 2e 64 6f 6e 65 3b 75 3d 64 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 68 3d 75 2e 76 61 6c 75 65 3b 65 2e 70 75 72 69 66 79 49 66 72 61 6d 65 57 69 6e 64 6f 77 28 68 29 7d 7d 63 61 74 63 68 28 65 29 7b 61 3d 7b 65 72 72 6f 72 3a 65 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 75 26 26 21 75 2e 64 6f 6e 65 26 26 28 72 3d 64 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 64 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 61 29 74 68 72 6f 77 20 61 2e 65 72 72 6f 72 7d 7d 65 2e 6f 62 73 65 72 76 65 72 2e 6f 62 73 65 72 76 65 28 74 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 29 7d 72 65 74 75 72 6e 20 65 2e 70 75 72 69 66 79 49 66 72 61 6d 65 57 69 6e 64 6f 77 Data Ascii: =d.next();!u.done;u=d.next()){var h=u.value;e.purifyIframeWindow(h)}}catch(e){a={error:e}}finally{try{u&&!u.done&&(r=d.return)&&r.call(d)}finally{if(a)throw a.error}}e.observer.observe(t.document.body,{childList:!0,subtree:!0})}return e.purifyIframeWindow
2024-10-01 18:33:49 UTC	1369	IN	Data Raw: 65 6e 74 73 5b 74 5d 3b 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 7d 7d 7d 63 61 74 63 68 28 65 29 7b 73 3d 7b 65 72 72 6f 72 3a 65 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 75 26 26 21 75 2e 64 6f 6e 65 26 26 28 61 3d 64 2e 72 65 74 75 72 6e 29 26 26 61 2e 63 61 6c 6c 28 64 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 73 29 74 68 72 6f 77 20 73 2e 65 72 72 6f 72 7d 7d 7d 2c 65 78 74 65 6e 64 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 72 2c 6f 2c 6c 3d 69 2e 72 65 66 2c 63 3d 69 2e 74 61 72 67 65 74 52 65 66 2c 64 3d 74 2e 6e 61 6d 65 73 2c 75 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 2c 68 3d 74 2e 70 6f 73 74 4d 65 74 68 6f 64 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 5b 75 5d 5b 65 2e 50 72 65 66 69 78 2b Data Ascii: ents[t];c.apply(this,e)}}}catch(e){s={error:e}}finally{try{u&&!u.done&&(a=d.return)&&a.call(d)}finally{if(s)throw s.error}}},extendObject:function(t,i){var r,o,l=i.ref,c=i.targetRef,d=t.names,u=t.constructorName,h=t.postMethod,p=function(t){c[u][e.Prefix+
2024-10-01 18:33:49 UTC	1369	IN	Data Raw: 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 57 69 74 68 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2c 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 3a 72 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 7d 2c 7b 6e 61 6d 65 73 3a 5b 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 57 69 6e 64 6f 77 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 57 69 74 68 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2c 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 3a 72 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 2e 72 Data Ascii: eStrategies.extendPrototypeWithImplementation,implementation:r.EventDelegator.addEventListener},{names:["removeEventListener"],constructorName:"Window",replaceStrategy:e.ReplaceStrategies.extendPrototypeWithImplementation,implementation:r.EventDelegator.r
2024-10-01 18:33:49 UTC	1369	IN	Data Raw: 65 6e 74 45 6c 65 6d 65 6e 74 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 4e 6f 64 65 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 7d 2c 7b 6e 61 6d 65 73 3a 5b 22 72 65 64 75 63 65 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 41 72 72 61 79 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 74 6f 74 79 70 65 7d 2c 7b 6e 61 6d 65 73 3a 5b 22 6b 65 79 73 22 2c 22 76 61 6c 75 65 73 22 5d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 4e 61 6d 65 3a 22 4f 62 6a 65 63 74 22 2c 70 6f 73 74 4d 65 74 68 6f 64 3a 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: entElement"],constructorName:"Node",replaceStrategy:e.ReplaceStrategies.extendPrototype},{names:["reduce"],constructorName:"Array",replaceStrategy:e.ReplaceStrategies.extendPrototype},{names:["keys","values"],constructorName:"Object",postMethod:function(e
2024-10-01 18:33:49 UTC	1369	IN	Data Raw: 3a 22 77 69 6e 64 6f 77 22 2c 72 65 70 6c 61 63 65 53 74 72 61 74 65 67 79 3a 65 2e 52 65 70 6c 61 63 65 53 74 72 61 74 65 67 69 65 73 2e 65 78 74 65 6e 64 50 72 6f 70 65 72 74 79 7d 5d 2c 65 2e 6f 62 73 65 72 76 65 72 3d 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 2c 73 2c 61 2c 72 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 3d 6e 28 74 29 2c 6c 3d 6f 2e 6e 65 78 74 28 29 3b 21 6c 2e 64 6f 6e 65 3b 6c 3d 6f 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 63 3d 6c 2e 76 61 6c 75 65 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 64 3d 28 61 3d 76 6f 69 64 20 30 2c 6e 28 63 2e 61 64 64 65 64 4e 6f 64 65 73 29 29 2c 75 3d 64 2e 6e 65 78 74 28 29 3b 21 75 2e 64 6f 6e 65 3b 75 3d 64 2e 6e 65 78 74 28 29 29 Data Ascii: :"window",replaceStrategy:e.ReplaceStrategies.extendProperty}],e.observer=new MutationObserver((function(t){var i,s,a,r;try{for(var o=n(t),l=o.next();!l.done;l=o.next()){var c=l.value;try{for(var d=(a=void 0,n(c.addedNodes)),u=d.next();!u.done;u=d.next())
2024-10-01 18:33:49 UTC	1369	IN	Data Raw: 30 2c 73 29 29 2c 6e 5b 73 5d 3d 74 5b 73 5d 29 3b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 6e 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 29 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 72 65 74 75 72 6e 20 65 2e 68 61 6e 64 6c 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 2c 72 2c 6f 2c 6c 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 3d 69 28 65 2e 65 76 65 6e 74 73 29 2c 64 3d 63 2e 6e 65 78 74 28 29 3b 21 Data Ascii: 0,s)),n[s]=t[s]);return e.concat(n\|\|Array.prototype.slice.call(t))};Object.defineProperty(t,"__esModule",{value:!0}),t.EventDelegator=void 0;var a=function(){function e(){}return e.handleEvent=function(t){var a,r,o,l;try{for(var c=i(e.events),d=c.next();!
2024-10-01 18:33:49 UTC	1369	IN	Data Raw: 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 21 3d 3d 74 7d 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 65 2e 68 61 6e 64 6c 65 45 76 65 6e 74 2c 7b 63 61 70 74 75 72 65 3a 21 30 7d 29 29 29 7d 7d 2c 65 2e 65 76 65 6e 74 73 3d 5b 7b 7d 2c 7b 7d 5d 2c 65 2e 61 63 74 69 76 65 4c 69 73 74 65 6e 65 72 73 3d 5b 5d 2c 65 2e 6e 6f 6e 42 75 62 62 6c 69 6e 67 45 76 65 6e 74 73 3d 5b 22 66 6f 63 75 73 22 2c 22 62 6c 75 72 22 2c 22 66 6f 63 75 73 69 6e 22 2c 22 66 6f 63 75 73 6f 75 74 22 2c 22 63 68 61 6e 67 65 22 5d 2c 65 7d 28 29 3b 74 2e 45 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 3d 61 7d 7d 2c 74 3d 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 76 61 72 20 73 3d 74 5b 6e 5d Data Ascii: r((function(e){return e!==t})),document.removeEventListener(t,e.handleEvent,{capture:!0})))}},e.events=[{},{}],e.activeListeners=[],e.nonBubblingEvents=["focus","blur","focusin","focusout","change"],e}();t.EventDelegator=a}},t={};!function i(n){var s=t[n]
2024-10-01 18:33:49 UTC	1369	IN	Data Raw: 72 65 61 64 65 72 20 6d 6f 64 65 20 69 73 20 6f 6e 2c 20 61 6c 74 2b 38 20 74 6f 20 63 61 6e 63 65 6c 22 2c 44 45 4c 45 54 45 44 5f 4e 55 4d 42 45 52 3a 22 57 61 73 22 2c 41 43 43 4f 55 4e 54 3a 22 41 63 63 6f 75 6e 74 22 2c 53 43 52 4f 4c 4c 3a 22 53 63 72 6f 6c 6c 20 50 61 67 65 22 2c 53 45 41 52 43 48 3a 22 53 65 61 72 63 68 22 2c 4f 52 44 45 52 3a 22 4f 72 64 65 72 22 2c 53 55 42 4d 49 54 3a 22 53 75 62 6d 69 74 22 2c 54 49 4d 45 5f 54 4f 5f 41 4c 45 52 54 5f 43 4c 4f 53 45 3a 22 53 65 63 6f 6e 64 73 20 75 6e 74 69 6c 20 63 6c 6f 73 69 6e 67 22 2c 4d 41 49 4e 5f 4d 45 4e 55 3a 22 4d 61 69 6e 20 4d 65 6e 75 22 2c 46 4f 4f 54 45 52 5f 4d 45 4e 55 3a 22 46 6f 6f 74 65 72 20 4d 65 6e 75 22 2c 48 45 41 44 45 52 5f 4d 45 4e 55 3a 22 48 65 61 64 65 72 20 4d Data Ascii: reader mode is on, alt+8 to cancel",DELETED_NUMBER:"Was",ACCOUNT:"Account",SCROLL:"Scroll Page",SEARCH:"Search",ORDER:"Order",SUBMIT:"Submit",TIME_TO_ALERT_CLOSE:"Seconds until closing",MAIN_MENU:"Main Menu",FOOTER_MENU:"Footer Menu",HEADER_MENU:"Header M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49858	172.217.16.196	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:49 UTC	662	OUT	GET /js/th/t-IqUp8Jbddkqbic8L7iPCHeaww4UxHeW5fnd9iEy1U.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:49 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 54732 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 15:23:38 GMT Expires: Wed, 01 Oct 2025 15:23:38 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 23 Sep 2024 09:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 11411 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:49 UTC	579	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 74 65 64 54 79 70 65 73 2c 74 3d 41 2c 65 3d 35 36 3b 65 6c 73 65 7b 69 66 28 65 3d 3d 37 38 29 72 65 74 75 72 6e 20 74 3b 65 3d 3d 34 26 26 28 43 3d 38 39 2c 74 3d 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 54 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6b 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 6b 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 6b 7d 29 2c 65 3d 35 33 29 7d 7d 7d 63 61 74 63 68 28 51 29 7b 69 66 28 43 3d 3d 38 33 29 74 68 72 6f 77 20 51 3b 43 3d 3d 38 39 26 26 28 61 3d 51 2c 65 3d 4c 29 7d 7d 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 79 2c 4c 29 7b 72 65 74 75 72 6e 28 4c 3d 63 28 34 31 2c 39 39 2c 38 32 2c 33 33 2c 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 29 29 26 26 79 2e 65 76 61 6c 28 4c 2e 63 72 65 61 74 Data Ascii: tedTypes,t=A,e=56;else{if(e==78)return t;e==4&&(C=89,t=w.createPolicy(T,{createHTML:k,createScript:k,createScriptURL:k}),e=53)}}}catch(Q){if(C==83)throw Q;C==89&&(a=Q,e=L)}};(0,eval)(function(y,L){return(L=c(41,99,82,33,null,"error","ad"))&&y.eval(L.creat
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 51 3d 4d 2e 58 2e 70 6f 70 28 29 2c 41 3d 37 38 3b 65 6c 73 65 20 69 66 28 41 3d 3d 31 32 29 41 3d 6c 26 26 4d 2e 68 3f 31 3a 37 39 3b 65 6c 73 65 20 69 66 28 41 3d 3d 37 39 29 41 3d 35 31 3b 65 6c 73 65 20 69 66 28 41 3d 3d 35 31 29 41 3d 4d 2e 58 2e 6c 65 6e 67 74 68 3f 36 3a 39 37 3b 65 6c 73 65 7b 69 66 28 41 3d 3d 36 38 29 72 65 74 75 72 6e 20 75 3b 41 3d 3d 39 37 3f 28 75 3d 61 2c 41 3d 36 38 29 3a 41 3d 3d 35 35 3f 28 6b 3d 35 30 2c 74 48 28 33 30 2c 77 2c 34 37 2c 4d 2c 22 3a 22 29 2c 41 3d 36 36 29 3a 41 3d 3d 34 30 3f 41 3d 28 65 2d 32 5e 32 30 29 3c 65 26 26 28 65 2b 39 26 33 31 29 3e 3d 65 3f 36 37 3a 36 38 3a 41 3d 3d 39 35 3f 41 3d 28 65 2d 37 5e 31 31 29 3c 65 26 26 28 65 2b 36 26 31 39 29 3e 3d 65 3f 32 37 3a 34 30 3a 41 3d 3d 32 39 3f 41 Data Ascii: Q=M.X.pop(),A=78;else if(A==12)A=l&&M.h?1:79;else if(A==79)A=51;else if(A==51)A=M.X.length?6:97;else{if(A==68)return u;A==97?(u=a,A=68):A==55?(k=50,tH(30,w,47,M,":"),A=66):A==40?A=(e-2^20)<e&&(e+9&31)>=e?67:68:A==95?A=(e-7^11)<e&&(e+6&19)>=e?27:40:A==29?A
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 61 72 67 65 74 3d 65 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3d 74 68 69 73 2e 73 66 3d 66 61 6c 73 65 2c 77 3d 36 33 3b 65 6c 73 65 20 69 66 28 77 3d 3d 36 33 29 77 3d 28 79 26 37 37 29 3d 3d 79 3f 31 38 3a 34 33 3b 65 6c 73 65 20 69 66 28 77 3d 3d 38 36 29 43 2e 73 72 63 3d 4c 2c 4d 5b 51 4a 5d 3d 4c 2c 77 3d 36 39 3b 65 6c 73 65 7b 69 66 28 77 3d 3d 38 33 29 72 65 74 75 72 6e 20 6b 3b 77 3d 3d 36 39 3f 77 3d 28 79 3c 3c 31 26 31 31 29 3d 3d 32 3f 35 35 3a 36 33 3a 77 3d 3d 38 37 3f 28 65 28 66 75 6e 63 74 69 6f 6e 28 75 29 7b 75 28 4c 29 7d 29 2c 6b 3d 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 5d 2c 77 3d 38 33 29 3a 77 3d 3d 36 3f 28 70 28 65 2c 35 30 2c 64 2c 43 29 Data Ascii: arget=e,this.defaultPrevented=this.sf=false,w=63;else if(w==63)w=(y&77)==y?18:43;else if(w==86)C.src=L,M[QJ]=L,w=69;else{if(w==83)return k;w==69?w=(y<<1&11)==2?55:63:w==87?(e(function(u){u(L)}),k=[function(){return L},function(){}],w=83):w==6?(p(e,50,d,C)
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 6b 3d 3d 34 34 29 62 28 74 72 75 65 2c 35 2c 30 2c 64 2c 43 2c 4d 2c 6c 2c 61 5b 51 5d 29 2c 6b 3d 32 33 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 31 35 29 79 2e 63 6c 61 73 73 4c 69 73 74 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 77 29 7b 63 63 28 22 20 22 2c 37 32 2c 22 63 6c 61 73 73 22 2c 31 2c 22 73 74 72 69 6e 67 22 2c 79 2c 77 29 7d 29 3a 62 28 79 2c 31 31 2c 22 73 74 72 69 6e 67 22 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 70 28 22 63 6c 61 73 73 22 2c 36 2c 79 29 2c 66 75 6e 63 74 69 6f 6e 28 77 29 7b 72 65 74 75 72 6e 21 28 45 28 31 2c 32 35 2c 77 2c 65 29 3e 3d 30 29 7d 29 2e 6a 6f 69 6e 28 22 20 22 29 29 2c 6b 3d 39 38 3b 65 Data Ascii: k==44)b(true,5,0,d,C,M,l,a[Q]),k=23;else if(k==15)y.classList?Array.prototype.forEach.call(e,function(w){cc(" ",72,"class",1,"string",y,w)}):b(y,11,"string",Array.prototype.filter.call(p("class",6,y),function(w){return!(E(1,25,w,e)>=0)}).join(" ")),k=98;e
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 5d 29 26 26 6c 5b 64 5d 3d 3d 4d 61 74 68 29 7b 63 3d 6c 3b 62 72 65 61 6b 20 61 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 44 3d 36 31 7d 65 6c 73 65 20 69 66 28 44 3d 3d 36 37 29 44 3d 64 2e 63 6c 61 73 73 4c 69 73 74 3f 32 39 3a 31 34 3b 65 6c 73 65 7b 69 66 28 44 3d 3d 36 31 29 72 65 74 75 72 6e 20 63 3b 69 66 28 44 3d 3d 37 37 29 44 3d 6c 3f 39 30 3a 33 34 3b 65 6c 73 65 20 69 66 28 44 3d 3d 35 29 44 3d 28 65 7c 37 32 29 3d 3d 65 3f 33 38 3a 36 31 3b 65 6c 73 65 20 69 66 28 44 3d 3d 39 30 29 7b 61 3a 7b 66 6f 72 28 61 3d 28 41 3d 4d 2e 73 70 6c 69 74 28 28 75 3d 45 64 2c 79 29 29 2c 43 29 3b 61 3c 41 2e 6c 65 6e 67 74 68 2d 4c 3b 61 2b 2b 29 7b 69 66 28 21 28 51 3d Data Ascii: ])&&l[d]==Math){c=l;break a}throw Error("Cannot find global object");}D=61}else if(D==67)D=d.classList?29:14;else{if(D==61)return c;if(D==77)D=l?90:34;else if(D==5)D=(e\|72)==e?38:61;else if(D==90){a:{for(a=(A=M.split((u=Ed,y)),C);a<A.length-L;a++){if(!(Q=
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 66 28 41 3d 3d 37 32 29 41 3d 28 4c 7c 39 29 3e 3d 32 37 26 26 28 4c 5e 37 39 29 3c 34 32 3f 31 35 3a 36 30 3b 65 6c 73 65 20 69 66 28 41 3d 3d 32 31 29 51 3d 79 2c 41 3d 34 38 3b 65 6c 73 65 7b 69 66 28 41 3d 3d 36 30 29 72 65 74 75 72 6e 20 75 3b 41 3d 3d 33 39 3f 41 3d 74 68 69 73 2e 5a 2e 6c 65 6e 67 74 68 3c 35 30 3f 37 38 3a 31 38 3a 41 3d 3d 33 36 3f 41 3d 6c 26 26 6c 2e 6f 6e 63 65 3f 36 34 3a 38 32 3a 41 3d 3d 32 34 3f 41 3d 51 3c 64 2e 6c 65 6e 67 74 68 3f 31 39 3a 35 3a 41 3d 3d 35 3f 41 3d 28 4c 2d 35 5e 32 37 29 3e 3d 4c 26 26 28 4c 2b 39 5e 32 36 29 3c 4c 3f 38 30 3a 37 32 3a 41 3d 3d 34 30 3f 28 53 28 22 6f 62 6a 65 63 74 22 2c 35 34 2c 30 2c 64 2c 43 2c 4d 2c 6c 2c 61 5b 51 5d 29 2c 41 3d 38 38 29 3a 41 3d 3d 32 33 3f 41 3d 28 28 4c 5e 31 Data Ascii: f(A==72)A=(L\|9)>=27&&(L^79)<42?15:60;else if(A==21)Q=y,A=48;else{if(A==60)return u;A==39?A=this.Z.length<50?78:18:A==36?A=l&&l.once?64:82:A==24?A=Q<d.length?19:5:A==5?A=(L-5^27)>=L&&(L+9^26)<L?80:72:A==40?(S("object",54,0,d,C,M,l,a[Q]),A=88):A==23?A=((L^1
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 68 48 2c 61 2c 64 3f 4d 2b 31 3a 4d 2c 43 2e 6f 2c 43 2e 4a 5d 29 2c 43 2e 68 3d 61 71 2c 41 3d 4c 29 29 3a 41 3d 66 61 6c 73 65 2c 31 30 29 7d 65 6c 73 65 20 44 3d 3d 34 37 3f 44 3d 31 34 3a 44 3d 3d 31 34 3f 44 3d 28 65 2b 39 5e 31 39 29 3c 65 26 26 65 2d 32 3c 3c 31 3e 3d 65 3f 32 30 3a 33 30 3a 44 3d 3d 33 30 26 26 28 44 3d 28 65 7c 34 29 3e 3d 31 37 26 26 65 3e 3e 32 3c 32 30 3f 37 33 3a 31 30 29 7d 7d 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4c 2c 79 2c 64 2c 43 2c 4d 2c 6c 2c 61 2c 51 2c 74 2c 6b 2c 77 2c 75 2c 41 29 7b 66 6f 72 28 75 3d 32 33 3b 75 21 3d 39 34 3b 29 69 66 28 75 3d 3d 36 32 29 7b 69 66 28 77 3d 64 2e 6c 2e 52 5b 53 74 72 69 6e 67 28 4c 29 5d 29 7b 66 6f 72 28 77 3d 77 2e 63 6f 6e 63 61 74 28 29 2c 6c 3d 74 72 75 65 2c 61 3d 79 3b Data Ascii: hH,a,d?M+1:M,C.o,C.J]),C.h=aq,A=L)):A=false,10)}else D==47?D=14:D==14?D=(e+9^19)<e&&e-2<<1>=e?20:30:D==30&&(D=(e\|4)>=17&&e>>2<20?73:10)}},N=function(e,L,y,d,C,M,l,a,Q,t,k,w,u,A){for(u=23;u!=94;)if(u==62){if(w=d.l.R[String(L)]){for(w=w.concat(),l=true,a=y;
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 65 2c 61 2e 6c 69 76 65 3d 22 6f 66 66 22 2c 61 2e 6d 75 6c 74 69 6c 69 6e 65 3d 66 61 6c 73 65 2c 61 2e 6d 75 6c 74 69 73 65 6c 65 63 74 61 62 6c 65 3d 66 61 6c 73 65 2c 61 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 3d 22 76 65 72 74 69 63 61 6c 22 2c 61 2e 72 65 61 64 6f 6e 6c 79 3d 66 61 6c 73 65 2c 61 2e 72 65 6c 65 76 61 6e 74 3d 22 61 64 64 69 74 69 6f 6e 73 20 74 65 78 74 22 2c 61 2e 72 65 71 75 69 72 65 64 3d 66 61 6c 73 65 2c 61 2e 73 6f 72 74 3d 64 2c 61 2e 62 75 73 79 3d 66 61 6c 73 65 2c 61 2e 64 69 73 61 62 6c 65 64 3d 66 61 6c 73 65 2c 61 2e 68 69 64 64 65 6e 3d 66 61 6c 73 65 2c 61 2e 69 6e 76 61 6c 69 64 3d 79 2c 61 29 2c 77 3d 32 32 3b 65 6c 73 65 7b 69 66 28 77 3d 3d 34 35 29 72 65 74 75 72 6e 20 6b 3b 77 3d 3d 32 32 3f 28 74 3d 4a 48 2c 4d 20 Data Ascii: e,a.live="off",a.multiline=false,a.multiselectable=false,a.orientation="vertical",a.readonly=false,a.relevant="additions text",a.required=false,a.sort=d,a.busy=false,a.disabled=false,a.hidden=false,a.invalid=y,a),w=22;else{if(w==45)return k;w==22?(t=JH,M
2024-10-01 18:33:49 UTC	1390	IN	Data Raw: 2c 41 29 7d 2c 4c 3d 5a 47 2c 6b 3d 77 2c 75 3d 32 32 29 3a 75 3d 3d 36 36 26 26 28 4d 3d 64 2e 6c 65 6e 67 74 68 2c 61 3d 74 79 70 65 6f 66 20 64 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 64 2e 73 70 6c 69 74 28 79 29 3a 64 2c 6c 3d 4c 2c 75 3d 39 36 29 7d 7d 2c 74 48 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4c 2c 79 2c 64 2c 43 2c 4d 2c 6c 2c 61 29 7b 66 6f 72 28 6c 3d 35 34 3b 6c 21 3d 36 36 3b 29 69 66 28 6c 3d 3d 65 29 61 3d 74 79 70 65 6f 66 20 4c 2e 63 6c 61 73 73 4e 61 6d 65 3d 3d 22 73 74 72 69 6e 67 22 3f 4c 2e 63 6c 61 73 73 4e 61 6d 65 3a 4c 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 4c 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 64 29 7c 7c 43 2c 6c 3d 33 31 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 35 30 29 6c 3d 28 28 79 5e 33 32 29 26 37 29 3d 3d 32 3f 65 Data Ascii: ,A)},L=ZG,k=w,u=22):u==66&&(M=d.length,a=typeof d==="string"?d.split(y):d,l=L,u=96)}},tH=function(e,L,y,d,C,M,l,a){for(l=54;l!=66;)if(l==e)a=typeof L.className=="string"?L.className:L.getAttribute&&L.getAttribute(d)\|\|C,l=31;else if(l==50)l=((y^32)&7)==2?e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49869	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:50 UTC	553	OUT	GET /dist/img/play-btn.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:33:50 UTC	2113	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 07 Sep 2020 17:44:40 GMT Accept-Ranges: bytes ETag: "dec329903e85d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:03 GMT Connection: close Content-Length: 1925
2024-10-01 18:33:50 UTC	1925	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 32 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 36 20 31 32 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 35 36 2e 33 20 28 31 30 31 30 31 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="126px" height="126px" viewBox="0 0 126 126" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 56.3 (101010) - https://sketch.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49868	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:50 UTC	556	OUT	GET /dist/img/world_image.png HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:33:50 UTC	2111	IN	HTTP/1.1 200 OK Content-Type: image/png Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Fri, 11 Sep 2020 11:33:45 GMT Accept-Ranges: bytes ETag: "7748e8682f88d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:03 GMT Connection: close Content-Length: 971903
2024-10-01 18:33:50 UTC	14273	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0b 40 00 00 04 4c 08 03 00 00 00 3d 1b e2 c0 00 00 03 00 50 4c 54 45 00 22 27 00 24 2a 00 1f 25 00 26 2b 00 1f 22 00 1b 1f 00 1a 1c 03 1f 2b 08 23 32 08 23 2f 07 26 36 0d 27 35 0e 26 31 04 26 34 0a 26 30 0a 27 33 02 1b 27 04 1d 28 11 2d 3a 03 24 34 0f 29 37 0a 28 38 02 23 30 00 17 1a 13 30 3b 07 20 2b 02 22 22 12 29 33 02 20 2f 1e 3a 46 09 2a 37 08 24 35 1a 36 43 0d 2a 33 0d 2e 3d 0f 2a 3b 01 22 33 12 2c 37 0b 31 3f 16 32 3e 0e 2c 37 07 23 2c 0d 33 42 05 23 25 00 1f 1f 08 2e 3c 0b 2c 3a 0d 23 2f 12 2e 3e 16 34 42 0c 24 34 04 21 28 17 30 3e 11 26 34 02 25 25 01 1b 23 0a 2a 3b 06 2b 3a 1d 37 44 0c 25 2e 15 2a 35 04 26 31 1d 3b 4a 0b 22 2c 15 31 41 07 20 2f 11 33 40 17 2e 39 19 32 41 19 35 45 10 30 40 09 Data Ascii: PNGIHDR@L=PLTE"'$%&+"+#2#/&6'5&1&4&0'3'(-:$4)7(8#00; +"")3 /:F7$56C3.=;"3,71?2>,7#,3B#%.<,:#/.>4B$4!(0>&4%%#;+:7D%.5&1;J",1A /3@.92A5E0@
2024-10-01 18:33:50 UTC	16384	IN	Data Raw: f2 67 2c 53 60 46 fd d5 23 f4 df 52 68 ea 1b b2 d4 23 ae df 47 7c b8 9c 62 6b ea f5 23 7c ef c2 77 ac fe 2d e5 53 9f e4 47 9b 6a 2d 5d bf ed fa 27 d1 34 a8 3d f0 d3 20 d7 6f 51 f5 94 f5 7f e1 2d 0d 8b 02 09 41 40 f2 22 76 f0 58 37 11 52 db 60 ca 96 84 38 12 d9 09 09 73 38 e2 c2 d1 18 57 80 6c 4c a5 2a 5f 5a c8 70 bb 79 c4 87 3c 08 45 c1 6a fe 61 64 6d 67 77 74 d0 32 d5 4f 6e 9d 27 d0 68 5b 9d b2 18 2e eb ec ee eb c7 25 96 ed fe 3b 9a ca 03 c3 1c 9f f2 85 89 ae 7e 14 6c 87 4d e3 93 7f d7 7f ee a2 23 99 89 d0 e5 b7 d2 0f bb 8c 1f fe 0a 05 51 80 41 23 d4 89 fe 87 f2 20 96 5a 65 a9 65 d6 df c4 fa 57 fa 3f af 7e 34 f9 d7 fc fa 8b a4 ab 33 78 51 87 2b 91 6c 60 9a 7e 8e 15 a8 34 db e1 91 3f 03 58 8a 36 8d ed e8 63 a9 0c f8 5c a6 b1 e1 a3 1a 27 28 4c 98 7f a1 d7 Data Ascii: g,S`F#Rh#G\|bk#\|w-SGj-]'4= oQ-A@"vX7R`8s8WlL*_Zpy<Ejadmgwt2On'h[.%;~lM#QA# ZeeW?~43xQ+l`~4?X6c\'(L
2024-10-01 18:33:50 UTC	16384	IN	Data Raw: 71 f2 12 80 b6 d6 af 30 97 e8 3f f0 4e ff 22 fb 2d ea cf a4 0e f4 37 a4 02 63 c7 c5 da 7f 8d f9 db 27 fa bb 8c bb 94 0e eb ff 7a c6 23 5e c0 5a fd fc a0 bf 54 e0 89 f6 83 59 95 a9 09 f3 4c fb 53 2e d9 dd 3a 7e 3c 3b fe 4c 4a c3 7c 0c e4 ca 0f 4e d1 83 77 b8 7a fe 18 33 b1 7f e1 f5 f3 e7 a2 0b ac 5f e7 f0 c6 9e ce bf b2 b8 d7 87 a3 80 80 aa e4 e1 7f fe d1 18 7b cf f8 b7 f3 02 3d c9 9f 67 c7 ef ef 1f 81 b2 2d 2b 7c 31 7a f3 fe 7b 54 c7 ef 1b ff c1 ed f7 55 e3 f7 45 f3 f7 0c be ae 7d 41 39 47 07 fa 03 92 00 fc 88 d7 c0 55 40 40 02 87 e5 6f e5 6f 67 d7 ae f1 2b 5a f8 28 9f 7e e0 19 7f 82 fc 11 d3 f1 cf 7f 07 b6 75 03 53 9d cf 9d 4b d2 1b 8c 9f ff f9 7d bc f2 22 cd cf 40 fb eb 98 eb 3b c3 b6 71 0d 22 7f ce f2 a9 04 76 f9 5f 84 c7 c0 1b c7 bf 95 07 de 3c 7e 1b Data Ascii: q0?N"-7c'z#^ZTYLS.:~<;LJ\|Nwz3_{=g-+\|1z{TUE}A9GU@@oog+Z(~uSK}"@;q"v_<~
2024-10-01 18:33:50 UTC	16384	IN	Data Raw: ec fb 37 34 20 b6 82 d0 87 97 4a b3 c2 f0 27 db 08 91 ad 47 a8 76 a6 32 8c d7 50 9c fe 38 45 aa f1 9a e1 ce 09 39 0c 4c 5b 21 45 c7 b6 6e 0c 92 16 b2 09 4d 67 ca 33 ac 61 5f e6 fa 40 f8 87 9e 34 c7 0e a3 ec ce 0b fc 0b a2 7a 3b 0c ea 09 f4 81 83 a5 29 f2 6a c9 a0 a6 f1 d9 bb a7 1a d3 7e 82 72 a1 1d 2b 09 67 5e 3f 00 9a 9d 0f 84 ca 39 d6 14 0c ea 69 d2 09 43 64 58 c1 35 04 97 47 89 2f 09 a8 c3 9e 29 26 0e 8a 49 27 e7 d3 e9 bf 39 65 12 ee 50 e0 78 c9 78 9b fb e7 ef 3e 63 f6 94 f6 4a d7 a4 60 89 bb 0f 14 c4 98 14 37 70 a7 61 a4 62 e7 7b c6 d1 2d b6 d0 a3 98 0b 63 cf 2d cd 6c 6d c3 bc 66 2b de 84 68 be 20 d4 cf 01 b9 c8 50 0c 9a 9c 64 93 e0 f9 48 8c 3e f3 fa 23 ab d9 bf 80 24 f3 bd ef 38 7a ac 0d d4 ef 58 72 18 ed 7b f7 36 c2 31 ad 3c 4d 43 e1 e5 21 2c 26 41 Data Ascii: 74 J'Gv2P8E9L[!EnMg3a_@4z;)j~r+g^?9iCdX5G/)&I'9ePxx>cJ`7pab{-c-lmf+h PdH>#$8zXr{61<MC!,&A
2024-10-01 18:33:50 UTC	63	IN	Data Raw: 85 bd 97 3a e8 7a bb a2 b4 ca 7f e9 e1 cd fc 45 e7 d0 68 5f 65 5f 86 be b8 e3 b6 e2 4c 8d b9 b6 8f 69 e1 42 2a 1b 54 92 ea a5 1d c6 d6 c5 94 24 c9 5a 03 3a 78 ba c9 28 5b 4d 99 77 7b e4 18 Data Ascii: :zEh_e_LiB*T$Z:x([Mw{
2024-10-01 18:33:50 UTC	16384	IN	Data Raw: cb db 8e a3 4a dd 0b 3d 79 bf f3 89 b4 5c 6a 75 53 32 69 0a 0e 97 17 58 4b 8d 77 48 45 6b ec 90 d6 7d b3 14 a0 cd d6 07 ec 86 ab 36 17 bb 94 a7 9b 7e 64 6f 83 c2 3e bc bc cd 7e d4 49 a9 5c 88 9c 4d fc cd 02 af f3 9c 00 b5 32 51 eb 1e c4 ca 9e 1d 0c d5 77 2b 9b 77 72 87 ee 7e cf 51 e0 3c ce 95 7d 13 a0 9f 7b fa 83 af bf 9f fe 79 98 c0 37 d6 ce 3d 65 f7 5b d9 c2 81 c7 fb db 3f 69 cb 6c ec eb 8f 02 f4 f9 68 47 d1 00 0a ee b0 59 8d 6e 78 60 37 4e e2 49 24 68 b3 27 3f 0e fa 91 9f 70 3b fc a9 12 46 3f 6c 24 01 b5 3d ac cb ad c2 b3 96 44 3d 07 4b f7 9d 8d 5e 8d ec 5f cb 32 4a 34 cd 19 f7 13 19 a7 11 9c 53 a3 18 98 d1 e1 59 ac ec 22 43 ab 50 ea 24 dd 8b af a6 3c 04 4c c3 eb 3c 2c 5e 22 80 96 4a 89 36 ca 4a 57 38 16 ea 4a d7 52 c1 73 5b 8e 55 0d 25 b8 b1 33 57 1a Data Ascii: J=y\juS2iXKwHEk}6~do>~I\M2Qw+wr~Q<}{y7=e[?ilhGYnx`7NI$h'?p;F?l$=D=K^_2J4SY"CP$<L<,^"J6JW8JRs[U%3W
2024-10-01 18:33:51 UTC	16384	IN	Data Raw: 5e eb 62 c6 c7 0d da eb d2 45 ad 45 cf fd 40 2b fb b5 e8 ff 29 7e 9d ad ae ae 5d c7 8d 5d 04 d3 fd 30 26 b5 d6 3b 79 5b 3b af 44 c6 73 df 4c 71 b2 cb 2f a7 00 5e 01 75 80 b3 a2 62 a8 f7 91 52 36 b0 2d 82 be ee 17 57 f5 5d f6 ef f3 78 bb f9 d5 86 8a fc 4f 55 b6 39 f9 bc 21 a6 af 06 bc 6b ae f0 d7 78 6f 9b 7f fd fe f5 fc 4e 5b f5 d1 d4 4b fe a7 37 cf 1f f9 df 7c 8f 42 b6 ce 1f 45 f9 bf ed f9 bf 4f fe 36 07 69 8f c0 9f 10 81 fe f0 cf 7f fb cb 57 37 6d 51 8e f7 e2 fe 37 69 b4 68 db de e4 cf 34 ea f0 3f 6e df c3 e7 ff af fc cd e8 43 ad fa a3 a0 b2 ae ea e3 81 66 9c d9 26 b9 59 99 6d 49 85 d1 19 ba 24 9b b2 70 68 9c 7f 38 50 82 c5 35 b0 95 06 2f d0 63 aa 75 9c ce 3f 6e 9b a1 4c 0c 3c 8b 8e c5 cf 53 d0 b3 5f d5 18 74 4b 38 f6 55 18 84 c9 d5 cc c3 f9 37 4e 39 fc Data Ascii: ^bEE@+)~]]0&;y[;DsLq/^ubR6-W]xOU9!kxoN[K7\|BEO6iW7mQ7ih4?nCf&YmI$ph8P5/cu?nL<S_tK8U7N9
2024-10-01 18:33:51 UTC	16384	IN	Data Raw: 0e 25 41 4f 76 ee 66 08 fa a5 2d 24 70 1c 6d 1d 7d fa 29 f8 f9 e6 cd 9b f7 01 d0 00 67 25 3f a3 92 d2 f8 fe fe 23 ea 87 47 bf 4b 22 68 70 34 5e 2a fc 9e 04 fd 8d 60 1b de b7 91 c9 b1 cf e5 f0 6e 01 a0 a1 f7 c1 ce 78 75 f1 c3 05 12 f4 5b a0 67 65 95 ac ae 8e c1 d0 78 d2 55 47 90 09 cb eb 01 cd ea d5 0a 78 e4 de c3 6d f1 f0 06 b1 77 5d 76 33 92 8c 2c 0d 45 b0 b3 73 a9 a4 8b a8 53 17 e7 65 78 84 c4 ce 17 4a 9d a0 cb 1b a0 ba 30 2d 8e dc 46 ea 46 f6 73 74 b1 10 29 cb e6 15 c1 e5 68 5c bf b0 7d e1 02 5a 18 ba c0 a5 3b 24 21 31 e6 26 50 d3 80 1b ea 16 41 b3 7a 7e 13 6b de 05 4d 2b c3 ab b4 50 70 10 09 1f 9c c0 5e 74 bd a0 c5 f1 36 63 e9 78 14 8a 41 bf aa 02 af 2f a3 15 a8 5c d8 f9 12 fa 84 d6 28 f1 b9 44 ae a6 7a fa e1 98 51 af 9a 6f f2 5b 5e e2 cc 0d af 42 21 Data Ascii: %AOvf-$pm})g%?#GK"hp4^*`nxu[gexUGxmw]v3,EsSexJ0-FFst)h\}Z;$!1&PAz~kM+Pp^t6cxA/\(DzQo[^B!
2024-10-01 18:33:51 UTC	16384	IN	Data Raw: 0b 47 b4 58 c5 0c ab 82 8a b3 30 19 07 ce c4 13 0b 36 0f 3f f5 7a 9e 1f 85 aa 4e 80 2e 59 7f 76 f8 99 ce 7d 3a b1 9d fa f9 ff 53 eb 3b 0e e1 7c 59 d3 50 d4 73 42 b2 57 dc f2 e5 bf ff 09 d6 2f a6 a6 58 12 b3 3d 35 e6 b3 c8 f1 a1 a0 ce 38 9d 67 9c 95 e2 4d 3c a7 52 82 9f 81 66 bb a0 bf 93 dc 73 93 e4 ce 3e bf 43 42 e7 ef b8 05 3f 97 0b 5a 46 b7 c8 e9 ec 3a b0 7c 2b 9b a2 70 46 33 1d 22 d1 a9 6c 5d 82 d8 f4 d4 a2 eb 8b 3e 73 c3 cf ab c5 9a e8 76 fe 14 27 59 fc e1 2c a4 eb b0 0e c0 b8 ac cd e6 0b 17 51 94 f4 1a a6 66 48 1a 7a a6 71 c9 1d 0c c8 9c 2c 8f f2 a5 d1 03 a2 45 d1 48 91 1a ea 0b 9c a5 77 a8 0c cc 88 c6 52 1e 3a a4 ff 9b d2 de 66 d8 f9 a1 3d 2e 46 66 04 35 93 59 a3 91 79 e5 5e db ab f0 f9 b8 e9 19 81 78 87 87 8f 9f 3c 7e f2 64 99 f2 80 5e c0 70 6e 82 Data Ascii: GX06?zN.Yv}:S;\|YPsBW/X=58gM<Rfs>CB?ZF:\|+pF3"l]>sv'Y,QfHzq,EHwR:f=.Ff5Yy^x<~d^pn
2024-10-01 18:33:51 UTC	16384	IN	Data Raw: 6c b4 48 ed 5c 1b 09 8a 9b cd ce 66 e6 57 16 f9 9b 43 cd fe 4c 9d ce d9 05 a5 71 b9 e0 79 54 52 72 d2 b9 ae f6 64 10 95 a9 16 32 f3 f1 b0 ef d7 f0 be 1b 99 6c c7 35 73 08 81 a0 18 60 9a f7 e9 ae 4f 91 6c 9a 6c 37 d8 32 5c 72 38 ff 80 66 73 74 9c 82 bb 4e 67 d7 94 8a 44 f3 f1 95 8b a5 ee ec 3d d9 db db 17 55 1d ec 49 8f 2d f4 e4 f1 de e3 3d eb c9 be 46 71 67 a2 ed 83 e1 11 d7 a7 34 09 70 de 9e 70 9e fb c8 6b 98 18 16 f4 81 54 f1 13 f0 35 8d 84 fb 45 9f 29 77 bb 95 8a e5 1c 6d e9 80 e7 c0 34 f1 c0 f2 19 37 e0 53 54 aa 3c 09 34 0e ab 36 b9 e6 02 ca 5b 07 a5 67 a7 70 0e e6 4e 24 7b d1 73 3d 14 1d dd 7b 30 b4 8e de 29 3d 8c 1d 83 c5 1a 19 a6 5f 15 85 fb c7 db 9b b6 d7 23 65 50 c4 cc 9f 57 27 5d c0 19 e9 2f 2c f1 17 5f 2b dd 5c db d3 b1 b6 76 e7 e6 cd 55 6b 6f Data Ascii: lH\fWCLqyTRrd2l5s`Oll72\r8fstNgD=UI-=Fqg4ppkT5E)wm47ST<46[gpN${s={0)=_#ePW']/,_+\vUko

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49780	142.250.185.150	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:51 UTC	699	OUT	GET /vi_webp/NBEWfKH702s/default.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:51 UTC	633	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 1880 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 17:48:48 GMT Expires: Tue, 01 Oct 2024 19:48:48 GMT Cache-Control: public, max-age=7200 Age: 2703 ETag: "1687450470" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:51 UTC	757	IN	Data Raw: 52 49 46 46 50 07 00 00 57 45 42 50 56 50 38 20 44 07 00 00 b0 1e 00 9d 01 2a 78 00 5a 00 3e 6d 20 9b 4d a4 21 24 24 13 50 80 0d 89 67 00 cb d8 f5 5a e6 15 15 2c 06 68 c6 d1 3e 3f bd fb 1f de e7 75 14 ed 4f 10 fb c1 e0 04 ee bb 40 bd 83 fa 67 fb ff cb 4f 3a 6d 48 ef 52 f3 f7 fc c7 82 2d 00 3f 90 7f 53 ff 95 ea 01 ff 37 f9 8f c9 5f 69 5f 4e 7f db f7 08 fe 6b fd a7 fe 9f ae 87 af 3f db 8f 64 ff d8 d4 87 58 02 ca f2 11 2f a6 f1 1b 01 f0 c2 e0 43 7a 57 86 d1 ab b1 d9 39 6c 50 00 74 6d f0 60 89 dc 64 c6 5d e4 3b 78 ce 4c b9 98 44 3f 7d 24 9a 5a ee 38 4c e7 da 6e ac da 2e 26 20 83 c2 15 bd 7a c5 77 48 ce 49 92 d3 f6 84 7c 12 45 5b a0 94 7c 6b 5d d5 6e 71 b5 28 36 d3 b7 0d 7b cb 6b 12 8a 39 58 b5 1e 75 f2 1e 4c 3e b4 7f dc 45 65 30 91 22 20 55 7e 1b 4e 2c 9b a5 Data Ascii: RIFFPWEBPVP8 D*xZ>m M!$$PgZ,h>?uO@gO:mHR-?S7_i_Nk?dX/CzW9lPtm`d];xLD?}$Z8Ln.& zwHI\|E[\|k]nq(6{k9XuL>Ee0" U~N,
2024-10-01 18:33:51 UTC	1123	IN	Data Raw: 22 dd 3c 1e 4e da 0c 5d 1f f6 d3 5d 72 1b b2 e9 27 d3 8f aa 8b 56 7f ae 9a e6 ac 2f f5 34 a5 52 37 a4 64 26 6b 1e 76 82 7c ba fd 80 b3 d9 58 47 54 7c b8 c9 d4 04 61 b5 61 63 19 f4 e4 3a 2d a8 54 91 b6 8b b9 64 f5 06 ea 1d 11 5c 5e 2b 73 96 6c 90 da ad 38 8e 98 d9 a5 bd 88 df de 82 e3 4b 70 8e 54 18 fb 04 c1 e0 25 df 2d 16 bc 01 98 bb 65 3a e5 2b 95 61 3e f3 ee 16 9f 49 10 17 31 3c 8e d1 0e 58 17 1a ba 6c bc ca b2 0e 24 a3 37 83 f4 43 84 fa a5 79 09 1d d5 d8 a9 a8 d0 3c 05 8e 1a 7d dc 0f 3d 63 08 69 1c b3 ea 94 17 24 6a 9a d2 37 1a 3d e7 7e e4 da 8a 49 3f 5d c7 31 69 ef 62 1c da 83 11 81 a5 b3 a7 74 2d e1 a5 f4 f1 09 50 ca dc 15 a6 81 89 4f 5d cd 50 f5 b3 5a eb 1c 26 2e f8 a3 05 c1 79 82 45 9b bd cd 04 61 58 e7 d9 33 ce fb d2 e3 eb d1 6b 0b 69 e2 0a 33 79 Data Ascii: "<N]]r'V/4R7d&kv\|XGT\|aac:-Td\^+sl8KpT%-e:+a>I1<Xl$7Cy<}=ci$j7=~I?]1ibt-PO]PZ&.yEaX3ki3y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49873	172.217.16.196	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:52 UTC	662	OUT	GET /js/th/Kwl4UTqRlZdwo60dxzGVsyg_CEkasAzkebPPx38d0Do.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:52 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 54748 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 13:53:12 GMT Expires: Tue, 30 Sep 2025 13:53:12 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 17 Sep 2024 15:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 103240 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:52 UTC	578	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-10-01 18:33:52 UTC	1390	IN	Data Raw: 35 2c 63 3b 41 3d 3d 31 32 3f 28 70 2e 63 6f 6e 73 6f 6c 65 5b 7a 5d 28 77 2e 6d 65 73 73 61 67 65 29 2c 41 3d 55 29 3a 41 3d 3d 67 26 26 28 45 3d 36 34 2c 63 3d 6b 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 57 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 64 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 64 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 64 7d 29 2c 41 3d 55 29 7d 7d 7d 63 61 74 63 68 28 4a 29 7b 69 66 28 45 3d 3d 33 35 29 74 68 72 6f 77 20 4a 3b 45 3d 3d 36 34 26 26 28 77 3d 4a 2c 41 3d 31 39 29 7d 7d 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 55 2c 43 29 7b 72 65 74 75 72 6e 28 43 3d 4f 28 35 36 2c 31 2c 38 31 2c 37 30 2c 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 29 29 26 26 55 2e 65 76 61 6c 28 43 2e 63 72 65 61 74 65 53 Data Ascii: 5,c;A==12?(p.console[z](w.message),A=U):A==g&&(E=64,c=k.createPolicy(W,{createHTML:d,createScript:d,createScriptURL:d}),A=U)}}}catch(J){if(E==35)throw J;E==64&&(w=J,A=19)}};(0,eval)(function(U,C){return(C=O(56,1,81,70,null,"error","ad"))&&U.eval(C.createS
2024-10-01 18:33:52 UTC	1390	IN	Data Raw: 66 6f 72 28 64 20 69 6e 20 63 29 69 66 28 6d 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 63 5b 64 5d 2c 64 2c 63 29 29 7b 6b 3d 47 3b 62 72 65 61 6b 20 61 7d 6b 3d 45 7d 4a 3d 39 39 7d 65 6c 73 65 20 69 66 28 4a 3d 3d 43 29 4a 3d 28 41 3c 3c 32 26 34 29 3c 32 26 26 28 41 7c 36 29 3e 3d 2d 38 31 3f 35 34 3a 39 39 3b 65 6c 73 65 7b 69 66 28 4a 3d 3d 36 36 29 72 65 74 75 72 6e 20 6b 3b 4a 3d 3d 36 32 3f 28 6b 3d 43 24 5b 47 5d 28 43 24 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 6f 6c 65 3a 45 2c 70 61 72 65 6e 74 3a 45 2c 66 6c 6f 6f 72 3a 45 2c 63 61 6c 6c 3a 45 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3a 45 2c 73 74 61 63 6b 3a 45 2c 64 6f 63 75 6d 65 6e 74 3a 45 2c 70 6f 70 3a 45 2c 70 72 6f 74 6f 74 79 70 65 3a 45 2c 72 65 70 6c 61 Data Ascii: for(d in c)if(m.call(void 0,c[d],d,c)){k=G;break a}k=E}J=99}else if(J==C)J=(A<<2&4)<2&&(A\|6)>=-81?54:99;else{if(J==66)return k;J==62?(k=C$[G](C$.prototype,{console:E,parent:E,floor:E,call:E,propertyIsEnumerable:E,stack:E,document:E,pop:E,prototype:E,repla
2024-10-01 18:33:52 UTC	1390	IN	Data Raw: 3d 32 30 3f 28 55 3d 64 3f 74 79 70 65 6f 66 20 64 2e 77 34 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 64 2e 77 34 28 29 3a 6e 65 77 20 64 3a 6e 75 6c 6c 2c 77 3d 31 29 3a 77 3d 3d 31 3f 28 74 68 69 73 2e 43 3d 55 2c 77 3d 33 31 29 3a 77 3d 3d 36 30 3f 77 3d 28 55 3d 47 29 3f 31 3a 38 30 3a 77 3d 3d 38 30 3f 28 4a 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 77 3d 31 31 29 3a 77 3d 3d 33 32 3f 77 3d 39 34 3a 77 3d 3d 34 37 3f 28 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6b 3d 76 6f 69 64 20 30 2c 6d 3d 4a 47 28 41 2c 66 75 6e 63 74 69 6f 6e 28 70 2c 7a 29 7b 66 6f 72 28 7a 3d 34 36 3b 7a 21 3d 34 3b 29 7a 3d 3d 31 37 3f 28 47 26 26 70 24 28 47 29 2c 6b 3d 70 2c 67 28 29 2c 67 3d 76 6f 69 64 20 30 2c 7a 3d 34 29 3a 7a 3d 3d 34 36 26 26 28 7a 3d Data Ascii: =20?(U=d?typeof d.w4==="function"?d.w4():new d:null,w=1):w==1?(this.C=U,w=31):w==60?w=(U=G)?1:80:w==80?(J=this.constructor,w=11):w==32?w=94:w==47?(g=function(){},k=void 0,m=JG(A,function(p,z){for(z=46;z!=4;)z==17?(G&&p$(G),k=p,g(),g=void 0,z=4):z==46&&(z=
2024-10-01 18:33:52 UTC	1390	IN	Data Raw: 73 2e 6f 2e 6c 65 6e 67 74 68 3c 35 30 3f 34 39 3a 32 37 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 35 37 29 6b 3d 47 3c 45 2e 6c 65 6e 67 74 68 3f 31 34 3a 32 34 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 31 35 29 74 68 69 73 2e 6e 2b 2b 2c 6b 3d 38 36 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 33 35 29 6b 3d 28 43 3e 3e 31 26 31 33 29 3d 3d 34 3f 33 30 3a 39 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 31 37 29 63 3d 74 72 75 65 2c 6b 3d 32 38 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 37 37 29 6b 3d 28 43 2b 35 26 31 35 29 3c 38 26 26 43 2d 39 3e 3d 2d 35 37 3f 37 32 3a 38 30 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 32 38 29 4a 3d 63 2c 6b 3d 38 30 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 31 36 29 6b 3d 35 37 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 34 30 29 47 2b 3d 38 31 39 32 2c 6b 3d 35 37 3b 65 6c Data Ascii: s.o.length<50?49:27;else if(k==57)k=G<E.length?14:24;else if(k==15)this.n++,k=86;else if(k==35)k=(C>>1&13)==4?30:9;else if(k==17)c=true,k=28;else if(k==77)k=(C+5&15)<8&&C-9>=-57?72:80;else if(k==28)J=c,k=80;else if(k==16)k=57;else if(k==40)G+=8192,k=57;el
2024-10-01 18:33:52 UTC	1390	IN	Data Raw: 70 3d 67 2e 70 72 6f 78 79 3f 33 35 3a 38 34 3b 65 6c 73 65 20 69 66 28 70 3d 3d 33 35 29 70 3d 43 2b 38 3e 3e 33 3d 3d 31 3f 36 32 3a 34 33 3b 65 6c 73 65 20 69 66 28 70 3d 3d 31 35 29 70 3d 28 43 3c 3c 31 26 31 35 29 3d 3d 32 3f 33 32 3a 33 35 3b 65 6c 73 65 20 69 66 28 70 3d 3d 39 34 29 55 3d 6e 28 41 2c 32 34 2c 6d 29 3f 21 21 6d 2e 63 61 70 74 75 72 65 3a 21 21 6d 2c 28 54 3d 56 28 33 36 2c 63 29 29 7c 7c 28 63 5b 53 5f 5d 3d 54 3d 6e 65 77 20 58 53 28 63 29 29 2c 67 3d 54 2e 61 64 64 28 4a 2c 47 2c 6b 2c 55 2c 64 29 2c 70 3d 37 30 3b 65 6c 73 65 20 69 66 28 70 3d 3d 36 32 29 7b 69 66 28 67 3d 47 2e 4f 2e 56 5b 53 74 72 69 6e 67 28 41 29 5d 29 7b 66 6f 72 28 55 3d 28 67 3d 67 2e 63 6f 6e 63 61 74 28 29 2c 74 72 75 65 29 2c 4a 3d 45 3b 4a 3c 67 2e 6c Data Ascii: p=g.proxy?35:84;else if(p==35)p=C+8>>3==1?62:43;else if(p==15)p=(C<<1&15)==2?32:35;else if(p==94)U=n(A,24,m)?!!m.capture:!!m,(T=V(36,c))\|\|(c[S_]=T=new XS(c)),g=T.add(J,G,k,U,d),p=70;else if(p==62){if(g=G.O.V[String(A)]){for(U=(g=g.concat(),true),J=E;J<g.l
2024-10-01 18:33:52 UTC	1390	IN	Data Raw: 72 69 74 61 62 6c 65 3a 74 72 75 65 2c 76 61 6c 75 65 3a 70 7d 29 7d 7a 3d 35 7d 65 6c 73 65 7b 69 66 28 7a 3d 3d 33 37 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 63 6c 61 73 73 20 6e 61 6d 65 20 22 2b 41 29 3b 69 66 28 7a 3d 3d 35 30 29 7a 3d 28 43 7c 36 29 3e 3d 33 26 26 28 43 2b 38 26 38 29 3c 34 3f 34 39 3a 35 3b 65 6c 73 65 20 69 66 28 7a 3d 3d 34 39 29 7a 3d 64 3f 39 3a 35 3b 65 6c 73 65 7b 69 66 28 7a 3d 3d 34 33 29 72 65 74 75 72 6e 20 61 3b 69 66 28 7a 3d 3d 33 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 64 65 63 6f 72 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 20 22 2b 45 29 3b 7a 3d 3d 35 3f 7a 3d 43 3c 3c 31 26 37 3f 34 33 3a 36 34 3a 7a 3d 3d 38 38 26 26 28 7a 3d 74 79 70 65 6f 66 20 45 21 3d 3d 22 66 Data Ascii: ritable:true,value:p})}z=5}else{if(z==37)throw Error("Invalid class name "+A);if(z==50)z=(C\|6)>=3&&(C+8&8)<4?49:5;else if(z==49)z=d?9:5;else{if(z==43)return a;if(z==3)throw Error("Invalid decorator function "+E);z==5?z=C<<1&7?43:64:z==88&&(z=typeof E!=="f
2024-10-01 18:33:52 UTC	1390	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 28 43 29 7d 29 2c 63 3d 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 5d 2c 6d 3d 36 39 3b 65 6c 73 65 20 69 66 28 6d 3d 3d 37 35 29 74 68 69 73 2e 68 3d 43 2c 6d 3d 33 3b 65 6c 73 65 7b 69 66 28 6d 3d 3d 37 36 29 72 65 74 75 72 6e 20 63 3b 6d 3d 3d 36 39 3f 6d 3d 45 2d 33 3e 3e 33 3d 3d 31 3f 39 31 3a 38 32 3a 6d 3d 3d 35 30 3f 6d 3d 28 45 2d 33 7c 38 31 29 3c 45 26 26 45 2d 39 3c 3c 32 3e 3d 45 3f 33 38 3a 37 36 3a 6d 3d 3d 31 36 3f 28 47 3d 74 79 70 65 6f 66 20 41 2c 63 3d 47 3d 3d 43 26 26 41 21 3d 6e 75 6c 6c 7c 7c 47 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 6d 3d 35 30 29 3a 6d 3d 3d 38 32 3f 6d 3d 28 45 2b 37 26 34 32 29 3e 3d 45 26 26 45 2b 35 3e 3e 31 Data Ascii: (function(d){d(C)}),c=[function(){return C},function(){}],m=69;else if(m==75)this.h=C,m=3;else{if(m==76)return c;m==69?m=E-3>>3==1?91:82:m==50?m=(E-3\|81)<E&&E-9<<2>=E?38:76:m==16?(G=typeof A,c=G==C&&A!=null\|\|G=="function",m=50):m==82?m=(E+7&42)>=E&&E+5>>1
2024-10-01 18:33:52 UTC	1390	IN	Data Raw: 33 32 3a 33 31 3b 65 6c 73 65 20 69 66 28 55 3d 3d 37 30 29 55 3d 31 31 3b 65 6c 73 65 20 69 66 28 55 3d 3d 39 34 29 63 3d 47 2e 73 72 63 2c 55 3d 32 33 3b 65 6c 73 65 20 69 66 28 55 3d 3d 33 33 29 7b 69 66 28 63 2e 55 2e 6c 65 6e 67 74 68 29 7b 63 2e 47 6a 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 63 2e 74 63 3d 47 2c 63 2e 47 6a 3d 74 72 75 65 3b 74 72 79 7b 6b 3d 63 2e 50 28 29 2c 63 2e 65 57 3d 6b 2c 63 2e 46 68 3d 30 2c 63 2e 7a 6a 3d 30 2c 63 2e 62 39 3d 6b 2c 6d 3d 4c 24 28 31 2c 30 2c 35 2c 74 72 75 65 2c 6e 75 6c 6c 2c 47 2c 63 29 2c 4a 3d 41 3f 30 3a 31 30 2c 64 3d 63 2e 50 28 29 2d 63 2e 65 57 2c 63 2e 6a 57 2b 3d 64 2c 63 2e 53 57 26 26 63 2e 53 57 28 64 2d 63 2e 5a 2c 63 2e 59 2c 63 2e 73 2c 63 2e 46 68 29 2c 63 2e 73 3d 45 2c 63 2e 5a Data Ascii: 32:31;else if(U==70)U=11;else if(U==94)c=G.src,U=23;else if(U==33){if(c.U.length){c.Gj&&":TQR:TQR:"(),c.tc=G,c.Gj=true;try{k=c.P(),c.eW=k,c.Fh=0,c.zj=0,c.b9=k,m=L$(1,0,5,true,null,G,c),J=A?0:10,d=c.P()-c.eW,c.jW+=d,c.SW&&c.SW(d-c.Z,c.Y,c.s,c.Fh),c.s=E,c.Z
2024-10-01 18:33:52 UTC	1390	IN	Data Raw: 29 2c 43 2b 28 47 7c 2d 31 32 39 29 26 26 28 47 3d 28 6d 3d 47 26 31 32 37 2c 63 3d 76 68 28 33 2c 45 2c 74 72 75 65 29 3c 3c 37 2c 7e 28 6d 26 63 29 2d 32 2a 7e 28 6d 7c 63 29 2b 28 7e 6d 5e 63 29 29 29 2c 6b 3d 47 29 2c 6b 7d 2c 66 24 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 45 2c 41 2c 47 2c 63 2c 6d 2c 64 2c 6b 2c 4a 2c 55 2c 77 2c 67 2c 54 2c 70 29 7b 66 6f 72 28 67 3d 34 39 3b 67 21 3d 36 38 3b 29 69 66 28 67 3d 3d 31 34 29 6d 3d 41 2c 6d 3d 28 63 3d 6d 3c 3c 31 33 2c 28 63 7c 30 29 2b 7e 63 2d 28 7e 6d 5e 63 29 29 2c 6d 5e 3d 6d 3e 3e 31 37 2c 6d 5e 3d 6d 3c 3c 35 2c 28 6d 3d 28 6d 7c 47 29 2d 28 6d 26 7e 47 29 2d 28 7e 6d 26 47 29 29 7c 7c 28 6d 3d 31 29 2c 54 3d 7e 45 2b 7e 6d 2d 32 2a 7e 28 45 7c 6d 29 2c 67 3d 38 30 3b 65 6c 73 65 20 69 66 28 67 3d Data Ascii: ),C+(G\|-129)&&(G=(m=G&127,c=vh(3,E,true)<<7,~(m&c)-2~(m\|c)+(~m^c))),k=G),k},f$=function(C,E,A,G,c,m,d,k,J,U,w,g,T,p){for(g=49;g!=68;)if(g==14)m=A,m=(c=m<<13,(c\|0)+~c-(~m^c)),m^=m>>17,m^=m<<5,(m=(m\|G)-(m&~G)-(~m&G))\|\|(m=1),T=~E+~m-2~(E\|m),g=80;else if(g=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49876	142.250.185.198	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:52 UTC	464	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:52 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 18:31:19 GMT Expires: Tue, 01 Oct 2024 18:46:19 GMT Cache-Control: public, max-age=900 Age: 153 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:52 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49877	142.250.184.194	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:52 UTC	661	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:52 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Tue, 01 Oct 2024 18:33:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49875	142.250.185.150	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:52 UTC	693	OUT	GET /vi/eSnzhoiLwx8/default.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:52 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3197 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 17:19:48 GMT Expires: Tue, 01 Oct 2024 19:19:48 GMT Cache-Control: public, max-age=7200 Age: 4444 ETag: "1711119939" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:52 UTC	733	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 10 0a 0b 0d 0a 0b 0d 10 0b 0d 0e 0e 0d 0a 0d 0d 0d 0d 08 0a 0d 0f 08 08 0e 0a 0e 08 0d 0a 08 0f 0b 10 0b 0a 0d 0e 0d 08 0d 0d 15 10 0f 11 12 16 16 15 08 0d 22 18 17 12 18 1c 13 1f 12 01 05 05 05 08 07 08 0f 09 09 0f 15 15 12 13 1a 19 15 12 1e 15 13 15 15 15 12 18 17 12 1a 12 15 17 15 18 15 13 17 15 17 12 16 12 15 15 12 15 15 1e 17 15 15 1e 16 15 15 15 12 12 15 15 16 15 15 18 ff c0 00 11 08 00 5a 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 05 06 07 08 01 03 04 02 ff c4 00 4b 10 00 02 01 02 04 02 04 06 0d 09 06 07 00 00 00 00 01 02 03 00 11 04 05 12 21 13 31 06 22 41 a4 07 08 14 32 51 e4 17 23 44 52 54 61 71 81 92 94 Data Ascii: JFIF"Zx"K!1"A2Q#DRTaq
2024-10-01 18:33:52 UTC	1390	IN	Data Raw: b9 36 dc 6f b8 af 58 ee 8e cd 17 1b 5c 76 e0 68 e3 10 d1 48 23 33 31 58 c3 b2 39 00 96 04 5b 98 b6 f6 aa 1d c3 0d 6e 9d 9d 96 e8 f9 2f ed ad eb 68 d1 1e 03 c3 66 65 f0 84 fa be 13 ee eb 3e cd b9 97 c2 13 ea f8 4f bb a6 94 3d 16 c4 32 a3 88 ba b2 2e b4 63 26 1d 46 80 8f 25 dc 99 07 08 70 e2 77 1a f4 dc 46 d6 bd 79 9f a3 53 a6 90 d1 69 2f 21 81 14 bc 21 da 75 73 1b 28 87 5f 13 69 14 ae ab 69 b8 e7 5c fe 03 0b ad 3b 3b 1f 4c 3e fe 0f 71 3a 3e 43 bf d9 b7 32 f8 42 7d 5f 09 f7 74 7b 36 e6 5f 08 4f ab e1 3e ee 99 f1 74 6e 76 d5 68 88 d3 21 c3 90 cd 12 1f 28 42 03 a2 2b 38 32 32 96 17 d1 7b 6a 17 b5 68 9f 26 95 23 32 b2 10 80 90 58 94 f3 92 43 13 8b 5e e6 d2 02 bf 37 a2 a5 61 b8 63 74 56 76 5e 98 72 23 44 90 b2 6f 0c 99 8c b3 45 13 62 14 07 91 23 36 c3 e0 ef 69 Data Ascii: 6oX\vhH#31X9[n/hfe>O=2.c&F%pwFySi/!!us(_ii\;;L>q:>C2B}_t{6_O>tnvh!(B+822{jh&#2XC^7actVv^r#DoEb#6i
2024-10-01 18:33:52 UTC	1074	IN	Data Raw: 8a 8d 7e 26 08 58 31 e1 e8 04 ac ad 15 8e b7 b9 57 6d 3c 31 7e 6d a1 bd e5 4b ef 97 e9 2f db 47 95 2f be 5f a4 bf 6d 00 e3 8f 23 8c b6 93 8b 88 0b 13 aa c3 98 31 84 06 ee 05 da f2 1d 89 b0 81 6f e7 2d b9 7f b3 16 d7 e3 27 e5 1e 3b 5e 2d 5a 11 59 91 ec 65 02 ce c8 50 5c 80 09 5b b0 b8 a4 6f 2a 5f 7c bf 49 7e da 3c a9 7d f2 fd 25 fb 68 07 16 0f 26 89 d4 93 8a 44 36 be 96 08 0d fa e0 af e5 ac 48 31 f3 04 82 24 43 7d eb 5c 59 54 64 80 71 28 b7 58 5a e4 6c 24 c4 16 0e 87 af b7 08 81 a9 8e dd 6b 9b 2e f4 84 31 4b ef d7 e9 2f db 59 f2 a5 f7 eb f4 97 ed ae 6a 40 bf 06 5c 82 e7 ca 10 5b 55 ae 21 20 e8 0a 55 80 13 93 a5 b5 1b 0b 6b ea 9e a5 f6 ad 98 ec 3a ae a6 f2 88 df 4e bd 21 52 32 59 93 8d a7 6e 2d b4 38 89 6c c0 b1 bc c0 15 e5 a9 27 23 c4 21 9e 10 59 5a f2 c6 Data Ascii: ~&X1Wm<1~mK/G/_m#1o-';^-ZYeP\[o*_\|I~<}%h&D6H1$C}\YTdq(XZl$k.1K/Yj@\[U! Uk:N!R2Yn-8l'#!YZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49878	142.250.184.194	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:52 UTC	661	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:52 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Tue, 01 Oct 2024 18:33:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49880	142.250.185.150	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:52 UTC	693	OUT	GET /vi/JCcqzCo7X-M/default.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:53 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3067 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 17:19:48 GMT Expires: Tue, 01 Oct 2024 19:19:48 GMT Cache-Control: public, max-age=7200 Age: 4444 ETag: "1685634630" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:53 UTC	733	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0f 10 0d 0e 0b 0f 09 0d 0d 11 0d 0d 10 0e 0e 0d 0d 0a 0f 0d 09 0f 0b 0d 0d 08 0a 0e 0d 0a 0d 0d 10 10 0f 0e 0f 0e 0e 0a 0a 0f 15 0d 11 11 1d 15 13 13 0d 0d 16 18 17 12 1a 11 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 1a 15 11 15 18 13 17 15 1e 1e 1b 18 16 16 18 18 1a 1b 15 15 19 17 15 15 15 15 1e 1a 19 16 17 1c 17 1a 17 15 17 15 15 1e 17 15 15 18 15 15 17 15 17 17 17 15 17 16 ff c0 00 11 08 00 5a 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 03 06 01 04 07 08 02 ff c4 00 3d 10 00 02 01 02 03 05 04 06 07 07 05 00 00 00 00 00 01 02 03 00 11 04 12 21 05 13 22 31 41 06 51 91 d1 07 14 15 32 52 a1 23 53 61 71 92 b1 c1 08 Data Ascii: JFIFZx"=!"1AQ2R#Saq
2024-10-01 18:33:53 UTC	1390	IN	Data Raw: cc 54 84 62 b6 0d 90 f2 39 49 00 db 96 97 ad 9f 67 49 a1 dc 49 c4 a5 d4 ee da c6 30 01 2e ba 6a a0 10 4b 0d 00 22 af 9e 90 9a db 0b 60 9e e7 da df fa b0 5c ab d3 1b 67 64 b0 c4 6c cc 31 81 e3 4c 33 62 76 2c 65 e3 28 b2 e1 e6 d8 18 6c 40 68 af 61 22 7a c6 0d a3 0e 34 bc 6e 3a 1a b6 33 08 da 00 1c fc 95 30 a6 32 38 92 79 1f ba f1 4c 98 27 00 93 13 80 02 b1 25 18 00 af ee 12 48 d0 3d 8e 53 d7 a5 ea 0a f5 4f ed 4b 84 58 36 71 75 e5 89 1b 33 02 7b b3 ec ff 00 de 27 71 6f f8 b2 28 fb ed 5c ef d1 d7 a0 89 71 38 64 c6 34 c0 2c a0 14 8d 4e 57 e3 f7 0b 39 47 1a 8e 99 2d 72 bc 5c ea 35 4e d5 82 96 31 24 c6 d7 36 16 04 93 95 f4 03 fc 5c 3a 8d d8 f0 b3 3c ae b8 d5 15 e8 75 fd 9c f4 be f2 6b 5a fa 4a 84 58 8c c3 fa 3d 45 ad df 71 4b fb 4b fb 3a 4a 88 f2 47 88 08 23 56 Data Ascii: Tb9IgII0.jK"`\gdl1L3bv,e(l@ha"z4n:3028yL'%H=SOKX6qu3{'qo(\q8d4,NW9G-r\5N1$6\:<ukZJX=EqKK:JG#V
2024-10-01 18:33:53 UTC	944	IN	Data Raw: 70 10 00 1a 36 92 e7 2c 85 03 29 c3 95 b1 8a 45 70 e5 b3 38 92 e7 dd 16 e7 66 9e b7 6a 65 26 e7 21 23 96 8c 80 02 58 d9 44 6c a0 1b 31 5c e0 66 c9 c1 9b 29 60 68 ea f6 49 3f a7 9f f1 16 b5 80 b0 c1 ee a6 c7 54 3e af 7f ed 35 21 9e 3b 49 34 e4 3c 01 8c 2b 03 2b 3b 46 55 d8 b1 10 64 2a 32 44 82 42 4e 56 95 18 b5 94 ab 4e f2 93 20 b6 23 1b 30 fa 49 25 cb 0b 92 65 46 8d 63 64 56 4b 00 f8 8c 2d c0 6f 70 05 42 54 ab de b7 88 db 8e ca 51 92 32 ad 62 cb bb b2 97 55 8e 34 7b 29 00 14 48 d1 40 5b 2d 81 ba 9c cd 79 71 1d a6 95 98 39 29 75 6c c2 d1 80 01 de 61 a7 3e ed af 79 30 d1 b1 be b7 cd cb 31 ae 0e cd 9b 90 e3 ca c2 e0 0c bf 0e bd 46 80 e7 a0 eb 78 67 3f 9f 74 e2 79 20 55 0a d8 b9 d5 a3 52 a1 1e 2c e8 a0 e4 87 23 45 24 40 32 98 22 8b 84 9b 5f 5e 7a 14 9b 47 6c Data Ascii: p6,)Ep8fje&!#XDl1\f)`hI?T>5!;I4<++;FUd*2DBNVN #0I%eFcdVK-opBTQ2bU4{)H@[-yq9)ula>y01Fxg?ty UR,#E$@2"_^zGl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49882	142.250.185.150	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:53 UTC	699	OUT	GET /vi_webp/pD218Mqhqms/default.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:53 UTC	622	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2664 Date: Tue, 01 Oct 2024 18:33:53 GMT Expires: Tue, 01 Oct 2024 20:33:53 GMT Cache-Control: public, max-age=7200 ETag: "1585940789" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:53 UTC	768	IN	Data Raw: 52 49 46 46 60 0a 00 00 57 45 42 50 56 50 38 20 54 0a 00 00 70 2b 00 9d 01 2a 78 00 5a 00 3e 6d 1c 9b 4d a4 21 24 24 15 50 80 0d 89 48 8e e4 0a a3 ee f3 5e cb 9a b8 2a 7e 65 fa 3f d1 7a bb fb 80 df 89 e6 03 ce ef d1 5f 94 07 59 37 a0 07 4a cf f7 9f f8 3e 96 95 96 79 c1 f5 67 b5 fc ca a2 59 da bf ed fc b8 ff 6b e0 ff c5 2f e8 3d 40 bd 7f fe 23 d1 0f dc 3b 55 34 4f f2 5f ea bd 40 bd a7 fa 67 f9 df 06 af eb fd 03 fa fd fe e3 d5 2f f5 7f 4b 7f aa f8 42 7d 87 fc 3f b0 07 f2 7f e9 5f ee 3d 99 ff 96 ff dd fe 8f ce 9f d2 ff b4 1f 01 bf af 5e 99 5e b7 bf 6d bd 94 ff 53 94 0b 08 35 2d ff e2 9a 5e 58 87 d0 81 b7 bf d1 2d 8d f1 cb 67 94 0d 3f 47 19 f5 39 c3 9b 2a 79 1b 76 de d0 f3 1d 63 e3 ba 03 76 c0 69 62 b2 1d d7 6b 10 bc d9 4f 32 a2 6d b3 53 16 e6 2d 1d 9e 5d cf Data Ascii: RIFF`WEBPVP8 Tp+xZ>mM!$$PH^~e?z_Y7J>ygYk/=@#;U4O_@g/KB}?_=^^mS5-^X-g?G9*yvcvibkO2mS-]
2024-10-01 18:33:53 UTC	1390	IN	Data Raw: 1d a1 c1 3d 55 79 fb 75 c5 e8 6b 1f 83 79 ff 16 60 cb f5 c0 7a ab 57 57 87 a1 53 39 81 21 65 9a 03 6d 40 d6 cd db 35 4e 57 19 6b eb 7d a8 7c ca 3e 3f e9 dc 58 ac 65 13 2c b5 4b 17 24 f5 83 5a e2 29 89 65 f4 87 8d 15 19 99 0f 04 5d ab b3 c7 16 6f 55 65 54 38 1e 64 72 8a 88 21 73 38 9b 36 4c e7 7d 8f 07 9b c8 73 22 2d 4a f2 a2 8d 37 e7 23 88 df b8 cd 29 9f b4 50 eb 18 6f 2a e3 78 6f 35 a1 6d f6 e3 df e2 57 9f d8 34 4e 1a 1e f3 91 68 b5 42 85 3e c6 d8 8e fa bd fb 3f c4 8a 95 ed ee df 78 15 de 2e 7d dd 7c f1 3c 90 9c 77 49 32 41 fa 95 57 35 fe 4f d1 f4 b3 bf e0 ae 5e 1e 6a 89 76 09 bc 2b ea ab b8 27 0f 71 dc 9b 00 39 6a 3a 56 cb 41 73 98 8d a1 51 12 4c a8 9f 68 6a dd 38 f5 e7 1d 99 0d 99 99 d2 c5 02 fd 08 f2 70 86 c0 5a 7a 56 b0 c3 ae e2 81 d3 01 8b 70 49 f8 Data Ascii: =Uyuky`zWWS9!em@5NWk}\|>?Xe,K$Z)e]oUeT8dr!s86L}s"-J7#)Po*xo5mW4NhB>?x.}\|<wI2AW5O^jv+'q9j:VAsQLhj8pZzVpI
2024-10-01 18:33:53 UTC	506	IN	Data Raw: bf af 8d b9 26 8b 27 2c 1c a1 18 71 de 19 2f 64 02 00 5d 9a 34 6f 6d 0b a1 7e 49 ff fb 4e bd df 6e 6f 37 88 17 a8 5d 22 cb de 59 ac 3f 92 0d d8 0f 46 e5 a1 7f fe 39 4e bf f9 06 ef ac bf 11 2c 75 73 53 7e 5e 19 33 61 84 42 d2 cc bb 89 97 68 9a 9a 5d 9c 3b 84 f1 bd a1 75 28 a2 66 98 84 6a 24 ca 71 10 f9 cb 48 c7 e2 78 16 69 63 7b b4 f0 a4 a3 a4 99 d9 e5 cf 51 dd 4d 9e 0f ff 29 cf f9 0a 3c b9 4c 73 49 23 03 14 b7 14 77 9b c8 b9 dc d5 ad 8e 94 de d7 91 f7 c7 8e d2 b9 eb 9e 85 ab 51 8b d4 8b 0d d2 f5 72 13 22 09 c3 4d a5 fa 95 d7 11 53 e7 2d d0 ca bc 3f 8b 5c 81 6c 83 77 9a ed 2d 58 80 65 7f 03 11 f7 21 7b 49 ad 08 b4 57 fc eb f7 51 7d f9 14 72 50 82 b8 3c b8 4b 4f 74 9d 2b c8 af c6 1a 14 ed c0 ad bc 53 62 7b 41 8b 35 3d 7b 63 24 33 92 8a 9c 8d 39 b5 e9 59 00 Data Ascii: &',q/d]4om~INno7]"Y?F9N,usS~^3aBh];u(fj$qHxic{QM)<LsI#wQr"MS-?\lw-Xe!{IWQ}rP<KOt+Sb{A5={c$39Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49884	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:53 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:53 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:33:53 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49885	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:53 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:53 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:33:53 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49887	142.250.184.228	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:54 UTC	487	OUT	GET /js/th/t-IqUp8Jbddkqbic8L7iPCHeaww4UxHeW5fnd9iEy1U.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:54 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 54732 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 14:17:55 GMT Expires: Wed, 01 Oct 2025 14:17:55 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 23 Sep 2024 09:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 15359 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:33:54 UTC	579	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-10-01 18:33:54 UTC	1390	IN	Data Raw: 74 65 64 54 79 70 65 73 2c 74 3d 41 2c 65 3d 35 36 3b 65 6c 73 65 7b 69 66 28 65 3d 3d 37 38 29 72 65 74 75 72 6e 20 74 3b 65 3d 3d 34 26 26 28 43 3d 38 39 2c 74 3d 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 54 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6b 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 6b 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 6b 7d 29 2c 65 3d 35 33 29 7d 7d 7d 63 61 74 63 68 28 51 29 7b 69 66 28 43 3d 3d 38 33 29 74 68 72 6f 77 20 51 3b 43 3d 3d 38 39 26 26 28 61 3d 51 2c 65 3d 4c 29 7d 7d 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 79 2c 4c 29 7b 72 65 74 75 72 6e 28 4c 3d 63 28 34 31 2c 39 39 2c 38 32 2c 33 33 2c 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 29 29 26 26 79 2e 65 76 61 6c 28 4c 2e 63 72 65 61 74 Data Ascii: tedTypes,t=A,e=56;else{if(e==78)return t;e==4&&(C=89,t=w.createPolicy(T,{createHTML:k,createScript:k,createScriptURL:k}),e=53)}}}catch(Q){if(C==83)throw Q;C==89&&(a=Q,e=L)}};(0,eval)(function(y,L){return(L=c(41,99,82,33,null,"error","ad"))&&y.eval(L.creat
2024-10-01 18:33:54 UTC	1390	IN	Data Raw: 51 3d 4d 2e 58 2e 70 6f 70 28 29 2c 41 3d 37 38 3b 65 6c 73 65 20 69 66 28 41 3d 3d 31 32 29 41 3d 6c 26 26 4d 2e 68 3f 31 3a 37 39 3b 65 6c 73 65 20 69 66 28 41 3d 3d 37 39 29 41 3d 35 31 3b 65 6c 73 65 20 69 66 28 41 3d 3d 35 31 29 41 3d 4d 2e 58 2e 6c 65 6e 67 74 68 3f 36 3a 39 37 3b 65 6c 73 65 7b 69 66 28 41 3d 3d 36 38 29 72 65 74 75 72 6e 20 75 3b 41 3d 3d 39 37 3f 28 75 3d 61 2c 41 3d 36 38 29 3a 41 3d 3d 35 35 3f 28 6b 3d 35 30 2c 74 48 28 33 30 2c 77 2c 34 37 2c 4d 2c 22 3a 22 29 2c 41 3d 36 36 29 3a 41 3d 3d 34 30 3f 41 3d 28 65 2d 32 5e 32 30 29 3c 65 26 26 28 65 2b 39 26 33 31 29 3e 3d 65 3f 36 37 3a 36 38 3a 41 3d 3d 39 35 3f 41 3d 28 65 2d 37 5e 31 31 29 3c 65 26 26 28 65 2b 36 26 31 39 29 3e 3d 65 3f 32 37 3a 34 30 3a 41 3d 3d 32 39 3f 41 Data Ascii: Q=M.X.pop(),A=78;else if(A==12)A=l&&M.h?1:79;else if(A==79)A=51;else if(A==51)A=M.X.length?6:97;else{if(A==68)return u;A==97?(u=a,A=68):A==55?(k=50,tH(30,w,47,M,":"),A=66):A==40?A=(e-2^20)<e&&(e+9&31)>=e?67:68:A==95?A=(e-7^11)<e&&(e+6&19)>=e?27:40:A==29?A
2024-10-01 18:33:54 UTC	1390	IN	Data Raw: 61 72 67 65 74 3d 65 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3d 74 68 69 73 2e 73 66 3d 66 61 6c 73 65 2c 77 3d 36 33 3b 65 6c 73 65 20 69 66 28 77 3d 3d 36 33 29 77 3d 28 79 26 37 37 29 3d 3d 79 3f 31 38 3a 34 33 3b 65 6c 73 65 20 69 66 28 77 3d 3d 38 36 29 43 2e 73 72 63 3d 4c 2c 4d 5b 51 4a 5d 3d 4c 2c 77 3d 36 39 3b 65 6c 73 65 7b 69 66 28 77 3d 3d 38 33 29 72 65 74 75 72 6e 20 6b 3b 77 3d 3d 36 39 3f 77 3d 28 79 3c 3c 31 26 31 31 29 3d 3d 32 3f 35 35 3a 36 33 3a 77 3d 3d 38 37 3f 28 65 28 66 75 6e 63 74 69 6f 6e 28 75 29 7b 75 28 4c 29 7d 29 2c 6b 3d 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 5d 2c 77 3d 38 33 29 3a 77 3d 3d 36 3f 28 70 28 65 2c 35 30 2c 64 2c 43 29 Data Ascii: arget=e,this.defaultPrevented=this.sf=false,w=63;else if(w==63)w=(y&77)==y?18:43;else if(w==86)C.src=L,M[QJ]=L,w=69;else{if(w==83)return k;w==69?w=(y<<1&11)==2?55:63:w==87?(e(function(u){u(L)}),k=[function(){return L},function(){}],w=83):w==6?(p(e,50,d,C)
2024-10-01 18:33:54 UTC	1390	IN	Data Raw: 6b 3d 3d 34 34 29 62 28 74 72 75 65 2c 35 2c 30 2c 64 2c 43 2c 4d 2c 6c 2c 61 5b 51 5d 29 2c 6b 3d 32 33 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 31 35 29 79 2e 63 6c 61 73 73 4c 69 73 74 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 77 29 7b 63 63 28 22 20 22 2c 37 32 2c 22 63 6c 61 73 73 22 2c 31 2c 22 73 74 72 69 6e 67 22 2c 79 2c 77 29 7d 29 3a 62 28 79 2c 31 31 2c 22 73 74 72 69 6e 67 22 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 70 28 22 63 6c 61 73 73 22 2c 36 2c 79 29 2c 66 75 6e 63 74 69 6f 6e 28 77 29 7b 72 65 74 75 72 6e 21 28 45 28 31 2c 32 35 2c 77 2c 65 29 3e 3d 30 29 7d 29 2e 6a 6f 69 6e 28 22 20 22 29 29 2c 6b 3d 39 38 3b 65 Data Ascii: k==44)b(true,5,0,d,C,M,l,a[Q]),k=23;else if(k==15)y.classList?Array.prototype.forEach.call(e,function(w){cc(" ",72,"class",1,"string",y,w)}):b(y,11,"string",Array.prototype.filter.call(p("class",6,y),function(w){return!(E(1,25,w,e)>=0)}).join(" ")),k=98;e
2024-10-01 18:33:54 UTC	1390	IN	Data Raw: 5d 29 26 26 6c 5b 64 5d 3d 3d 4d 61 74 68 29 7b 63 3d 6c 3b 62 72 65 61 6b 20 61 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 44 3d 36 31 7d 65 6c 73 65 20 69 66 28 44 3d 3d 36 37 29 44 3d 64 2e 63 6c 61 73 73 4c 69 73 74 3f 32 39 3a 31 34 3b 65 6c 73 65 7b 69 66 28 44 3d 3d 36 31 29 72 65 74 75 72 6e 20 63 3b 69 66 28 44 3d 3d 37 37 29 44 3d 6c 3f 39 30 3a 33 34 3b 65 6c 73 65 20 69 66 28 44 3d 3d 35 29 44 3d 28 65 7c 37 32 29 3d 3d 65 3f 33 38 3a 36 31 3b 65 6c 73 65 20 69 66 28 44 3d 3d 39 30 29 7b 61 3a 7b 66 6f 72 28 61 3d 28 41 3d 4d 2e 73 70 6c 69 74 28 28 75 3d 45 64 2c 79 29 29 2c 43 29 3b 61 3c 41 2e 6c 65 6e 67 74 68 2d 4c 3b 61 2b 2b 29 7b 69 66 28 21 28 51 3d Data Ascii: ])&&l[d]==Math){c=l;break a}throw Error("Cannot find global object");}D=61}else if(D==67)D=d.classList?29:14;else{if(D==61)return c;if(D==77)D=l?90:34;else if(D==5)D=(e\|72)==e?38:61;else if(D==90){a:{for(a=(A=M.split((u=Ed,y)),C);a<A.length-L;a++){if(!(Q=
2024-10-01 18:33:54 UTC	1390	IN	Data Raw: 66 28 41 3d 3d 37 32 29 41 3d 28 4c 7c 39 29 3e 3d 32 37 26 26 28 4c 5e 37 39 29 3c 34 32 3f 31 35 3a 36 30 3b 65 6c 73 65 20 69 66 28 41 3d 3d 32 31 29 51 3d 79 2c 41 3d 34 38 3b 65 6c 73 65 7b 69 66 28 41 3d 3d 36 30 29 72 65 74 75 72 6e 20 75 3b 41 3d 3d 33 39 3f 41 3d 74 68 69 73 2e 5a 2e 6c 65 6e 67 74 68 3c 35 30 3f 37 38 3a 31 38 3a 41 3d 3d 33 36 3f 41 3d 6c 26 26 6c 2e 6f 6e 63 65 3f 36 34 3a 38 32 3a 41 3d 3d 32 34 3f 41 3d 51 3c 64 2e 6c 65 6e 67 74 68 3f 31 39 3a 35 3a 41 3d 3d 35 3f 41 3d 28 4c 2d 35 5e 32 37 29 3e 3d 4c 26 26 28 4c 2b 39 5e 32 36 29 3c 4c 3f 38 30 3a 37 32 3a 41 3d 3d 34 30 3f 28 53 28 22 6f 62 6a 65 63 74 22 2c 35 34 2c 30 2c 64 2c 43 2c 4d 2c 6c 2c 61 5b 51 5d 29 2c 41 3d 38 38 29 3a 41 3d 3d 32 33 3f 41 3d 28 28 4c 5e 31 Data Ascii: f(A==72)A=(L\|9)>=27&&(L^79)<42?15:60;else if(A==21)Q=y,A=48;else{if(A==60)return u;A==39?A=this.Z.length<50?78:18:A==36?A=l&&l.once?64:82:A==24?A=Q<d.length?19:5:A==5?A=(L-5^27)>=L&&(L+9^26)<L?80:72:A==40?(S("object",54,0,d,C,M,l,a[Q]),A=88):A==23?A=((L^1
2024-10-01 18:33:54 UTC	1390	IN	Data Raw: 68 48 2c 61 2c 64 3f 4d 2b 31 3a 4d 2c 43 2e 6f 2c 43 2e 4a 5d 29 2c 43 2e 68 3d 61 71 2c 41 3d 4c 29 29 3a 41 3d 66 61 6c 73 65 2c 31 30 29 7d 65 6c 73 65 20 44 3d 3d 34 37 3f 44 3d 31 34 3a 44 3d 3d 31 34 3f 44 3d 28 65 2b 39 5e 31 39 29 3c 65 26 26 65 2d 32 3c 3c 31 3e 3d 65 3f 32 30 3a 33 30 3a 44 3d 3d 33 30 26 26 28 44 3d 28 65 7c 34 29 3e 3d 31 37 26 26 65 3e 3e 32 3c 32 30 3f 37 33 3a 31 30 29 7d 7d 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4c 2c 79 2c 64 2c 43 2c 4d 2c 6c 2c 61 2c 51 2c 74 2c 6b 2c 77 2c 75 2c 41 29 7b 66 6f 72 28 75 3d 32 33 3b 75 21 3d 39 34 3b 29 69 66 28 75 3d 3d 36 32 29 7b 69 66 28 77 3d 64 2e 6c 2e 52 5b 53 74 72 69 6e 67 28 4c 29 5d 29 7b 66 6f 72 28 77 3d 77 2e 63 6f 6e 63 61 74 28 29 2c 6c 3d 74 72 75 65 2c 61 3d 79 3b Data Ascii: hH,a,d?M+1:M,C.o,C.J]),C.h=aq,A=L)):A=false,10)}else D==47?D=14:D==14?D=(e+9^19)<e&&e-2<<1>=e?20:30:D==30&&(D=(e\|4)>=17&&e>>2<20?73:10)}},N=function(e,L,y,d,C,M,l,a,Q,t,k,w,u,A){for(u=23;u!=94;)if(u==62){if(w=d.l.R[String(L)]){for(w=w.concat(),l=true,a=y;
2024-10-01 18:33:54 UTC	1390	IN	Data Raw: 65 2c 61 2e 6c 69 76 65 3d 22 6f 66 66 22 2c 61 2e 6d 75 6c 74 69 6c 69 6e 65 3d 66 61 6c 73 65 2c 61 2e 6d 75 6c 74 69 73 65 6c 65 63 74 61 62 6c 65 3d 66 61 6c 73 65 2c 61 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 3d 22 76 65 72 74 69 63 61 6c 22 2c 61 2e 72 65 61 64 6f 6e 6c 79 3d 66 61 6c 73 65 2c 61 2e 72 65 6c 65 76 61 6e 74 3d 22 61 64 64 69 74 69 6f 6e 73 20 74 65 78 74 22 2c 61 2e 72 65 71 75 69 72 65 64 3d 66 61 6c 73 65 2c 61 2e 73 6f 72 74 3d 64 2c 61 2e 62 75 73 79 3d 66 61 6c 73 65 2c 61 2e 64 69 73 61 62 6c 65 64 3d 66 61 6c 73 65 2c 61 2e 68 69 64 64 65 6e 3d 66 61 6c 73 65 2c 61 2e 69 6e 76 61 6c 69 64 3d 79 2c 61 29 2c 77 3d 32 32 3b 65 6c 73 65 7b 69 66 28 77 3d 3d 34 35 29 72 65 74 75 72 6e 20 6b 3b 77 3d 3d 32 32 3f 28 74 3d 4a 48 2c 4d 20 Data Ascii: e,a.live="off",a.multiline=false,a.multiselectable=false,a.orientation="vertical",a.readonly=false,a.relevant="additions text",a.required=false,a.sort=d,a.busy=false,a.disabled=false,a.hidden=false,a.invalid=y,a),w=22;else{if(w==45)return k;w==22?(t=JH,M
2024-10-01 18:33:54 UTC	1390	IN	Data Raw: 2c 41 29 7d 2c 4c 3d 5a 47 2c 6b 3d 77 2c 75 3d 32 32 29 3a 75 3d 3d 36 36 26 26 28 4d 3d 64 2e 6c 65 6e 67 74 68 2c 61 3d 74 79 70 65 6f 66 20 64 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 64 2e 73 70 6c 69 74 28 79 29 3a 64 2c 6c 3d 4c 2c 75 3d 39 36 29 7d 7d 2c 74 48 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 4c 2c 79 2c 64 2c 43 2c 4d 2c 6c 2c 61 29 7b 66 6f 72 28 6c 3d 35 34 3b 6c 21 3d 36 36 3b 29 69 66 28 6c 3d 3d 65 29 61 3d 74 79 70 65 6f 66 20 4c 2e 63 6c 61 73 73 4e 61 6d 65 3d 3d 22 73 74 72 69 6e 67 22 3f 4c 2e 63 6c 61 73 73 4e 61 6d 65 3a 4c 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 4c 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 64 29 7c 7c 43 2c 6c 3d 33 31 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 35 30 29 6c 3d 28 28 79 5e 33 32 29 26 37 29 3d 3d 32 3f 65 Data Ascii: ,A)},L=ZG,k=w,u=22):u==66&&(M=d.length,a=typeof d==="string"?d.split(y):d,l=L,u=96)}},tH=function(e,L,y,d,C,M,l,a){for(l=54;l!=66;)if(l==e)a=typeof L.className=="string"?L.className:L.getAttribute&&L.getAttribute(d)\|\|C,l=31;else if(l==50)l=((y^32)&7)==2?e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49889	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:54 UTC	784	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 587 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:54 UTC	587	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 33 31 32 39 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1727807631294",null,null,null
2024-10-01 18:33:54 UTC	928	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=Gadoey1HnxEjx_T1qTFLTMVArI0E5y6vdcl_JMUG3xNWHzBb6qNrD4jVZ64DFGwsARiaC4D3_8wTFhGuK5pTXI2or6kdXTDtqdRPg08yvxgw6O0zz1wi7qk4S3illYqZMTwmhu8ZyWfUhyYAfpo1L5_YnlmitX6gMUnE1XE4kLa8thcaBg; expires=Wed, 02-Apr-2025 18:33:54 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:33:54 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 01 Oct 2024 18:33:54 GMT Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:54 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:33:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49888	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:54 UTC	785	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1262 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:54 UTC	1262	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 33 31 32 38 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1727807631281",null,null,null
2024-10-01 18:33:54 UTC	929	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=QLaYzx8qqZ0pISzfk0Kujp4fYLBXxda3sAZuAromiatXBC7laBTUewa9sioBWcutr2IuhxEwJosw92Zxejw3YWW2JL6zyEkl489imP4NnDUlgtYxEqlfz0BmiZ8zolyYV1S9XWt-MjOKhtlKGSQq5toMwc7B_vwN6W0bQm_cRqzPGvnUNSQ; expires=Wed, 02-Apr-2025 18:33:54 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:33:54 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 01 Oct 2024 18:33:54 GMT Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:54 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:33:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49894	142.250.184.194	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:54 UTC	670	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:55 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Tue, 01 Oct 2024 18:33:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:55 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 6f 6d 54 69 72 64 4a 49 6e 41 38 36 59 6a 39 45 53 4c 74 69 6c 4e 68 5f 78 41 66 51 5a 38 51 69 6d 68 2d 63 46 4b 78 74 51 59 68 33 59 79 50 67 64 42 6d 36 77 64 44 56 63 6b 4f 59 51 52 38 7a 56 56 69 65 32 77 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKomTirdJInA86Yj9ESLtilNh_xAfQZ8Qimh-cFKxtQYh3YyPgdBm6wdDVckOYQR8zVVie2w","type":4}
2024-10-01 18:33:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49891	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:55 UTC	785	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1246 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:55 UTC	1246	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 33 32 37 30 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1727807632704",null,null,null
2024-10-01 18:33:55 UTC	928	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=WGFGrW9xl28_WZ8qZG0WwJE_K-9upDq1NDRxEkdnie8mw6rtDW3oymqilyREBnXXY5pMJJ92R2jsKJxYLOLG7qhkUTEC8a5jPdO7aux5GsQLDz4FAiXv1pULiJnjJunwBWlA3wIHYLnbmmtN5g0fhdZLmgOwIMxC6Q3iIXFvzNJ5FNW20A; expires=Wed, 02-Apr-2025 18:33:55 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:33:55 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 01 Oct 2024 18:33:55 GMT Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:55 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:33:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49892	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:55 UTC	784	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 586 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:55 UTC	586	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 33 33 31 36 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1727807633161",null,null,null
2024-10-01 18:33:55 UTC	929	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=mXmCwEulfv6iQK6LMcm2B4FtbaZY9g1Qlhg_ibVuZLscMoWZCV2VXSjJzUJHz9gI5HzA3K-NABR9zkO97kUiOdmzLHJ-I7p-iBLZqvaB7MnxAeTxYaaxW3vvl5oql1L2ynUELG9EZUzW6miRbsL1JIzsAOM3QTMvlrGpQT1tBtzg1KXBJkw; expires=Wed, 02-Apr-2025 18:33:55 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:33:55 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 01 Oct 2024 18:33:55 GMT Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:55 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:33:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49897	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:56 UTC	982	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1215 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=QLaYzx8qqZ0pISzfk0Kujp4fYLBXxda3sAZuAromiatXBC7laBTUewa9sioBWcutr2IuhxEwJosw92Zxejw3YWW2JL6zyEkl489imP4NnDUlgtYxEqlfz0BmiZ8zolyYV1S9XWt-MjOKhtlKGSQq5toMwc7B_vwN6W0bQm_cRqzPGvnUNSQ
2024-10-01 18:33:56 UTC	1215	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 33 34 31 37 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1727807634175",null,null,null
2024-10-01 18:33:56 UTC	937	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=2FYLv7o7ba0VNRfwkUrEnTil7hPDRl_U19f8cS_yPYCqY8bbOSqAP08HePvlnaSEkwoZ2cAB0yBdq7OZrIT-ahrDoiB3HNPduraoFiUDq9RXHPSJGObFJEmcL2ywHM3X0s4B9gx4oV6lGYtOVVC0sU6JD1cV3h3vuyC-_SsJ99HsR_tI5CgbhTkZw2A; expires=Wed, 02-Apr-2025 18:33:56 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:33:56 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 01 Oct 2024 18:33:56 GMT Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:56 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:33:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49896	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:56 UTC	981	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 572 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=QLaYzx8qqZ0pISzfk0Kujp4fYLBXxda3sAZuAromiatXBC7laBTUewa9sioBWcutr2IuhxEwJosw92Zxejw3YWW2JL6zyEkl489imP4NnDUlgtYxEqlfz0BmiZ8zolyYV1S9XWt-MjOKhtlKGSQq5toMwc7B_vwN6W0bQm_cRqzPGvnUNSQ
2024-10-01 18:33:56 UTC	572	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 33 34 32 31 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1727807634214",null,null,null
2024-10-01 18:33:56 UTC	937	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=xDzVamX_75oeV4joWx5W9BYfBUguTrvM3T3qmKLcbdIMX7-ss2kv63WKzWebH0DGJ_kJPZ3LzE2vYOoWiwqMA6bIAsPkJvvVf2_AOXIOKMEGHR91Z-6YZCvqyFUilQOzfcI3ErhjL3xnCcdNKKtNdUNyU0WuPQU1cn-b2TLDfsljdee1C-yPe79TKB8; expires=Wed, 02-Apr-2025 18:33:56 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:33:56 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 01 Oct 2024 18:33:56 GMT Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:56 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:33:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49899	142.250.184.194	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:56 UTC	670	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:33:56 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Tue, 01 Oct 2024 18:33:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:56 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 72 51 6c 45 47 4e 64 73 77 4d 53 59 4e 31 6d 5a 72 76 31 4d 32 67 55 70 6e 6c 77 42 51 4e 34 4a 58 49 38 2d 72 49 76 4d 6f 69 64 30 70 54 47 4a 75 73 66 6a 75 41 33 44 76 6f 6b 42 63 67 32 58 58 38 62 2d 35 52 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKrQlEGNdswMSYN1mZrv1M2gUpnlwBQN4JXI8-rIvMoid0pTGJusfjuA3DvokBcg2XX8b-5R","type":4}
2024-10-01 18:33:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49902	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:58 UTC	1384	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 9689 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1727807619434&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C0%2C0&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1727807634729 Content-Type: application/json X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240929.00.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtVS2lLNzYzdHVnWSj8gPG3BjIKCgJVUxIEGgAgRg%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:33:58 UTC	9689	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 39 32 39 2e 30 30 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 50 79 41 38 62 63 47 45 49 33 55 73 51 55 51 6b 71 36 78 42 52 44 77 6e 4c 41 46 45 4d 6e 6d 73 41 55 51 6e 74 43 77 42 52 44 5a 79 61 38 46 45 4d 66 51 73 51 55 51 6a 38 4f 78 42 52 44 32 71 37 41 46 45 4a 72 4f 73 51 55 51 34 49 33 5f 45 68 44 66 37 62 41 46 45 50 4f 69 73 51 55 51 37 73 75 78 42 52 44 52 75 4c 45 46 45 4d 54 59 73 51 55 51 31 74 32 77 42 52 44 56 31 72 45 46 45 4f Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240929.00.00","configInfo":{"appInstallData":"CPyA8bcGEI3UsQUQkq6xBRDwnLAFEMnmsAUQntCwBRDZya8FEMfQsQUQj8OxBRD2q7AFEJrOsQUQ4I3_EhDf7bAFEPOisQUQ7suxBRDRuLEFEMTYsQUQ1t2wBRDV1rEFEO
2024-10-01 18:33:58 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 01 Oct 2024 18:33:58 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:58 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-10-01 18:33:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49906	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:58 UTC	1384	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 9767 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1727807620204&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C0%2C0&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1727807634739 Content-Type: application/json X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240929.00.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: Cgt0cU94SUtlOUJDTSj8gPG3BjIKCgJVUxIEGgAgEQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/JCcqzCo7X-M?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:33:58 UTC	9767	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 39 32 39 2e 30 30 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 50 79 41 38 62 63 47 45 50 43 63 73 41 55 51 6a 5a 53 78 42 52 43 75 77 62 45 46 45 4d 6e 55 73 51 55 51 69 49 65 77 42 52 44 45 32 4c 45 46 45 4a 4f 32 73 51 55 51 32 63 6d 76 42 52 43 46 70 37 45 46 45 4a 6d 59 73 51 55 51 2d 62 6d 78 42 52 43 69 6e 62 45 46 45 4b 69 61 73 41 55 51 77 38 58 5f 45 68 44 4d 33 36 34 46 45 4a 4b 75 73 51 55 51 35 73 2d 78 42 52 44 7a 6f 72 45 46 45 4e Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240929.00.00","configInfo":{"appInstallData":"CPyA8bcGEPCcsAUQjZSxBRCuwbEFEMnUsQUQiIewBRDE2LEFEJO2sQUQ2cmvBRCFp7EFEJmYsQUQ-bmxBRCinbEFEKiasAUQw8X_EhDM364FEJKusQUQ5s-xBRDzorEFEN
2024-10-01 18:33:58 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 01 Oct 2024 18:33:58 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:58 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-10-01 18:33:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49903	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:58 UTC	982	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1249 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=mXmCwEulfv6iQK6LMcm2B4FtbaZY9g1Qlhg_ibVuZLscMoWZCV2VXSjJzUJHz9gI5HzA3K-NABR9zkO97kUiOdmzLHJ-I7p-iBLZqvaB7MnxAeTxYaaxW3vvl5oql1L2ynUELG9EZUzW6miRbsL1JIzsAOM3QTMvlrGpQT1tBtzg1KXBJkw
2024-10-01 18:33:58 UTC	1249	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 33 34 37 30 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1727807634701",null,null,null
2024-10-01 18:33:58 UTC	937	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=ypopj63C5N43R_hytLowKvnfIwrhJBPg5dmnI2wtAnssTD7E0PxhIfkmVcPUrwIDPBV3DmtWF5POvK31UjpcDKFugRSLz-iJE5dXt8YJZeKE3dYCNQZQm7xrXfEH8HMXlTpXr7jf96wLuEAV5I29J8IqJYiPy2o_cn6Eg8K6kIBp_qjcBMmoM23s7qo; expires=Wed, 02-Apr-2025 18:33:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:33:58 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 01 Oct 2024 18:33:58 GMT Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:58 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:33:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49905	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:58 UTC	1384	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 9753 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1727807619767&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C0%2C0&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1727807634747 Content-Type: application/json X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240929.00.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: Cgt0WjA0ZEEwbnR0Yyj8gPG3BjIKCgJVUxIEGgAgNQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/pD218Mqhqms?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:33:58 UTC	9753	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 39 32 39 2e 30 30 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 50 79 41 38 62 63 47 45 4c 66 71 5f 68 49 51 35 73 2d 78 42 52 43 6d 6b 37 45 46 45 4f 75 5a 73 51 55 51 31 74 32 77 42 52 43 46 70 37 45 46 45 4d 66 51 73 51 55 51 79 65 61 77 42 52 43 49 68 37 41 46 45 4b 69 61 73 41 55 51 37 62 6d 78 42 52 43 64 30 4c 41 46 45 4a 44 4d 73 51 55 51 38 4c 75 78 42 52 43 38 35 72 41 46 45 4d 48 4e 73 51 55 51 37 73 75 78 42 52 43 4a 70 37 45 46 45 49 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240929.00.00","configInfo":{"appInstallData":"CPyA8bcGELfq_hIQ5s-xBRCmk7EFEOuZsQUQ1t2wBRCFp7EFEMfQsQUQyeawBRCIh7AFEKiasAUQ7bmxBRCd0LAFEJDMsQUQ8LuxBRC85rAFEMHNsQUQ7suxBRCJp7EFEI
2024-10-01 18:33:58 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 01 Oct 2024 18:33:58 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:58 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-10-01 18:33:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49900	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:58 UTC	981	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 573 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=mXmCwEulfv6iQK6LMcm2B4FtbaZY9g1Qlhg_ibVuZLscMoWZCV2VXSjJzUJHz9gI5HzA3K-NABR9zkO97kUiOdmzLHJ-I7p-iBLZqvaB7MnxAeTxYaaxW3vvl5oql1L2ynUELG9EZUzW6miRbsL1JIzsAOM3QTMvlrGpQT1tBtzg1KXBJkw
2024-10-01 18:33:58 UTC	573	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 33 34 37 30 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1727807634708",null,null,null
2024-10-01 18:33:58 UTC	937	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=igXa5pKzlfcQfHo2zduQdEpyH_XMD3ON_1yoGJM0ktZHlprrFsNdWxNFMqNxaGmO99kmS9ycOVLsPxgopWcv3nsai7-4mrD0Y_qCtla-bYwk-T73H3aer9cJgBY1sx1ikJfOgKwnnSmVaS2XUld6JbSoPo1y978TrSaru5V2EyQogmGawczjB5q910A; expires=Wed, 02-Apr-2025 18:33:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:33:58 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 01 Oct 2024 18:33:58 GMT Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:58 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:33:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49901	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:58 UTC	1384	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 9786 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1727807619731&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C0%2C0&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1727807634856 Content-Type: application/json X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240929.00.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtQd0VSaHctWE5Vdyj8gPG3BjIKCgJVUxIEGgAgMA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/eSnzhoiLwx8?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:33:58 UTC	9786	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 39 32 39 2e 30 30 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 50 79 41 38 62 63 47 45 4b 69 61 73 41 55 51 2d 4b 75 78 42 52 44 4a 39 36 38 46 45 4b 48 55 73 51 55 51 70 70 4b 78 42 52 43 33 36 76 34 53 45 4c 66 76 72 77 55 51 76 5a 6d 77 42 52 43 42 78 72 41 46 45 4e 6e 4a 72 77 55 51 35 73 2d 78 42 52 44 48 32 4c 45 46 45 49 69 48 73 41 55 51 68 61 65 78 42 52 43 75 6a 5f 38 53 45 4e 36 74 73 51 55 51 6f 38 33 5f 45 68 43 44 76 4c 45 46 45 4f Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240929.00.00","configInfo":{"appInstallData":"CPyA8bcGEKiasAUQ-KuxBRDJ968FEKHUsQUQppKxBRC36v4SELfvrwUQvZmwBRCBxrAFENnJrwUQ5s-xBRDH2LEFEIiHsAUQhaexBRCuj_8SEN6tsQUQo83_EhCDvLEFEO
2024-10-01 18:33:58 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 01 Oct 2024 18:33:58 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:58 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-10-01 18:33:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49908	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:58 UTC	830	OUT	GET /generate_204?ZNzJTA HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:33:58 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 01 Oct 2024 18:33:58 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49907	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:33:58 UTC	981	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 400 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=mXmCwEulfv6iQK6LMcm2B4FtbaZY9g1Qlhg_ibVuZLscMoWZCV2VXSjJzUJHz9gI5HzA3K-NABR9zkO97kUiOdmzLHJ-I7p-iBLZqvaB7MnxAeTxYaaxW3vvl5oql1L2ynUELG9EZUzW6miRbsL1JIzsAOM3QTMvlrGpQT1tBtzg1KXBJkw
2024-10-01 18:33:58 UTC	400	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 33 34 38 34 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 5c 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 62 67 2f 66 69 6c 5c 22 2c 6e 75 6c 6c 2c 5b 5c 22 6b 65 5c 22 5d 2c 5b 5b 5b 5b 5c 22 61 47 49 66 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 38 39 5d 5d 5d 5d 2c 5b 5c 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 62 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,null,[1,0,0,0,0]]],1828,[["1727807634843",null,null,null,null,null,null,"[[[\"/client_streamz/bg/fil\",null,[\"ke\"],[[[[\"aGIf\"]],[null,89]]]],[\"/client_streamz/b
2024-10-01 18:33:58 UTC	937	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=eFfo6MFZeKzMjvh75uRBO59bN-utcN8_Y6mHqxiVtWEXy7mQfYil-Pbb_z3X3oLOgc_-DCXffxO-aYZowjbLJJu8qjCgMZeg-OLJcnLnfcgOVY-7-DCMjBih_yi0CaUb5L7SuHBMMwG8N39mCetcJ46JEW8iDVGbGDcyTAO3lIl-S3FX28_DXfZSGgs; expires=Wed, 02-Apr-2025 18:33:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:33:58 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 01 Oct 2024 18:33:58 GMT Connection: close Transfer-Encoding: chunked
2024-10-01 18:33:58 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:33:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49909	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:00 UTC	989	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 404 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=eFfo6MFZeKzMjvh75uRBO59bN-utcN8_Y6mHqxiVtWEXy7mQfYil-Pbb_z3X3oLOgc_-DCXffxO-aYZowjbLJJu8qjCgMZeg-OLJcnLnfcgOVY-7-DCMjBih_yi0CaUb5L7SuHBMMwG8N39mCetcJ46JEW8iDVGbGDcyTAO3lIl-S3FX28_DXfZSGgs
2024-10-01 18:34:00 UTC	404	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 33 37 35 32 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 5c 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 62 67 2f 66 69 6c 5c 22 2c 6e 75 6c 6c 2c 5b 5c 22 6b 65 5c 22 5d 2c 5b 5b 5b 5b 5c 22 61 47 49 66 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 35 33 35 2e 35 5d 5d 5d 5d 2c 5b 5c 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,null,[1,0,0,0,0]]],1828,[["1727807637526",null,null,null,null,null,null,"[[[\"/client_streamz/bg/fil\",null,[\"ke\"],[[[[\"aGIf\"]],[null,2535.5]]]],[\"/client_strea
2024-10-01 18:34:00 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:34:00 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:34:00 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:34:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49910	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:01 UTC	830	OUT	GET /generate_204?bzGeHw HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/pD218Mqhqms?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:34:01 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 01 Oct 2024 18:34:01 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49912	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:05 UTC	830	OUT	GET /generate_204?BBOfqA HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/eSnzhoiLwx8?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:34:05 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 01 Oct 2024 18:34:05 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49911	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:05 UTC	989	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 415 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=eFfo6MFZeKzMjvh75uRBO59bN-utcN8_Y6mHqxiVtWEXy7mQfYil-Pbb_z3X3oLOgc_-DCXffxO-aYZowjbLJJu8qjCgMZeg-OLJcnLnfcgOVY-7-DCMjBih_yi0CaUb5L7SuHBMMwG8N39mCetcJ46JEW8iDVGbGDcyTAO3lIl-S3FX28_DXfZSGgs
2024-10-01 18:34:05 UTC	415	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 34 33 32 31 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 5c 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 62 67 2f 66 69 6c 5c 22 2c 6e 75 6c 6c 2c 5b 5c 22 6b 65 5c 22 5d 2c 5b 5b 5b 5b 5c 22 61 47 49 66 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 35 36 38 36 2e 38 39 39 39 39 39 39 39 39 39 39 34 5d 5d 5d 5d 2c 5b 5c 22 2f 63 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,null,[1,0,0,0,0]]],1828,[["1727807643216",null,null,null,null,null,null,"[[[\"/client_streamz/bg/fil\",null,[\"ke\"],[[[[\"aGIf\"]],[null,5686.899999999994]]]],[\"/c
2024-10-01 18:34:05 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:34:05 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:34:05 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:34:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49913	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:07 UTC	1384	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1675 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1727807620086&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C0%2C0&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1727807646250 Content-Type: application/json X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240929.00.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtVS2lLNzYzdHVnWSj8gPG3BjIKCgJVUxIEGgAgRg%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:34:07 UTC	1675	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 39 32 39 2e 30 30 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 50 79 41 38 62 63 47 45 49 33 55 73 51 55 51 6b 71 36 78 42 52 44 77 6e 4c 41 46 45 4d 6e 6d 73 41 55 51 6e 74 43 77 42 52 44 5a 79 61 38 46 45 4d 66 51 73 51 55 51 6a 38 4f 78 42 52 44 32 71 37 41 46 45 4a 72 4f 73 51 55 51 34 49 33 5f 45 68 44 66 37 62 41 46 45 50 4f 69 73 51 55 51 37 73 75 78 42 52 44 52 75 4c 45 46 45 4d 54 59 73 51 55 51 31 74 32 77 42 52 44 56 31 72 45 46 45 4f Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240929.00.00","configInfo":{"appInstallData":"CPyA8bcGEI3UsQUQkq6xBRDwnLAFEMnmsAUQntCwBRDZya8FEMfQsQUQj8OxBRD2q7AFEJrOsQUQ4I3_EhDf7bAFEPOisQUQ7suxBRDRuLEFEMTYsQUQ1t2wBRDV1rEFEO
2024-10-01 18:34:08 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 01 Oct 2024 18:34:08 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:34:08 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-10-01 18:34:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49914	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:07 UTC	989	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 416 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=eFfo6MFZeKzMjvh75uRBO59bN-utcN8_Y6mHqxiVtWEXy7mQfYil-Pbb_z3X3oLOgc_-DCXffxO-aYZowjbLJJu8qjCgMZeg-OLJcnLnfcgOVY-7-DCMjBih_yi0CaUb5L7SuHBMMwG8N39mCetcJ46JEW8iDVGbGDcyTAO3lIl-S3FX28_DXfZSGgs
2024-10-01 18:34:07 UTC	416	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 34 36 31 31 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 5c 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 62 67 2f 66 69 6c 5c 22 2c 6e 75 6c 6c 2c 5b 5c 22 6b 65 5c 22 5d 2c 5b 5b 5b 5b 5c 22 61 47 49 66 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 32 38 39 33 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 5d 5d 5d 5d 2c 5b 5c 22 2f Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,null,[1,0,0,0,0]]],1828,[["1727807646118",null,null,null,null,null,null,"[[[\"/client_streamz/bg/fil\",null,[\"ke\"],[[[[\"aGIf\"]],[null,2893.3000000000175]]]],[\"/
2024-10-01 18:34:08 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:34:08 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:34:08 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:34:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49916	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:08 UTC	1384	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1730 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1727807620154&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C0%2C0&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1727807646257 Content-Type: application/json X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240929.00.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: CgtQd0VSaHctWE5Vdyj8gPG3BjIKCgJVUxIEGgAgMA%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/eSnzhoiLwx8?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:34:08 UTC	1730	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 39 32 39 2e 30 30 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 50 79 41 38 62 63 47 45 4b 69 61 73 41 55 51 2d 4b 75 78 42 52 44 4a 39 36 38 46 45 4b 48 55 73 51 55 51 70 70 4b 78 42 52 43 33 36 76 34 53 45 4c 66 76 72 77 55 51 76 5a 6d 77 42 52 43 42 78 72 41 46 45 4e 6e 4a 72 77 55 51 35 73 2d 78 42 52 44 48 32 4c 45 46 45 49 69 48 73 41 55 51 68 61 65 78 42 52 43 75 6a 5f 38 53 45 4e 36 74 73 51 55 51 6f 38 33 5f 45 68 43 44 76 4c 45 46 45 4f Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240929.00.00","configInfo":{"appInstallData":"CPyA8bcGEKiasAUQ-KuxBRDJ968FEKHUsQUQppKxBRC36v4SELfvrwUQvZmwBRCBxrAFENnJrwUQ5s-xBRDH2LEFEIiHsAUQhaexBRCuj_8SEN6tsQUQo83_EhCDvLEFEO
2024-10-01 18:34:08 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 01 Oct 2024 18:34:08 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:34:08 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-10-01 18:34:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49915	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:08 UTC	830	OUT	GET /generate_204?seAJaA HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/JCcqzCo7X-M?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:34:08 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 01 Oct 2024 18:34:08 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49917	142.250.186.150	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:08 UTC	464	OUT	GET /vi_webp/NBEWfKH702s/default.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:34:08 UTC	630	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 1880 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 18:34:08 GMT Expires: Tue, 01 Oct 2024 20:34:08 GMT Cache-Control: public, max-age=7200 ETag: "1687450470" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:34:08 UTC	760	IN	Data Raw: 52 49 46 46 50 07 00 00 57 45 42 50 56 50 38 20 44 07 00 00 b0 1e 00 9d 01 2a 78 00 5a 00 3e 6d 20 9b 4d a4 21 24 24 13 50 80 0d 89 67 00 cb d8 f5 5a e6 15 15 2c 06 68 c6 d1 3e 3f bd fb 1f de e7 75 14 ed 4f 10 fb c1 e0 04 ee bb 40 bd 83 fa 67 fb ff cb 4f 3a 6d 48 ef 52 f3 f7 fc c7 82 2d 00 3f 90 7f 53 ff 95 ea 01 ff 37 f9 8f c9 5f 69 5f 4e 7f db f7 08 fe 6b fd a7 fe 9f ae 87 af 3f db 8f 64 ff d8 d4 87 58 02 ca f2 11 2f a6 f1 1b 01 f0 c2 e0 43 7a 57 86 d1 ab b1 d9 39 6c 50 00 74 6d f0 60 89 dc 64 c6 5d e4 3b 78 ce 4c b9 98 44 3f 7d 24 9a 5a ee 38 4c e7 da 6e ac da 2e 26 20 83 c2 15 bd 7a c5 77 48 ce 49 92 d3 f6 84 7c 12 45 5b a0 94 7c 6b 5d d5 6e 71 b5 28 36 d3 b7 0d 7b cb 6b 12 8a 39 58 b5 1e 75 f2 1e 4c 3e b4 7f dc 45 65 30 91 22 20 55 7e 1b 4e 2c 9b a5 Data Ascii: RIFFPWEBPVP8 D*xZ>m M!$$PgZ,h>?uO@gO:mHR-?S7_i_Nk?dX/CzW9lPtm`d];xLD?}$Z8Ln.& zwHI\|E[\|k]nq(6{k9XuL>Ee0" U~N,
2024-10-01 18:34:08 UTC	1120	IN	Data Raw: 1e 4e da 0c 5d 1f f6 d3 5d 72 1b b2 e9 27 d3 8f aa 8b 56 7f ae 9a e6 ac 2f f5 34 a5 52 37 a4 64 26 6b 1e 76 82 7c ba fd 80 b3 d9 58 47 54 7c b8 c9 d4 04 61 b5 61 63 19 f4 e4 3a 2d a8 54 91 b6 8b b9 64 f5 06 ea 1d 11 5c 5e 2b 73 96 6c 90 da ad 38 8e 98 d9 a5 bd 88 df de 82 e3 4b 70 8e 54 18 fb 04 c1 e0 25 df 2d 16 bc 01 98 bb 65 3a e5 2b 95 61 3e f3 ee 16 9f 49 10 17 31 3c 8e d1 0e 58 17 1a ba 6c bc ca b2 0e 24 a3 37 83 f4 43 84 fa a5 79 09 1d d5 d8 a9 a8 d0 3c 05 8e 1a 7d dc 0f 3d 63 08 69 1c b3 ea 94 17 24 6a 9a d2 37 1a 3d e7 7e e4 da 8a 49 3f 5d c7 31 69 ef 62 1c da 83 11 81 a5 b3 a7 74 2d e1 a5 f4 f1 09 50 ca dc 15 a6 81 89 4f 5d cd 50 f5 b3 5a eb 1c 26 2e f8 a3 05 c1 79 82 45 9b bd cd 04 61 58 e7 d9 33 ce fb d2 e3 eb d1 6b 0b 69 e2 0a 33 79 ff d7 c0 Data Ascii: N]]r'V/4R7d&kv\|XGT\|aac:-Td\^+sl8KpT%-e:+a>I1<Xl$7Cy<}=ci$j7=~I?]1ibt-PO]PZ&.yEaX3ki3y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49919	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:09 UTC	793	OUT	GET /dist/img/favicon.ico HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:34:09 UTC	2112	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 07 Sep 2020 17:44:40 GMT Accept-Ranges: bytes ETag: "629cff8f3e85d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:22 GMT Connection: close Content-Length: 5430
2024-10-01 18:34:09 UTC	5430	IN	Data Raw: 00 00 01 00 02 00 20 20 00 00 01 00 20 00 a8 10 00 00 26 00 00 00 10 10 00 00 01 00 20 00 68 04 00 00 ce 10 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 c8 f3 f0 3e ab ec e8 60 ab ec e8 60 ab ec e8 60 ab ec e8 60 ac ed e8 5d c0 f1 ed 48 eb fa f9 15 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 b3 ee ea 55 8b e6 df 83 8b e6 df 83 8b e6 df 83 8b Data Ascii: & h( @ >````]HU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49920	3.92.120.28	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:09 UTC	522	OUT	GET /pd.js HTTP/1.1 Host: pi.pardot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:34:09 UTC	374	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:34:09 GMT Content-Type: application/javascript Content-Length: 5620 Connection: close last-modified: Tue, 01 Oct 2024 05:27:49 GMT etag: "15f4" accept-ranges: bytes cache-control: max-age=63072000 expires: Thu, 01 Oct 2026 18:34:09 GMT vary: Accept-Encoding,User-Agent X-Pardot-Route: 16b0ab393667a33fe86adedc3141e88c
2024-10-01 18:34:09 UTC	5620	IN	Data Raw: 2f 2a 21 0a 09 4d 61 72 6b 65 74 69 6e 67 20 43 6c 6f 75 64 20 41 63 63 6f 75 6e 74 20 45 6e 67 61 67 65 6d 65 6e 74 27 73 20 45 6e 67 61 67 65 6d 65 6e 74 20 54 72 61 63 6b 65 72 20 4a 61 76 61 73 63 72 69 70 74 20 2d 20 32 30 32 33 2d 30 34 2d 31 33 20 31 31 3a 32 34 3a 34 37 0a 09 49 66 20 79 6f 75 27 72 65 20 61 6e 20 61 64 20 62 6c 6f 63 6b 65 72 2c 20 62 6c 6f 63 6b 20 74 68 65 20 55 52 49 20 6f 6e 6c 79 2e 20 44 6f 6e 27 74 20 62 6c 6f 63 6b 20 74 68 65 20 64 6f 6d 61 69 6e 2e 0a 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 4e 61 6d 65 73 70 61 63 65 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 72 3d 77 69 6e 64 6f 77 2c 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 61 3d 74 5b 69 Data Ascii: /!Marketing Cloud Account Engagement's Engagement Tracker Javascript - 2023-04-13 11:24:47If you're an ad blocker, block the URI only. Don't block the domain./function checkNamespace(e){for(var t=e.split("."),r=window,i=0;i<t.length;i++){var a=t[i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49922	3.92.120.28	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:10 UTC	760	OUT	GET /analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=114357&account_id=866552&title=Quinn%20Emanuel%20Trial%20Lawyers%20-%20Quinn%20Emanuel%20Urquhart%20%26%20Sullivan%2C%20LLP&url=https%3A%2F%2Fwww.quinnemanuel.com%2F&referrer= HTTP/1.1 Host: pi.pardot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:34:10 UTC	1261	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:34:10 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 1153 Connection: close set-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0 x-pardot-canary: true expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache x-pardot-rsp: 0/0/1 strict-transport-security: max-age=31536000; includeSubDomains p3p: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml" set-cookie: visitor_id865552=1743662215; expires=Fri, 29-Sep-2034 18:34:10 GMT; Max-Age=315360000; path=/; domain=.pardot.com; secure; SameSite=None set-cookie: visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; expires=Fri, 29-Sep-2034 18:34:10 GMT; Max-Age=315360000; path=/; domain=.pardot.com; secure; SameSite=None set-cookie: lpv865552=aHR0cHM6Ly93d3cucXVpbm5lbWFudWVsLmNvbS8%3D; expires=Tue, 01-Oct-2024 19:04:10 GMT; Max-Age=1800; path=/; secure; SameSite=None vary: Accept-Encoding,User-Agent X-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1
2024-10-01 18:34:10 UTC	1153	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 70 69 52 65 73 70 6f 6e 73 65 28 29 20 7b 0a 09 09 70 69 53 65 74 43 6f 6f 6b 69 65 28 27 76 69 73 69 74 6f 72 5f 69 64 38 36 35 35 35 32 27 2c 20 27 31 37 34 33 36 36 32 32 31 35 27 2c 20 33 36 35 30 29 3b 0a 09 09 09 70 69 53 65 74 43 6f 6f 6b 69 65 28 27 76 69 73 69 74 6f 72 5f 69 64 38 36 35 35 35 32 2d 68 61 73 68 27 2c 20 27 34 63 61 37 36 33 30 63 61 30 30 39 39 63 33 66 32 61 31 38 39 37 64 34 30 34 64 62 36 61 64 34 32 38 62 37 34 64 35 63 64 33 31 33 39 65 34 64 36 36 66 66 35 64 34 38 62 33 36 30 66 31 37 39 61 38 33 63 61 32 64 36 66 62 66 65 34 39 62 37 30 62 62 39 35 66 65 36 61 30 38 38 37 30 34 31 32 32 36 37 66 66 33 33 27 2c 20 33 36 35 30 29 3b 0a 09 09 0a 09 09 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f Data Ascii: function piResponse() {piSetCookie('visitor_id865552', '1743662215', 3650);piSetCookie('visitor_id865552-hash', '4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33', 3650);if (document.lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49921	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:10 UTC	1418	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1705 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1727807620204&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C0%2C0&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1727807648631 Content-Type: application/json X-Goog-Event-Time: 1727807648630 X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240929.00.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: Cgt0cU94SUtlOUJDTSj8gPG3BjIKCgJVUxIEGgAgEQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/JCcqzCo7X-M?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:34:10 UTC	1705	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 39 32 39 2e 30 30 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 50 79 41 38 62 63 47 45 50 43 63 73 41 55 51 6a 5a 53 78 42 52 43 75 77 62 45 46 45 4d 6e 55 73 51 55 51 69 49 65 77 42 52 44 45 32 4c 45 46 45 4a 4f 32 73 51 55 51 32 63 6d 76 42 52 43 46 70 37 45 46 45 4a 6d 59 73 51 55 51 2d 62 6d 78 42 52 43 69 6e 62 45 46 45 4b 69 61 73 41 55 51 77 38 58 5f 45 68 44 4d 33 36 34 46 45 4a 4b 75 73 51 55 51 35 73 2d 78 42 52 44 7a 6f 72 45 46 45 4e Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240929.00.00","configInfo":{"appInstallData":"CPyA8bcGEPCcsAUQjZSxBRCuwbEFEMnUsQUQiIewBRDE2LEFEJO2sQUQ2cmvBRCFp7EFEJmYsQUQ-bmxBRCinbEFEKiasAUQw8X_EhDM364FEJKusQUQ5s-xBRDzorEFEN
2024-10-01 18:34:10 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 01 Oct 2024 18:34:10 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:34:10 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-10-01 18:34:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49923	216.58.206.78	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:10 UTC	1418	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1695 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1727807619767&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C0%2C0&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1727807648892 Content-Type: application/json X-Goog-Event-Time: 1727807648891 X-YouTube-Utc-Offset: -240 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240929.00.00 X-YouTube-Time-Zone: America/New_York X-Goog-Visitor-Id: Cgt0WjA0ZEEwbnR0Yyj8gPG3BjIKCgJVUxIEGgAgNQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/pD218Mqhqms?&autoplay=0&rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
2024-10-01 18:34:10 UTC	1695	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 39 32 39 2e 30 30 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 50 79 41 38 62 63 47 45 4c 66 71 5f 68 49 51 35 73 2d 78 42 52 43 6d 6b 37 45 46 45 4f 75 5a 73 51 55 51 31 74 32 77 42 52 43 46 70 37 45 46 45 4d 66 51 73 51 55 51 79 65 61 77 42 52 43 49 68 37 41 46 45 4b 69 61 73 41 55 51 37 62 6d 78 42 52 43 64 30 4c 41 46 45 4a 44 4d 73 51 55 51 38 4c 75 78 42 52 43 38 35 72 41 46 45 4d 48 4e 73 51 55 51 37 73 75 78 42 52 43 4a 70 37 45 46 45 49 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240929.00.00","configInfo":{"appInstallData":"CPyA8bcGELfq_hIQ5s-xBRCmk7EFEOuZsQUQ1t2wBRCFp7EFEMfQsQUQyeawBRCIh7AFEKiasAUQ7bmxBRCd0LAFEJDMsQUQ8LuxBRC85rAFEMHNsQUQ7suxBRCJp7EFEI
2024-10-01 18:34:10 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 01 Oct 2024 18:34:10 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:34:10 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-10-01 18:34:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49925	142.250.186.150	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:11 UTC	458	OUT	GET /vi/eSnzhoiLwx8/default.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:34:11 UTC	654	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3197 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 18:34:11 GMT Expires: Tue, 01 Oct 2024 20:34:11 GMT Cache-Control: public, max-age=7200 ETag: "1711119939" Content-Type: image/jpeg Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:34:11 UTC	736	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 10 0a 0b 0d 0a 0b 0d 10 0b 0d 0e 0e 0d 0a 0d 0d 0d 0d 08 0a 0d 0f 08 08 0e 0a 0e 08 0d 0a 08 0f 0b 10 0b 0a 0d 0e 0d 08 0d 0d 15 10 0f 11 12 16 16 15 08 0d 22 18 17 12 18 1c 13 1f 12 01 05 05 05 08 07 08 0f 09 09 0f 15 15 12 13 1a 19 15 12 1e 15 13 15 15 15 12 18 17 12 1a 12 15 17 15 18 15 13 17 15 17 12 16 12 15 15 12 15 15 1e 17 15 15 1e 16 15 15 15 12 12 15 15 16 15 15 18 ff c0 00 11 08 00 5a 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 05 06 07 08 01 03 04 02 ff c4 00 4b 10 00 02 01 02 04 02 04 06 0d 09 06 07 00 00 00 00 01 02 03 00 11 04 05 12 21 13 31 06 22 41 a4 07 08 14 32 51 e4 17 23 44 52 54 61 71 81 92 94 Data Ascii: JFIF"Zx"K!1"A2Q#DRTaq
2024-10-01 18:34:11 UTC	1390	IN	Data Raw: 6f b8 af 58 ee 8e cd 17 1b 5c 76 e0 68 e3 10 d1 48 23 33 31 58 c3 b2 39 00 96 04 5b 98 b6 f6 aa 1d c3 0d 6e 9d 9d 96 e8 f9 2f ed ad eb 68 d1 1e 03 c3 66 65 f0 84 fa be 13 ee eb 3e cd b9 97 c2 13 ea f8 4f bb a6 94 3d 16 c4 32 a3 88 ba b2 2e b4 63 26 1d 46 80 8f 25 dc 99 07 08 70 e2 77 1a f4 dc 46 d6 bd 79 9f a3 53 a6 90 d1 69 2f 21 81 14 bc 21 da 75 73 1b 28 87 5f 13 69 14 ae ab 69 b8 e7 5c fe 03 0b ad 3b 3b 1f 4c 3e fe 0f 71 3a 3e 43 bf d9 b7 32 f8 42 7d 5f 09 f7 74 7b 36 e6 5f 08 4f ab e1 3e ee 99 f1 74 6e 76 d5 68 88 d3 21 c3 90 cd 12 1f 28 42 03 a2 2b 38 32 32 96 17 d1 7b 6a 17 b5 68 9f 26 95 23 32 b2 10 80 90 58 94 f3 92 43 13 8b 5e e6 d2 02 bf 37 a2 a5 61 b8 63 74 56 76 5e 98 72 23 44 90 b2 6f 0c 99 8c b3 45 13 62 14 07 91 23 36 c3 e0 ef 69 19 54 db Data Ascii: oX\vhH#31X9[n/hfe>O=2.c&F%pwFySi/!!us(_ii\;;L>q:>C2B}_t{6_O>tnvh!(B+822{jh&#2XC^7actVv^r#DoEb#6iT
2024-10-01 18:34:11 UTC	1071	IN	Data Raw: 26 08 58 31 e1 e8 04 ac ad 15 8e b7 b9 57 6d 3c 31 7e 6d a1 bd e5 4b ef 97 e9 2f db 47 95 2f be 5f a4 bf 6d 00 e3 8f 23 8c b6 93 8b 88 0b 13 aa c3 98 31 84 06 ee 05 da f2 1d 89 b0 81 6f e7 2d b9 7f b3 16 d7 e3 27 e5 1e 3b 5e 2d 5a 11 59 91 ec 65 02 ce c8 50 5c 80 09 5b b0 b8 a4 6f 2a 5f 7c bf 49 7e da 3c a9 7d f2 fd 25 fb 68 07 16 0f 26 89 d4 93 8a 44 36 be 96 08 0d fa e0 af e5 ac 48 31 f3 04 82 24 43 7d eb 5c 59 54 64 80 71 28 b7 58 5a e4 6c 24 c4 16 0e 87 af b7 08 81 a9 8e dd 6b 9b 2e f4 84 31 4b ef d7 e9 2f db 59 f2 a5 f7 eb f4 97 ed ae 6a 40 bf 06 5c 82 e7 ca 10 5b 55 ae 21 20 e8 0a 55 80 13 93 a5 b5 1b 0b 6b ea 9e a5 f6 ad 98 ec 3a ae a6 f2 88 df 4e bd 21 52 32 59 93 8d a7 6e 2d b4 38 89 6c c0 b1 bc c0 15 e5 a9 27 23 c4 21 9e 10 59 5a f2 c6 2c 4a 90 Data Ascii: &X1Wm<1~mK/G/_m#1o-';^-ZYeP\[o*_\|I~<}%h&D6H1$C}\YTdq(XZl$k.1K/Yj@\[U! Uk:N!R2Yn-8l'#!YZ,J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49926	142.250.184.228	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:11 UTC	692	OUT	GET /js/th/Kwl4UTqRlZdwo60dxzGVsyg_CEkasAzkebPPx38d0Do.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=eFfo6MFZeKzMjvh75uRBO59bN-utcN8_Y6mHqxiVtWEXy7mQfYil-Pbb_z3X3oLOgc_-DCXffxO-aYZowjbLJJu8qjCgMZeg-OLJcnLnfcgOVY-7-DCMjBih_yi0CaUb5L7SuHBMMwG8N39mCetcJ46JEW8iDVGbGDcyTAO3lIl-S3FX28_DXfZSGgs
2024-10-01 18:34:11 UTC	810	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 54748 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 17:58:28 GMT Expires: Wed, 01 Oct 2025 17:58:28 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 17 Sep 2024 15:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 2143 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:34:11 UTC	580	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-10-01 18:34:11 UTC	1390	IN	Data Raw: 63 3b 41 3d 3d 31 32 3f 28 70 2e 63 6f 6e 73 6f 6c 65 5b 7a 5d 28 77 2e 6d 65 73 73 61 67 65 29 2c 41 3d 55 29 3a 41 3d 3d 67 26 26 28 45 3d 36 34 2c 63 3d 6b 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 57 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 64 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 64 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 64 7d 29 2c 41 3d 55 29 7d 7d 7d 63 61 74 63 68 28 4a 29 7b 69 66 28 45 3d 3d 33 35 29 74 68 72 6f 77 20 4a 3b 45 3d 3d 36 34 26 26 28 77 3d 4a 2c 41 3d 31 39 29 7d 7d 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 55 2c 43 29 7b 72 65 74 75 72 6e 28 43 3d 4f 28 35 36 2c 31 2c 38 31 2c 37 30 2c 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 29 29 26 26 55 2e 65 76 61 6c 28 43 2e 63 72 65 61 74 65 53 63 72 Data Ascii: c;A==12?(p.console[z](w.message),A=U):A==g&&(E=64,c=k.createPolicy(W,{createHTML:d,createScript:d,createScriptURL:d}),A=U)}}}catch(J){if(E==35)throw J;E==64&&(w=J,A=19)}};(0,eval)(function(U,C){return(C=O(56,1,81,70,null,"error","ad"))&&U.eval(C.createScr
2024-10-01 18:34:11 UTC	1390	IN	Data Raw: 72 28 64 20 69 6e 20 63 29 69 66 28 6d 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 63 5b 64 5d 2c 64 2c 63 29 29 7b 6b 3d 47 3b 62 72 65 61 6b 20 61 7d 6b 3d 45 7d 4a 3d 39 39 7d 65 6c 73 65 20 69 66 28 4a 3d 3d 43 29 4a 3d 28 41 3c 3c 32 26 34 29 3c 32 26 26 28 41 7c 36 29 3e 3d 2d 38 31 3f 35 34 3a 39 39 3b 65 6c 73 65 7b 69 66 28 4a 3d 3d 36 36 29 72 65 74 75 72 6e 20 6b 3b 4a 3d 3d 36 32 3f 28 6b 3d 43 24 5b 47 5d 28 43 24 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 6f 6c 65 3a 45 2c 70 61 72 65 6e 74 3a 45 2c 66 6c 6f 6f 72 3a 45 2c 63 61 6c 6c 3a 45 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3a 45 2c 73 74 61 63 6b 3a 45 2c 64 6f 63 75 6d 65 6e 74 3a 45 2c 70 6f 70 3a 45 2c 70 72 6f 74 6f 74 79 70 65 3a 45 2c 72 65 70 6c 61 63 65 Data Ascii: r(d in c)if(m.call(void 0,c[d],d,c)){k=G;break a}k=E}J=99}else if(J==C)J=(A<<2&4)<2&&(A\|6)>=-81?54:99;else{if(J==66)return k;J==62?(k=C$[G](C$.prototype,{console:E,parent:E,floor:E,call:E,propertyIsEnumerable:E,stack:E,document:E,pop:E,prototype:E,replace
2024-10-01 18:34:11 UTC	1390	IN	Data Raw: 30 3f 28 55 3d 64 3f 74 79 70 65 6f 66 20 64 2e 77 34 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 64 2e 77 34 28 29 3a 6e 65 77 20 64 3a 6e 75 6c 6c 2c 77 3d 31 29 3a 77 3d 3d 31 3f 28 74 68 69 73 2e 43 3d 55 2c 77 3d 33 31 29 3a 77 3d 3d 36 30 3f 77 3d 28 55 3d 47 29 3f 31 3a 38 30 3a 77 3d 3d 38 30 3f 28 4a 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 77 3d 31 31 29 3a 77 3d 3d 33 32 3f 77 3d 39 34 3a 77 3d 3d 34 37 3f 28 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6b 3d 76 6f 69 64 20 30 2c 6d 3d 4a 47 28 41 2c 66 75 6e 63 74 69 6f 6e 28 70 2c 7a 29 7b 66 6f 72 28 7a 3d 34 36 3b 7a 21 3d 34 3b 29 7a 3d 3d 31 37 3f 28 47 26 26 70 24 28 47 29 2c 6b 3d 70 2c 67 28 29 2c 67 3d 76 6f 69 64 20 30 2c 7a 3d 34 29 3a 7a 3d 3d 34 36 26 26 28 7a 3d 67 3f Data Ascii: 0?(U=d?typeof d.w4==="function"?d.w4():new d:null,w=1):w==1?(this.C=U,w=31):w==60?w=(U=G)?1:80:w==80?(J=this.constructor,w=11):w==32?w=94:w==47?(g=function(){},k=void 0,m=JG(A,function(p,z){for(z=46;z!=4;)z==17?(G&&p$(G),k=p,g(),g=void 0,z=4):z==46&&(z=g?
2024-10-01 18:34:11 UTC	1390	IN	Data Raw: 6f 2e 6c 65 6e 67 74 68 3c 35 30 3f 34 39 3a 32 37 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 35 37 29 6b 3d 47 3c 45 2e 6c 65 6e 67 74 68 3f 31 34 3a 32 34 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 31 35 29 74 68 69 73 2e 6e 2b 2b 2c 6b 3d 38 36 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 33 35 29 6b 3d 28 43 3e 3e 31 26 31 33 29 3d 3d 34 3f 33 30 3a 39 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 31 37 29 63 3d 74 72 75 65 2c 6b 3d 32 38 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 37 37 29 6b 3d 28 43 2b 35 26 31 35 29 3c 38 26 26 43 2d 39 3e 3d 2d 35 37 3f 37 32 3a 38 30 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 32 38 29 4a 3d 63 2c 6b 3d 38 30 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 31 36 29 6b 3d 35 37 3b 65 6c 73 65 20 69 66 28 6b 3d 3d 34 30 29 47 2b 3d 38 31 39 32 2c 6b 3d 35 37 3b 65 6c 73 65 Data Ascii: o.length<50?49:27;else if(k==57)k=G<E.length?14:24;else if(k==15)this.n++,k=86;else if(k==35)k=(C>>1&13)==4?30:9;else if(k==17)c=true,k=28;else if(k==77)k=(C+5&15)<8&&C-9>=-57?72:80;else if(k==28)J=c,k=80;else if(k==16)k=57;else if(k==40)G+=8192,k=57;else
2024-10-01 18:34:11 UTC	1390	IN	Data Raw: 67 2e 70 72 6f 78 79 3f 33 35 3a 38 34 3b 65 6c 73 65 20 69 66 28 70 3d 3d 33 35 29 70 3d 43 2b 38 3e 3e 33 3d 3d 31 3f 36 32 3a 34 33 3b 65 6c 73 65 20 69 66 28 70 3d 3d 31 35 29 70 3d 28 43 3c 3c 31 26 31 35 29 3d 3d 32 3f 33 32 3a 33 35 3b 65 6c 73 65 20 69 66 28 70 3d 3d 39 34 29 55 3d 6e 28 41 2c 32 34 2c 6d 29 3f 21 21 6d 2e 63 61 70 74 75 72 65 3a 21 21 6d 2c 28 54 3d 56 28 33 36 2c 63 29 29 7c 7c 28 63 5b 53 5f 5d 3d 54 3d 6e 65 77 20 58 53 28 63 29 29 2c 67 3d 54 2e 61 64 64 28 4a 2c 47 2c 6b 2c 55 2c 64 29 2c 70 3d 37 30 3b 65 6c 73 65 20 69 66 28 70 3d 3d 36 32 29 7b 69 66 28 67 3d 47 2e 4f 2e 56 5b 53 74 72 69 6e 67 28 41 29 5d 29 7b 66 6f 72 28 55 3d 28 67 3d 67 2e 63 6f 6e 63 61 74 28 29 2c 74 72 75 65 29 2c 4a 3d 45 3b 4a 3c 67 2e 6c 65 6e Data Ascii: g.proxy?35:84;else if(p==35)p=C+8>>3==1?62:43;else if(p==15)p=(C<<1&15)==2?32:35;else if(p==94)U=n(A,24,m)?!!m.capture:!!m,(T=V(36,c))\|\|(c[S_]=T=new XS(c)),g=T.add(J,G,k,U,d),p=70;else if(p==62){if(g=G.O.V[String(A)]){for(U=(g=g.concat(),true),J=E;J<g.len
2024-10-01 18:34:11 UTC	1390	IN	Data Raw: 74 61 62 6c 65 3a 74 72 75 65 2c 76 61 6c 75 65 3a 70 7d 29 7d 7a 3d 35 7d 65 6c 73 65 7b 69 66 28 7a 3d 3d 33 37 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 63 6c 61 73 73 20 6e 61 6d 65 20 22 2b 41 29 3b 69 66 28 7a 3d 3d 35 30 29 7a 3d 28 43 7c 36 29 3e 3d 33 26 26 28 43 2b 38 26 38 29 3c 34 3f 34 39 3a 35 3b 65 6c 73 65 20 69 66 28 7a 3d 3d 34 39 29 7a 3d 64 3f 39 3a 35 3b 65 6c 73 65 7b 69 66 28 7a 3d 3d 34 33 29 72 65 74 75 72 6e 20 61 3b 69 66 28 7a 3d 3d 33 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 64 65 63 6f 72 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 20 22 2b 45 29 3b 7a 3d 3d 35 3f 7a 3d 43 3c 3c 31 26 37 3f 34 33 3a 36 34 3a 7a 3d 3d 38 38 26 26 28 7a 3d 74 79 70 65 6f 66 20 45 21 3d 3d 22 66 75 6e Data Ascii: table:true,value:p})}z=5}else{if(z==37)throw Error("Invalid class name "+A);if(z==50)z=(C\|6)>=3&&(C+8&8)<4?49:5;else if(z==49)z=d?9:5;else{if(z==43)return a;if(z==3)throw Error("Invalid decorator function "+E);z==5?z=C<<1&7?43:64:z==88&&(z=typeof E!=="fun
2024-10-01 18:34:11 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 64 29 7b 64 28 43 29 7d 29 2c 63 3d 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 5d 2c 6d 3d 36 39 3b 65 6c 73 65 20 69 66 28 6d 3d 3d 37 35 29 74 68 69 73 2e 68 3d 43 2c 6d 3d 33 3b 65 6c 73 65 7b 69 66 28 6d 3d 3d 37 36 29 72 65 74 75 72 6e 20 63 3b 6d 3d 3d 36 39 3f 6d 3d 45 2d 33 3e 3e 33 3d 3d 31 3f 39 31 3a 38 32 3a 6d 3d 3d 35 30 3f 6d 3d 28 45 2d 33 7c 38 31 29 3c 45 26 26 45 2d 39 3c 3c 32 3e 3d 45 3f 33 38 3a 37 36 3a 6d 3d 3d 31 36 3f 28 47 3d 74 79 70 65 6f 66 20 41 2c 63 3d 47 3d 3d 43 26 26 41 21 3d 6e 75 6c 6c 7c 7c 47 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 6d 3d 35 30 29 3a 6d 3d 3d 38 32 3f 6d 3d 28 45 2b 37 26 34 32 29 3e 3d 45 26 26 45 2b 35 3e 3e 31 3c 45 Data Ascii: unction(d){d(C)}),c=[function(){return C},function(){}],m=69;else if(m==75)this.h=C,m=3;else{if(m==76)return c;m==69?m=E-3>>3==1?91:82:m==50?m=(E-3\|81)<E&&E-9<<2>=E?38:76:m==16?(G=typeof A,c=G==C&&A!=null\|\|G=="function",m=50):m==82?m=(E+7&42)>=E&&E+5>>1<E
2024-10-01 18:34:11 UTC	1390	IN	Data Raw: 3a 33 31 3b 65 6c 73 65 20 69 66 28 55 3d 3d 37 30 29 55 3d 31 31 3b 65 6c 73 65 20 69 66 28 55 3d 3d 39 34 29 63 3d 47 2e 73 72 63 2c 55 3d 32 33 3b 65 6c 73 65 20 69 66 28 55 3d 3d 33 33 29 7b 69 66 28 63 2e 55 2e 6c 65 6e 67 74 68 29 7b 63 2e 47 6a 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 63 2e 74 63 3d 47 2c 63 2e 47 6a 3d 74 72 75 65 3b 74 72 79 7b 6b 3d 63 2e 50 28 29 2c 63 2e 65 57 3d 6b 2c 63 2e 46 68 3d 30 2c 63 2e 7a 6a 3d 30 2c 63 2e 62 39 3d 6b 2c 6d 3d 4c 24 28 31 2c 30 2c 35 2c 74 72 75 65 2c 6e 75 6c 6c 2c 47 2c 63 29 2c 4a 3d 41 3f 30 3a 31 30 2c 64 3d 63 2e 50 28 29 2d 63 2e 65 57 2c 63 2e 6a 57 2b 3d 64 2c 63 2e 53 57 26 26 63 2e 53 57 28 64 2d 63 2e 5a 2c 63 2e 59 2c 63 2e 73 2c 63 2e 46 68 29 2c 63 2e 73 3d 45 2c 63 2e 5a 3d 30 Data Ascii: :31;else if(U==70)U=11;else if(U==94)c=G.src,U=23;else if(U==33){if(c.U.length){c.Gj&&":TQR:TQR:"(),c.tc=G,c.Gj=true;try{k=c.P(),c.eW=k,c.Fh=0,c.zj=0,c.b9=k,m=L$(1,0,5,true,null,G,c),J=A?0:10,d=c.P()-c.eW,c.jW+=d,c.SW&&c.SW(d-c.Z,c.Y,c.s,c.Fh),c.s=E,c.Z=0
2024-10-01 18:34:11 UTC	1390	IN	Data Raw: 43 2b 28 47 7c 2d 31 32 39 29 26 26 28 47 3d 28 6d 3d 47 26 31 32 37 2c 63 3d 76 68 28 33 2c 45 2c 74 72 75 65 29 3c 3c 37 2c 7e 28 6d 26 63 29 2d 32 2a 7e 28 6d 7c 63 29 2b 28 7e 6d 5e 63 29 29 29 2c 6b 3d 47 29 2c 6b 7d 2c 66 24 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 45 2c 41 2c 47 2c 63 2c 6d 2c 64 2c 6b 2c 4a 2c 55 2c 77 2c 67 2c 54 2c 70 29 7b 66 6f 72 28 67 3d 34 39 3b 67 21 3d 36 38 3b 29 69 66 28 67 3d 3d 31 34 29 6d 3d 41 2c 6d 3d 28 63 3d 6d 3c 3c 31 33 2c 28 63 7c 30 29 2b 7e 63 2d 28 7e 6d 5e 63 29 29 2c 6d 5e 3d 6d 3e 3e 31 37 2c 6d 5e 3d 6d 3c 3c 35 2c 28 6d 3d 28 6d 7c 47 29 2d 28 6d 26 7e 47 29 2d 28 7e 6d 26 47 29 29 7c 7c 28 6d 3d 31 29 2c 54 3d 7e 45 2b 7e 6d 2d 32 2a 7e 28 45 7c 6d 29 2c 67 3d 38 30 3b 65 6c 73 65 20 69 66 28 67 3d 3d 39 Data Ascii: C+(G\|-129)&&(G=(m=G&127,c=vh(3,E,true)<<7,~(m&c)-2~(m\|c)+(~m^c))),k=G),k},f$=function(C,E,A,G,c,m,d,k,J,U,w,g,T,p){for(g=49;g!=68;)if(g==14)m=A,m=(c=m<<13,(c\|0)+~c-(~m^c)),m^=m>>17,m^=m<<5,(m=(m\|G)-(m&~G)-(~m&G))\|\|(m=1),T=~E+~m-2~(E\|m),g=80;else if(g==9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49927	3.215.172.219	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:12 UTC	1062	OUT	GET /analytics?conly=true&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Quinn%20Emanuel%20Trial%20Lawyers%20-%20Quinn%20Emanuel%20Urquhart%20&%20Sullivan,%20LLP&url=https://www.quinnemanuel.com/&referrer= HTTP/1.1 Host: news.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quinnemanuel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
2024-10-01 18:34:12 UTC	966	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:34:12 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 50 Connection: close set-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache x-pardot-rsp: 0/0/1 p3p: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml" set-cookie: visitor_id865552=1743662215; expires=Fri, 29-Sep-2034 18:34:12 GMT; Max-Age=315360000; path=/; secure; SameSite=None set-cookie: visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; expires=Fri, 29-Sep-2034 18:34:12 GMT; Max-Age=315360000; path=/; secure; SameSite=None vary: User-Agent X-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1
2024-10-01 18:34:12 UTC	50	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 70 69 52 65 73 70 6f 6e 73 65 28 29 20 7b 0a 09 09 09 0a 09 7d 0a 70 69 52 65 73 70 6f 6e 73 65 28 29 3b 0a 0a 0a 0a 0a Data Ascii: function piResponse() {}piResponse();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49929	142.250.186.150	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:13 UTC	458	OUT	GET /vi/JCcqzCo7X-M/default.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:34:13 UTC	654	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3067 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 18:34:13 GMT Expires: Tue, 01 Oct 2024 20:34:13 GMT Cache-Control: public, max-age=7200 ETag: "1685634630" Content-Type: image/jpeg Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:34:13 UTC	736	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0f 10 0d 0e 0b 0f 09 0d 0d 11 0d 0d 10 0e 0e 0d 0d 0a 0f 0d 09 0f 0b 0d 0d 08 0a 0e 0d 0a 0d 0d 10 10 0f 0e 0f 0e 0e 0a 0a 0f 15 0d 11 11 1d 15 13 13 0d 0d 16 18 17 12 1a 11 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 1a 15 11 15 18 13 17 15 1e 1e 1b 18 16 16 18 18 1a 1b 15 15 19 17 15 15 15 15 1e 1a 19 16 17 1c 17 1a 17 15 17 15 15 1e 17 15 15 18 15 15 17 15 17 17 17 15 17 16 ff c0 00 11 08 00 5a 00 78 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 03 06 01 04 07 08 02 ff c4 00 3d 10 00 02 01 02 03 05 04 06 07 07 05 00 00 00 00 00 01 02 03 00 11 04 12 21 05 13 22 31 41 06 51 91 d1 07 14 15 32 52 a1 23 53 61 71 92 b1 c1 08 Data Ascii: JFIFZx"=!"1AQ2R#Saq
2024-10-01 18:34:13 UTC	1390	IN	Data Raw: 62 b6 0d 90 f2 39 49 00 db 96 97 ad 9f 67 49 a1 dc 49 c4 a5 d4 ee da c6 30 01 2e ba 6a a0 10 4b 0d 00 22 af 9e 90 9a db 0b 60 9e e7 da df fa b0 5c ab d3 1b 67 64 b0 c4 6c cc 31 81 e3 4c 33 62 76 2c 65 e3 28 b2 e1 e6 d8 18 6c 40 68 af 61 22 7a c6 0d a3 0e 34 bc 6e 3a 1a b6 33 08 da 00 1c fc 95 30 a6 32 38 92 79 1f ba f1 4c 98 27 00 93 13 80 02 b1 25 18 00 af ee 12 48 d0 3d 8e 53 d7 a5 ea 0a f5 4f ed 4b 84 58 36 71 75 e5 89 1b 33 02 7b b3 ec ff 00 de 27 71 6f f8 b2 28 fb ed 5c ef d1 d7 a0 89 71 38 64 c6 34 c0 2c a0 14 8d 4e 57 e3 f7 0b 39 47 1a 8e 99 2d 72 bc 5c ea 35 4e d5 82 96 31 24 c6 d7 36 16 04 93 95 f4 03 fc 5c 3a 8d d8 f0 b3 3c ae b8 d5 15 e8 75 fd 9c f4 be f2 6b 5a fa 4a 84 58 8c c3 fa 3d 45 ad df 71 4b fb 4b fb 3a 4a 88 f2 47 88 08 23 56 67 33 b0 Data Ascii: b9IgII0.jK"`\gdl1L3bv,e(l@ha"z4n:3028yL'%H=SOKX6qu3{'qo(\q8d4,NW9G-r\5N1$6\:<ukZJX=EqKK:JG#Vg3
2024-10-01 18:34:13 UTC	941	IN	Data Raw: 1a 36 92 e7 2c 85 03 29 c3 95 b1 8a 45 70 e5 b3 38 92 e7 dd 16 e7 66 9e b7 6a 65 26 e7 21 23 96 8c 80 02 58 d9 44 6c a0 1b 31 5c e0 66 c9 c1 9b 29 60 68 ea f6 49 3f a7 9f f1 16 b5 80 b0 c1 ee a6 c7 54 3e af 7f ed 35 21 9e 3b 49 34 e4 3c 01 8c 2b 03 2b 3b 46 55 d8 b1 10 64 2a 32 44 82 42 4e 56 95 18 b5 94 ab 4e f2 93 20 b6 23 1b 30 fa 49 25 cb 0b 92 65 46 8d 63 64 56 4b 00 f8 8c 2d c0 6f 70 05 42 54 ab de b7 88 db 8e ca 51 92 32 ad 62 cb bb b2 97 55 8e 34 7b 29 00 14 48 d1 40 5b 2d 81 ba 9c cd 79 71 1d a6 95 98 39 29 75 6c c2 d1 80 01 de 61 a7 3e ed af 79 30 d1 b1 be b7 cd cb 31 ae 0e cd 9b 90 e3 ca c2 e0 0c bf 0e bd 46 80 e7 a0 eb 78 67 3f 9f 74 e2 79 20 55 0a d8 b9 d5 a3 52 a1 1e 2c e8 a0 e4 87 23 45 24 40 32 98 22 8b 84 9b 5f 5e 7a 14 9b 47 6c c9 bd 77 Data Ascii: 6,)Ep8fje&!#XDl1\f)`hI?T>5!;I4<++;FUd*2DBNVN #0I%eFcdVK-opBTQ2bU4{)H@[-yq9)ula>y01Fxg?ty UR,#E$@2"_^zGlw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49930	142.250.186.150	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:13 UTC	464	OUT	GET /vi_webp/pD218Mqhqms/default.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:34:13 UTC	630	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2664 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 18:34:13 GMT Expires: Tue, 01 Oct 2024 20:34:13 GMT Cache-Control: public, max-age=7200 ETag: "1585940789" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 18:34:13 UTC	760	IN	Data Raw: 52 49 46 46 60 0a 00 00 57 45 42 50 56 50 38 20 54 0a 00 00 70 2b 00 9d 01 2a 78 00 5a 00 3e 6d 1c 9b 4d a4 21 24 24 15 50 80 0d 89 48 8e e4 0a a3 ee f3 5e cb 9a b8 2a 7e 65 fa 3f d1 7a bb fb 80 df 89 e6 03 ce ef d1 5f 94 07 59 37 a0 07 4a cf f7 9f f8 3e 96 95 96 79 c1 f5 67 b5 fc ca a2 59 da bf ed fc b8 ff 6b e0 ff c5 2f e8 3d 40 bd 7f fe 23 d1 0f dc 3b 55 34 4f f2 5f ea bd 40 bd a7 fa 67 f9 df 06 af eb fd 03 fa fd fe e3 d5 2f f5 7f 4b 7f aa f8 42 7d 87 fc 3f b0 07 f2 7f e9 5f ee 3d 99 ff 96 ff dd fe 8f ce 9f d2 ff b4 1f 01 bf af 5e 99 5e b7 bf 6d bd 94 ff 53 94 0b 08 35 2d ff e2 9a 5e 58 87 d0 81 b7 bf d1 2d 8d f1 cb 67 94 0d 3f 47 19 f5 39 c3 9b 2a 79 1b 76 de d0 f3 1d 63 e3 ba 03 76 c0 69 62 b2 1d d7 6b 10 bc d9 4f 32 a2 6d b3 53 16 e6 2d 1d 9e 5d cf Data Ascii: RIFF`WEBPVP8 Tp+xZ>mM!$$PH^~e?z_Y7J>ygYk/=@#;U4O_@g/KB}?_=^^mS5-^X-g?G9*yvcvibkO2mS-]
2024-10-01 18:34:13 UTC	1390	IN	Data Raw: 97 28 27 d8 b6 91 d2 72 1d a1 c1 3d 55 79 fb 75 c5 e8 6b 1f 83 79 ff 16 60 cb f5 c0 7a ab 57 57 87 a1 53 39 81 21 65 9a 03 6d 40 d6 cd db 35 4e 57 19 6b eb 7d a8 7c ca 3e 3f e9 dc 58 ac 65 13 2c b5 4b 17 24 f5 83 5a e2 29 89 65 f4 87 8d 15 19 99 0f 04 5d ab b3 c7 16 6f 55 65 54 38 1e 64 72 8a 88 21 73 38 9b 36 4c e7 7d 8f 07 9b c8 73 22 2d 4a f2 a2 8d 37 e7 23 88 df b8 cd 29 9f b4 50 eb 18 6f 2a e3 78 6f 35 a1 6d f6 e3 df e2 57 9f d8 34 4e 1a 1e f3 91 68 b5 42 85 3e c6 d8 8e fa bd fb 3f c4 8a 95 ed ee df 78 15 de 2e 7d dd 7c f1 3c 90 9c 77 49 32 41 fa 95 57 35 fe 4f d1 f4 b3 bf e0 ae 5e 1e 6a 89 76 09 bc 2b ea ab b8 27 0f 71 dc 9b 00 39 6a 3a 56 cb 41 73 98 8d a1 51 12 4c a8 9f 68 6a dd 38 f5 e7 1d 99 0d 99 99 d2 c5 02 fd 08 f2 70 86 c0 5a 7a 56 b0 c3 ae Data Ascii: ('r=Uyuky`zWWS9!em@5NWk}\|>?Xe,K$Z)e]oUeT8dr!s86L}s"-J7#)Po*xo5mW4NhB>?x.}\|<wI2AW5O^jv+'q9j:VAsQLhj8pZzV
2024-10-01 18:34:13 UTC	514	IN	Data Raw: d4 a2 c2 83 1d 61 94 bd bf af 8d b9 26 8b 27 2c 1c a1 18 71 de 19 2f 64 02 00 5d 9a 34 6f 6d 0b a1 7e 49 ff fb 4e bd df 6e 6f 37 88 17 a8 5d 22 cb de 59 ac 3f 92 0d d8 0f 46 e5 a1 7f fe 39 4e bf f9 06 ef ac bf 11 2c 75 73 53 7e 5e 19 33 61 84 42 d2 cc bb 89 97 68 9a 9a 5d 9c 3b 84 f1 bd a1 75 28 a2 66 98 84 6a 24 ca 71 10 f9 cb 48 c7 e2 78 16 69 63 7b b4 f0 a4 a3 a4 99 d9 e5 cf 51 dd 4d 9e 0f ff 29 cf f9 0a 3c b9 4c 73 49 23 03 14 b7 14 77 9b c8 b9 dc d5 ad 8e 94 de d7 91 f7 c7 8e d2 b9 eb 9e 85 ab 51 8b d4 8b 0d d2 f5 72 13 22 09 c3 4d a5 fa 95 d7 11 53 e7 2d d0 ca bc 3f 8b 5c 81 6c 83 77 9a ed 2d 58 80 65 7f 03 11 f7 21 7b 49 ad 08 b4 57 fc eb f7 51 7d f9 14 72 50 82 b8 3c b8 4b 4f 74 9d 2b c8 af c6 1a 14 ed c0 ad bc 53 62 7b 41 8b 35 3d 7b 63 24 33 92 Data Ascii: a&',q/d]4om~INno7]"Y?F9N,usS~^3aBh];u(fj$qHxic{QM)<LsI#wQr"MS-?\lw-Xe!{IWQ}rP<KOt+Sb{A5={c$3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49933	142.250.181.226	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:13 UTC	466	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:34:13 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Tue, 01 Oct 2024 18:34:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:34:13 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 6f 54 7a 6a 57 51 6d 31 6f 4e 62 55 61 55 4b 41 49 6f 6a 39 41 46 37 48 4e 77 61 5f 65 54 39 6f 48 6e 51 48 46 70 43 78 55 4b 44 45 7a 68 56 65 4a 39 45 67 62 70 74 79 35 59 62 45 6a 33 2d 52 41 68 59 54 50 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKqoTzjWQm1oNbUaUKAIoj9AF7HNwa_eT9oHnQHFpCxUKDEzhVeJ9Egbpty5YbEj3-RAhYTP","type":4}
2024-10-01 18:34:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49937	142.250.181.226	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:25 UTC	466	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 18:34:26 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Tue, 01 Oct 2024 18:34:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:34:26 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 43 56 72 32 44 66 55 71 5a 4c 39 79 6b 63 74 44 67 34 77 39 37 71 42 78 47 72 5f 48 77 66 67 61 31 38 31 68 75 45 39 49 4d 2d 30 38 44 35 41 44 62 48 73 73 68 62 77 6b 7a 77 79 58 47 57 5f 72 5f 37 37 35 76 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKpCVr2DfUqZL9ykctDg4w97qBxGr_Hwfga181huE9IM-08D5ADbHsshbwkzwyXGW_r_775v","type":4}
2024-10-01 18:34:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49942	3.92.120.28	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:25 UTC	561	OUT	GET /pd.js HTTP/1.1 Host: pi.pardot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; lpv865552=aHR0cHM6Ly93d3cucXVpbm5lbWFudWVsLmNvbS8%3D
2024-10-01 18:34:26 UTC	374	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:34:25 GMT Content-Type: application/javascript Content-Length: 5620 Connection: close last-modified: Tue, 01 Oct 2024 05:27:49 GMT etag: "15f4" accept-ranges: bytes cache-control: max-age=63072000 expires: Thu, 01 Oct 2026 18:34:25 GMT vary: Accept-Encoding,User-Agent X-Pardot-Route: 16b0ab393667a33fe86adedc3141e88c
2024-10-01 18:34:26 UTC	5620	IN	Data Raw: 2f 2a 21 0a 09 4d 61 72 6b 65 74 69 6e 67 20 43 6c 6f 75 64 20 41 63 63 6f 75 6e 74 20 45 6e 67 61 67 65 6d 65 6e 74 27 73 20 45 6e 67 61 67 65 6d 65 6e 74 20 54 72 61 63 6b 65 72 20 4a 61 76 61 73 63 72 69 70 74 20 2d 20 32 30 32 33 2d 30 34 2d 31 33 20 31 31 3a 32 34 3a 34 37 0a 09 49 66 20 79 6f 75 27 72 65 20 61 6e 20 61 64 20 62 6c 6f 63 6b 65 72 2c 20 62 6c 6f 63 6b 20 74 68 65 20 55 52 49 20 6f 6e 6c 79 2e 20 44 6f 6e 27 74 20 62 6c 6f 63 6b 20 74 68 65 20 64 6f 6d 61 69 6e 2e 0a 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 4e 61 6d 65 73 70 61 63 65 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 72 3d 77 69 6e 64 6f 77 2c 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 61 3d 74 5b 69 Data Ascii: /!Marketing Cloud Account Engagement's Engagement Tracker Javascript - 2023-04-13 11:24:47If you're an ad blocker, block the URI only. Don't block the domain./function checkNamespace(e){for(var t=e.split("."),r=window,i=0;i<t.length;i++){var a=t[i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49939	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:25 UTC	709	OUT	GET /dist/img/favicon.ico HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
2024-10-01 18:34:26 UTC	2112	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 07 Sep 2020 17:44:40 GMT Accept-Ranges: bytes ETag: "629cff8f3e85d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:38 GMT Connection: close Content-Length: 5430
2024-10-01 18:34:26 UTC	5430	IN	Data Raw: 00 00 01 00 02 00 20 20 00 00 01 00 20 00 a8 10 00 00 26 00 00 00 10 10 00 00 01 00 20 00 68 04 00 00 ce 10 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 c8 f3 f0 3e ab ec e8 60 ab ec e8 60 ab ec e8 60 ab ec e8 60 ac ed e8 5d c0 f1 ed 48 eb fa f9 15 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 b3 ee ea 55 8b e6 df 83 8b e6 df 83 8b e6 df 83 8b Data Ascii: & h( @ >````]HU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49954	3.92.120.28	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:27 UTC	799	OUT	GET /analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=114357&account_id=866552&title=Quinn%20Emanuel%20Trial%20Lawyers%20-%20Quinn%20Emanuel%20Urquhart%20%26%20Sullivan%2C%20LLP&url=https%3A%2F%2Fwww.quinnemanuel.com%2F&referrer= HTTP/1.1 Host: pi.pardot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; lpv865552=aHR0cHM6Ly93d3cucXVpbm5lbWFudWVsLmNvbS8%3D
2024-10-01 18:34:27 UTC	1238	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:34:27 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 1153 Connection: close set-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache x-pardot-rsp: 0/0/1 strict-transport-security: max-age=31536000; includeSubDomains p3p: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml" set-cookie: visitor_id865552=1743662215; expires=Fri, 29-Sep-2034 18:34:27 GMT; Max-Age=315360000; path=/; domain=.pardot.com; secure; SameSite=None set-cookie: visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; expires=Fri, 29-Sep-2034 18:34:27 GMT; Max-Age=315360000; path=/; domain=.pardot.com; secure; SameSite=None set-cookie: lpv865552=aHR0cHM6Ly93d3cucXVpbm5lbWFudWVsLmNvbS8%3D; expires=Tue, 01-Oct-2024 19:04:27 GMT; Max-Age=1800; path=/; secure; SameSite=None vary: Accept-Encoding,User-Agent X-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1
2024-10-01 18:34:27 UTC	1153	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 70 69 52 65 73 70 6f 6e 73 65 28 29 20 7b 0a 09 09 70 69 53 65 74 43 6f 6f 6b 69 65 28 27 76 69 73 69 74 6f 72 5f 69 64 38 36 35 35 35 32 27 2c 20 27 31 37 34 33 36 36 32 32 31 35 27 2c 20 33 36 35 30 29 3b 0a 09 09 09 70 69 53 65 74 43 6f 6f 6b 69 65 28 27 76 69 73 69 74 6f 72 5f 69 64 38 36 35 35 35 32 2d 68 61 73 68 27 2c 20 27 34 63 61 37 36 33 30 63 61 30 30 39 39 63 33 66 32 61 31 38 39 37 64 34 30 34 64 62 36 61 64 34 32 38 62 37 34 64 35 63 64 33 31 33 39 65 34 64 36 36 66 66 35 64 34 38 62 33 36 30 66 31 37 39 61 38 33 63 61 32 64 36 66 62 66 65 34 39 62 37 30 62 62 39 35 66 65 36 61 30 38 38 37 30 34 31 32 32 36 37 66 66 33 33 27 2c 20 33 36 35 30 29 3b 0a 09 09 0a 09 09 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f Data Ascii: function piResponse() {piSetCookie('visitor_id865552', '1743662215', 3650);piSetCookie('visitor_id865552-hash', '4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33', 3650);if (document.lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49952	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:27 UTC	990	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1244 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=eFfo6MFZeKzMjvh75uRBO59bN-utcN8_Y6mHqxiVtWEXy7mQfYil-Pbb_z3X3oLOgc_-DCXffxO-aYZowjbLJJu8qjCgMZeg-OLJcnLnfcgOVY-7-DCMjBih_yi0CaUb5L7SuHBMMwG8N39mCetcJ46JEW8iDVGbGDcyTAO3lIl-S3FX28_DXfZSGgs
2024-10-01 18:34:27 UTC	1244	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 36 35 32 36 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1727807665267",null,null,null
2024-10-01 18:34:27 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:34:27 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:34:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:34:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49951	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:27 UTC	990	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1259 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=eFfo6MFZeKzMjvh75uRBO59bN-utcN8_Y6mHqxiVtWEXy7mQfYil-Pbb_z3X3oLOgc_-DCXffxO-aYZowjbLJJu8qjCgMZeg-OLJcnLnfcgOVY-7-DCMjBih_yi0CaUb5L7SuHBMMwG8N39mCetcJ46JEW8iDVGbGDcyTAO3lIl-S3FX28_DXfZSGgs
2024-10-01 18:34:27 UTC	1259	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 36 35 32 37 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1727807665275",null,null,null
2024-10-01 18:34:27 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:34:27 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:34:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:34:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49950	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:27 UTC	990	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1250 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=eFfo6MFZeKzMjvh75uRBO59bN-utcN8_Y6mHqxiVtWEXy7mQfYil-Pbb_z3X3oLOgc_-DCXffxO-aYZowjbLJJu8qjCgMZeg-OLJcnLnfcgOVY-7-DCMjBih_yi0CaUb5L7SuHBMMwG8N39mCetcJ46JEW8iDVGbGDcyTAO3lIl-S3FX28_DXfZSGgs
2024-10-01 18:34:27 UTC	1250	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 36 35 32 37 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1727807665277",null,null,null
2024-10-01 18:34:27 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:34:27 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:34:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:34:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49949	216.58.206.46	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:27 UTC	990	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1279 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=eFfo6MFZeKzMjvh75uRBO59bN-utcN8_Y6mHqxiVtWEXy7mQfYil-Pbb_z3X3oLOgc_-DCXffxO-aYZowjbLJJu8qjCgMZeg-OLJcnLnfcgOVY-7-DCMjBih_yi0CaUb5L7SuHBMMwG8N39mCetcJ46JEW8iDVGbGDcyTAO3lIl-S3FX28_DXfZSGgs
2024-10-01 18:34:27 UTC	1279	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 33 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 37 38 30 37 36 36 35 34 39 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"30",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1727807665496",null,null,null
2024-10-01 18:34:27 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Tue, 01 Oct 2024 18:34:27 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 18:34:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-01 18:34:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49955	18.208.125.13	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:29 UTC	1040	OUT	GET /analytics?conly=true&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Quinn%20Emanuel%20Trial%20Lawyers%20-%20Quinn%20Emanuel%20Urquhart%20&%20Sullivan,%20LLP&url=https://www.quinnemanuel.com/&referrer= HTTP/1.1 Host: news.quinnemanuel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
2024-10-01 18:34:29 UTC	923	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 18:34:29 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 50 Connection: close set-cookie: pardot=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0 expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache x-pardot-rsp: 0/0/1 p3p: CP="CAO DSP AND SO ON" policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT", policyref="/w3c/p3p.xml" set-cookie: visitor_id865552=1743662215; expires=Fri, 29-Sep-2034 18:34:29 GMT; Max-Age=315360000; path=/; secure; SameSite=None set-cookie: visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; expires=Fri, 29-Sep-2034 18:34:29 GMT; Max-Age=315360000; path=/; secure; SameSite=None vary: User-Agent X-Pardot-Route: 9b06e8e2308c32c7bf9ba8adfb7be2e1
2024-10-01 18:34:29 UTC	50	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 70 69 52 65 73 70 6f 6e 73 65 28 29 20 7b 0a 09 09 09 0a 09 7d 0a 70 69 52 65 73 70 6f 6e 73 65 28 29 3b 0a 0a 0a 0a 0a Data Ascii: function piResponse() {}piResponse();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49973	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:35 UTC	1001	OUT	GET /offices/doha/ HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
2024-10-01 18:34:36 UTC	2014	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:47 GMT Connection: close Content-Length: 77247
2024-10-01 18:34:36 UTC	14370	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="format-detection" content="telephone=no" /> <meta name="google-site-verific
2024-10-01 18:34:36 UTC	16384	IN	Data Raw: 65 77 73 22 3e 46 69 72 6d 20 4e 65 77 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 74 68 65 2d 66 69 72 6d 2f 6e 65 77 73 2d 65 76 65 6e 74 73 2f 23 62 79 4e 65 77 73 54 79 70 65 3d 31 37 35 33 22 20 74 69 74 6c 65 3d 22 45 76 65 6e 74 73 22 3e 45 76 65 6e 74 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 74 68 65 2d 66 69 72 6d 2f 6e 65 77 73 2d 65 76 65 6e 74 73 2f 23 62 79 4e 65 77 73 54 79 70 65 3d 31 37 30 39 36 22 20 74 69 74 6c 65 Data Ascii: ews">Firm News</a></li> <li><a href="/the-firm/news-events/#byNewsType=1753" title="Events">Events</a></li> <li><a href="/the-firm/news-events/#byNewsType=17096" title
2024-10-01 18:34:36 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 74 6e 2d 64 65 74 61 69 6c 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 74 6e 2d 64 65 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 65 73 69 67 6e 61 74 69 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="atn-details"> <div class="atn-des"> <span class="designation">
2024-10-01 18:34:36 UTC	16384	IN	Data Raw: 2f 73 70 61 6e 3e 20 2f 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 6f 74 61 6c 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 63 75 72 72 65 6e 74 27 29 2e 74 65 78 74 28 73 6c 69 63 6b 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 20 2b 20 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 74 6f 74 61 6c 27 29 2e 74 65 78 74 28 73 6c 69 63 6b 2e 73 6c 69 64 65 43 6f 75 6e 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 73 6c 69 63 6b 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 54 6f 53 68 6f 77 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 Data Ascii: /span> / <span class="total"></span></div>'); $('.current').text(slick.currentSlide + 1); $('.total').text(slick.slideCount); }).slick({ slidesToShow: 1, slide
2024-10-01 18:34:36 UTC	13725	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 09 09 09 09 09 09 20 20 24 28 22 23 61 74 74 6f 72 6e 65 79 44 61 74 61 4c 6f 61 64 65 72 22 29 2e 68 69 64 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 0a 20 20 20 20 7d 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 20 66 61 64 65 22 20 69 64 3d 22 63 6f 6f 6b 69 65 6c 6f 6e 67 6d 6f 64 61 6c 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 72 6f 6c 65 3d 22 64 69 61 6c 6f 67 22 20 61 72 69 Data Ascii: } $("#attorneyDataLoader").hide(); } } }); }); } });</script><div class="modal fade" id="cookielongmodal" tabindex="-1" role="dialog" ari

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49972	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:36 UTC	936	OUT	GET /dist/css/style.css?v=638633793483684870 HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.quinnemanuel.com/offices/doha/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
2024-10-01 18:34:36 UTC	2108	IN	HTTP/1.1 200 OK Content-Type: text/css Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Tue, 10 Sep 2024 12:21:28 GMT Accept-Ranges: bytes ETag: "a7a4f6f57b3db1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:48 GMT Connection: close Content-Length: 90881
2024-10-01 18:34:36 UTC	14276	IN	Data Raw: 0a 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 0a 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a Data Ascii: /* Slider */.slick-slider{ position: relative; display: block; box-sizing: border-box; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none; user-select: none; -webkit-touch-callout:
2024-10-01 18:34:36 UTC	16384	IN	Data Raw: 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 66 66 66 20 35 30 25 2c 20 23 65 65 65 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 46 46 46 46 46 46 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 46 46 45 45 45 45 45 45 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 29 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 63 6c 61 73 73 69 63 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 3a 31 Data Ascii: gradient(to bottom, #fff 50%, #eee 100%);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#FFFFFFFF', endColorstr='#FFEEEEEE', GradientType=0)}.select2-container--classic .select2-selection--single:focus{border:1
2024-10-01 18:34:36 UTC	16384	IN	Data Raw: 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 09 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 09 7d 0d 0a 09 0d 0a 09 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 6f 6e 44 72 61 67 5f 65 78 70 61 6e 64 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 5f 62 61 72 2c 20 2f 2a 20 61 75 74 6f 2d 65 78 70 61 6e 64 65 64 20 73 63 72 6f 6c 6c 62 61 72 20 2a 2f 0d 0a 09 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 6f 6e 44 Data Ascii: 2s ease-in-out;transition: opacity .2s ease-in-out, background-color .2s ease-in-out;}.mCSB_scrollTools_vertical.mCSB_scrollTools_onDrag_expand .mCSB_dragger_bar, /* auto-expanded scrollbar */.mCSB_scrollTools_vertical.mCSB_scrollTools_onD
2024-10-01 18:34:36 UTC	16384	IN	Data Raw: 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 6f 6e 44 72 61 67 5f 65 78 70 61 6e 64 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 43 6f 6e 74 61 69 6e 65 72 3a 68 6f 76 65 72 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 52 61 69 6c 2c 20 0d 0a 09 2e 6d 43 53 2d 72 6f 75 6e 64 65 64 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 6f 6e 44 72 61 67 5f 65 78 70 61 6e 64 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 5f 6f 6e 44 72 61 67 5f 65 78 70 61 6e 64 65 64 20 2b 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 52 61 69 6c 2c 20 0d 0a 09 2e 6d 43 53 2d 72 6f 75 6e 64 65 64 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c Data Ascii: l.mCSB_scrollTools_onDrag_expand .mCSB_draggerContainer:hover .mCSB_draggerRail, .mCS-rounded-dark.mCSB_scrollTools_vertical.mCSB_scrollTools_onDrag_expand .mCSB_dragger.mCSB_dragger_onDrag_expanded + .mCSB_draggerRail, .mCS-rounded-dark.mCSB_scroll
2024-10-01 18:34:36 UTC	16384	IN	Data Raw: 0a 09 09 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 7d 0d 0a 09 0d 0a 09 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 52 61 69 6c 2c 20 0d 0a 09 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 52 61 69 6c 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 7d 0d 0a 09 0d 0a 09 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 2c 20 0d 0a 09 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c Data Ascii: right: auto;}.mCS-minimal.mCSB_scrollTools .mCSB_draggerRail, .mCS-minimal-dark.mCSB_scrollTools .mCSB_draggerRail{ background-color: transparent; }.mCS-minimal.mCSB_scrollTools_vertical .mCSB_dragger, .mCS-minimal-dark.mCSB_scroll
2024-10-01 18:34:36 UTC	11069	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 72 61 6e 67 65 2e 74 6f 64 61 79 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 72 61 6e 67 65 2e 74 6f 64 61 79 2e 64 69 73 61 62 6c 65 64 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 72 61 6e 67 65 2e 74 6f 64 61 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 72 61 6e 67 65 2e 74 6f 64 61 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 33 Data Ascii: -webkit-border-radius:0;-moz-border-radius:0;border-radius:0}.datepicker table tr td.range.today,.datepicker table tr td.range.today.disabled,.datepicker table tr td.range.today.disabled:hover,.datepicker table tr td.range.today:hover{background-color:#f3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49977	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:36 UTC	934	OUT	GET /dist/css/app.css?v=638633793483684870 HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.quinnemanuel.com/offices/doha/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
2024-10-01 18:34:37 UTC	2109	IN	HTTP/1.1 200 OK Content-Type: text/css Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Tue, 10 Sep 2024 12:21:27 GMT Accept-Ranges: bytes ETag: "3d6adcf57b3db1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:48 GMT Connection: close Content-Length: 544945
2024-10-01 18:34:37 UTC	14275	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 61 74 6f 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 4c 61 74 6f 2d 42 6c 61 63 6b 2e 65 6f 74 22 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 4c 61 74 6f 2d 42 6c 61 63 6b 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 4c 61 74 6f 2d 42 6c 61 63 6b 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 4c 61 74 6f 2d 42 6c 61 63 6b 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 22 2e 2e 2f Data Ascii: @font-face { font-family: 'Lato'; src: url("../fonts/Lato-Black.eot"); src: url("../fonts/Lato-Black.eot?#iefix") format("embedded-opentype"), url("../fonts/Lato-Black.woff2") format("woff2"), url("../fonts/Lato-Black.woff") format("woff"), url("../
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 38 2e 33 33 33 33 33 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 2e 33 33 33 33 33 25 3b 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 32 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 31 36 2e 36 36 36 36 37 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 37 25 3b 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 33 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 32 35 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 35 25 3b 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 34 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 33 33 2e 33 33 33 33 33 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 25 3b 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 35 20 7b 0a 20 Data Ascii: flex: 0 0 8.33333%; max-width: 8.33333%; } .col-sm-2 { flex: 0 0 16.66667%; max-width: 16.66667%; } .col-sm-3 { flex: 0 0 25%; max-width: 25%; } .col-sm-4 { flex: 0 0 33.33333%; max-width: 33.33333%; } .col-sm-5 {
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 74 72 6f 6c 2d 72 61 6e 67 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0a 0a 2e 63 6f 6c 2d 66 6f 72 6d 2d 6c 61 62 65 6c 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 63 61 6c 63 28 30 2e 33 37 35 72 65 6d 20 2b 20 31 70 78 29 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 30 2e 33 37 35 72 65 6d 20 2b 20 31 70 78 29 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 20 7d 0a 0a 2e 63 6f 6c 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 6c 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 63 61 6c 63 28 30 2e 35 72 65 Data Ascii: trol-range { display: block; width: 100%; }.col-form-label { padding-top: calc(0.375rem + 1px); padding-bottom: calc(0.375rem + 1px); margin-bottom: 0; font-size: inherit; line-height: 1.5; }.col-form-label-lg { padding-top: calc(0.5re
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 0a 20 20 20 20 2e 73 68 6f 77 20 3e 20 2e 62 74 6e 2d 69 6e 66 6f 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 30 2e 32 72 65 6d 20 72 67 62 61 28 35 38 2c 20 31 37 36 2c 20 31 39 35 2c 20 30 2e 35 29 3b 20 7d 0a 0a 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 31 32 35 32 39 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 63 31 30 37 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 66 66 63 31 30 37 3b 20 7d 0a 20 20 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 63 6f Data Ascii: d):not(.disabled).active:focus, .show > .btn-info.dropdown-toggle:focus { box-shadow: 0 0 0 0.2rem rgba(58, 176, 195, 0.5); }.btn-warning { color: #212529; background-color: #ffc107; border-color: #ffc107; } .btn-warning:hover { co
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 20 23 36 63 37 35 37 64 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 20 7d 0a 0a 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 74 65 78 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 32 35 72 65 6d 20 31 2e 35 72 65 6d 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 31 32 35 32 39 3b 20 7d 0a 0a 2e 62 74 6e 2d 67 72 6f 75 70 2c 0a 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 20 7d 0a 20 20 2e 62 74 6e 2d 67 72 6f 75 70 20 3e 20 2e 62 74 6e 2c 0a 20 20 Data Ascii: #6c757d; white-space: nowrap; }.dropdown-item-text { display: block; padding: 0.25rem 1.5rem; color: #212529; }.btn-group,.btn-group-vertical { position: relative; display: inline-flex; vertical-align: middle; } .btn-group > .btn,
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 6f 6c 6f 72 3a 20 23 34 38 41 38 43 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 72 65 6d 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 30 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 30 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 30 2e 31 35 73 20 65 61 73 65 2d 69 6e Data Ascii: olor: #48A8C0; border: 0; border-radius: 1rem; -webkit-transition: background-color 0.15s ease-in-out, border-color 0.15s ease-in-out, box-shadow 0.15s ease-in-out; transition: background-color 0.15s ease-in-out, border-color 0.15s ease-in
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 72 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 30 2e 37 35 72 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 30 2e 36 32 35 72 65 6d 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 30 3b 20 7d 0a 0a 2e 63 61 72 64 2d 68 65 61 64 65 72 2d 70 69 6c 6c 73 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 30 2e 36 32 35 72 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 30 2e 36 32 35 72 65 6d 3b 20 7d 0a 0a 2e 63 61 72 64 2d 69 6d 67 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 Data Ascii: rem; margin-bottom: -0.75rem; margin-left: -0.625rem; border-bottom: 0; }.card-header-pills { margin-right: -0.625rem; margin-left: -0.625rem; }.card-img-overlay { position: absolute; top: 0; right: 0; bottom: 0; left: 0; padding
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 75 70 2d 69 74 65 6d 20 7b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 20 30 3b 20 7d 0a 20 20 20 20 20 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 78 6c 20 3e 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 20 2b 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 61 63 74 69 76 65 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 20 31 70 78 3b 20 7d 20 7d 0a 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 66 6c 75 73 68 20 7b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 20 7d 0a 20 Data Ascii: up-item { border-top-width: 1px; border-left-width: 0; } .list-group-horizontal-xl > .list-group-item + .list-group-item.active { margin-left: -1px; border-left-width: 1px; } }.list-group-flush { border-radius: 0; }
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 65 20 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 2c 0a 2e 63 61 72 6f 75 73 65 6c 2d 66 61 64 65 20 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 20 7b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 30 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 73 20 30 2e 36 73 3b 20 7d 0a 20 20 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 72 65 64 75 63 65 29 20 7b 0a 20 20 20 20 2e 63 61 72 6f 75 73 65 6c 2d 66 61 64 65 20 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 2c 0a 20 20 20 20 2e 63 61 72 6f 75 73 65 6c 2d 66 61 64 65 20 2e 61 63 74 69 76 65 2e 63 Data Ascii: e .active.carousel-item-left,.carousel-fade .active.carousel-item-right { z-index: 0; opacity: 0; transition: opacity 0s 0.6s; } @media (prefers-reduced-motion: reduce) { .carousel-fade .active.carousel-item-left, .carousel-fade .active.c
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 2d 30 20 7b 0a 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 20 2e 66 6c 65 78 2d 6d 64 2d 73 68 72 69 6e 6b 2d 31 20 7b 0a 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 20 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 73 74 61 72 74 20 7b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 20 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 65 6e 64 20 7b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 20 20 2e 6a 75 73 74 69 66 79 2d 63 6f 6e Data Ascii: -0 { flex-shrink: 0 !important; } .flex-md-shrink-1 { flex-shrink: 1 !important; } .justify-content-md-start { justify-content: flex-start !important; } .justify-content-md-end { justify-content: flex-end !important; } .justify-con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49976	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:36 UTC	918	OUT	GET /dist/js/app.js?v=638633793483684870 HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quinnemanuel.com/offices/doha/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
2024-10-01 18:34:37 UTC	2124	IN	HTTP/1.1 200 OK Content-Type: application/javascript Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Wed, 20 Apr 2022 04:29:57 GMT Accept-Ranges: bytes ETag: "c192494a6f54d81:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:48 GMT Connection: close Content-Length: 692060
2024-10-01 18:34:37 UTC	14260	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 74 72 48 61 6e 64 6c 65 3a 7b 7d 2c 66 69 6e 64 3a 7b 7d 2c 72 65 6c 61 74 69 76 65 3a 7b 22 3e 22 3a 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 66 69 72 73 74 3a 21 30 7d 2c 22 20 22 3a 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 7d 2c 22 2b 22 3a 7b 64 69 72 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 66 69 72 73 74 3a 21 30 7d 2c 22 7e 22 3a 7b 64 69 72 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 7d 7d 2c 70 72 65 46 69 6c 74 65 72 3a 7b 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 3d 65 5b 31 5d 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 2c 65 5b 33 5d 3d 28 65 5b 33 5d 7c 7c 65 5b 34 5d 7c 7c 65 5b 35 5d 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 2c 22 Data Ascii: trHandle:{},find:{},relative:{">":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(e){return e[1]=e[1].replace(te,ne),e[3]=(e[3]\|\|e[4]\|\|e[5]\|\|"").replace(te,ne),"
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 29 7b 6f 5b 30 5d 5b 33 5d 2e 61 64 64 28 6c 28 30 2c 65 2c 6d 28 72 29 3f 72 3a 52 2c 65 2e 6e 6f 74 69 66 79 57 69 74 68 29 29 2c 6f 5b 31 5d 5b 33 5d 2e 61 64 64 28 6c 28 30 2c 65 2c 6d 28 74 29 3f 74 3a 52 29 29 2c 6f 5b 32 5d 5b 33 5d 2e 61 64 64 28 6c 28 30 2c 65 2c 6d 28 6e 29 3f 6e 3a 4d 29 29 7d 29 2e 70 72 6f 6d 69 73 65 28 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 3f 53 2e 65 78 74 65 6e 64 28 65 2c 61 29 3a 61 7d 7d 2c 73 3d 7b 7d 3b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 6f 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 5b 32 5d 2c 72 3d 74 5b 35 5d 3b 61 5b 74 5b 31 5d 5d 3d 6e 2e 61 64 64 2c 72 26 26 6e 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: ){o[0][3].add(l(0,e,m(r)?r:R,e.notifyWith)),o[1][3].add(l(0,e,m(t)?t:R)),o[2][3].add(l(0,e,m(n)?n:M))}).promise()},promise:function(e){return null!=e?S.extend(e,a):a}},s={};return S.each(o,function(e,t){var n=t[2],r=t[5];a[t[1]]=n.add,r&&n.add(function(){
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 72 2e 6e 61 6d 65 73 70 61 63 65 3a 72 2e 6f 72 69 67 54 79 70 65 2c 72 2e 73 65 6c 65 63 74 6f 72 2c 72 2e 68 61 6e 64 6c 65 72 29 2c 74 68 69 73 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 66 6f 72 28 69 20 69 6e 20 65 29 74 68 69 73 2e 6f 66 66 28 69 2c 74 2c 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 72 65 74 75 72 6e 21 31 21 3d 3d 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 28 6e 3d 74 2c 74 3d 76 6f 69 64 20 30 29 2c 21 31 3d 3d 3d 6e 26 26 28 6e 3d 45 65 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 65 2c 6e 2c 74 29 7d 29 7d 7d 29 3b 76 61 72 20 4e 65 3d 2f 3c 73 63 72 69 70 74 7c 3c 73 74 79 6c Data Ascii: r.namespace:r.origType,r.selector,r.handler),this;if("object"==typeof e){for(i in e)this.off(i,t,e[i]);return this}return!1!==t&&"function"!=typeof t\|\|(n=t,t=void 0),!1===n&&(n=Ee),this.each(function(){S.event.remove(this,e,n,t)})}});var Ne=/<script\|<styl
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 74 6f 70 3b 64 65 6c 65 74 65 20 65 2e 73 74 6f 70 2c 74 28 6f 29 7d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 69 26 26 28 6f 3d 65 2c 65 3d 69 2c 69 3d 76 6f 69 64 20 30 29 2c 65 26 26 74 68 69 73 2e 71 75 65 75 65 28 69 7c 7c 22 66 78 22 2c 5b 5d 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 21 30 2c 74 3d 6e 75 6c 6c 21 3d 69 26 26 69 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 2c 6e 3d 53 2e 74 69 6d 65 72 73 2c 72 3d 59 2e 67 65 74 28 74 68 69 73 29 3b 69 66 28 74 29 72 5b 74 5d 26 26 72 5b 74 5d 2e 73 74 6f 70 26 26 61 28 72 5b 74 5d 29 3b 65 6c 73 65 20 66 6f 72 28 74 20 69 6e 20 72 29 72 5b 74 5d 26 26 72 5b 74 5d 2e 73 74 6f 70 26 Data Ascii: tion(e){var t=e.stop;delete e.stop,t(o)};return"string"!=typeof i&&(o=e,e=i,i=void 0),e&&this.queue(i\|\|"fx",[]),this.each(function(){var e=!0,t=null!=i&&i+"queueHooks",n=S.timers,r=Y.get(this);if(t)r[t]&&r[t].stop&&a(r[t]);else for(t in r)r[t]&&r[t].stop&
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 28 61 3d 73 2e 65 72 72 6f 72 29 29 29 3a 28 61 3d 6c 2c 21 65 26 26 6c 7c 7c 28 6c 3d 22 65 72 72 6f 72 22 2c 65 3c 30 26 26 28 65 3d 30 29 29 29 2c 54 2e 73 74 61 74 75 73 3d 65 2c 54 2e 73 74 61 74 75 73 54 65 78 74 3d 28 74 7c 7c 6c 29 2b 22 22 2c 69 3f 78 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 79 2c 5b 6f 2c 6c 2c 54 5d 29 3a 78 2e 72 65 6a 65 63 74 57 69 74 68 28 79 2c 5b 54 2c 6c 2c 61 5d 29 2c 54 2e 73 74 61 74 75 73 43 6f 64 65 28 77 29 2c 77 3d 76 6f 69 64 20 30 2c 67 26 26 6d 2e 74 72 69 67 67 65 72 28 69 3f 22 61 6a 61 78 53 75 63 63 65 73 73 22 3a 22 61 6a 61 78 45 72 72 6f 72 22 2c 5b 54 2c 76 2c 69 3f 6f 3a 61 5d 29 2c 62 2e 66 69 72 65 57 69 74 68 28 79 2c 5b 54 2c 6c 5d 29 2c 67 26 26 28 6d 2e 74 72 69 67 67 65 72 28 22 61 6a 61 78 43 6f Data Ascii: (a=s.error))):(a=l,!e&&l\|\|(l="error",e<0&&(e=0))),T.status=e,T.statusText=(t\|\|l)+"",i?x.resolveWith(y,[o,l,T]):x.rejectWith(y,[T,l,a]),T.statusCode(w),w=void 0,g&&m.trigger(i?"ajaxSuccess":"ajaxError",[T,v,i?o:a]),b.fireWith(y,[T,l]),g&&(m.trigger("ajaxCo
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 3d 3d 3d 6f 7d 29 3b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 74 2c 6f 2c 6e 29 7b 76 61 72 20 69 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 3a 74 2e 73 6c 69 63 65 28 30 2c 4e 28 74 2c 27 6e 61 6d 65 27 2c 6e 29 29 3b 72 65 74 75 72 6e 20 69 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 6e 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e Data Ascii: ,function(e){return e[t]===o});return e.indexOf(n)}function P(t,o,n){var i=void 0===n?t:t.slice(0,N(t,'name',n));return i.forEach(function(t){t['function']&&console.warn('`modifier.function` is deprecated, use `modifier.fn`!');var n=t['function']\|\|t.fn;t.
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 2e 64 65 66 61 75 6c 74 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 Data Ascii: n(t){return t.offsetHeight},triggerTransitionEnd:function(t){o.default(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var i
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 67 65 74 44 69 6d 65 6e 73 69 6f 6e 28 29 3b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 6e 5d 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 5b 6e 5d 2b 22 70 78 22 2c 64 2e 72 65 66 6c 6f 77 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 69 6e 67 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 65 20 73 68 6f 77 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 41 72 72 61 79 2e 6c 65 6e 67 74 68 3b 69 66 28 69 3e 30 29 Data Ascii: efaultPrevented()){var n=this._getDimension();this._element.style[n]=this._element.getBoundingClientRect()[n]+"px",d.reflow(this._element),o.default(this._element).addClass("collapsing").removeClass("collapse show");var i=this._triggerArray.length;if(i>0)
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 74 29 2e 68 61 73 43 6c 61 73 73 28 22 66 61 64 65 22 29 29 7b 76 61 72 20 73 3d 64 2e 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 29 3b 6f 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 29 2e 6f 6e 65 28 64 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 61 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 73 29 7d 65 6c 73 65 20 61 28 29 7d 65 6c 73 65 20 74 26 26 74 28 29 7d 2c 65 2e 5f 61 64 6a 75 73 74 44 69 61 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d Data Ascii: t).hasClass("fade")){var s=d.getTransitionDurationFromElement(this._backdrop);o.default(this._backdrop).one(d.TRANSITION_END,a).emulateTransitionEnd(s)}else a()}else t&&t()},e._adjustDialog=function(){var t=this._element.scrollHeight>document.documentElem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49979	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:37 UTC	938	OUT	GET /scripts/jquery.mCustomScrollbar.js?v=638633793483684870 HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.quinnemanuel.com/offices/doha/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
2024-10-01 18:34:37 UTC	2123	IN	HTTP/1.1 200 OK Content-Type: application/javascript Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Tue, 09 Jun 2020 23:55:05 GMT Accept-Ranges: bytes ETag: "246be665b93ed61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:49 GMT Connection: close Content-Length: 44947
2024-10-01 18:34:37 UTC	14261	IN	Data Raw: 2f 2a 0d 0a 3d 3d 20 6d 61 6c 69 68 75 20 6a 71 75 65 72 79 20 63 75 73 74 6f 6d 20 73 63 72 6f 6c 6c 62 61 72 73 20 70 6c 75 67 69 6e 20 3d 3d 20 0d 0a 76 65 72 73 69 6f 6e 3a 20 32 2e 38 2e 31 20 0d 0a 61 75 74 68 6f 72 3a 20 6d 61 6c 69 68 75 20 28 68 74 74 70 3a 2f 2f 6d 61 6e 6f 73 2e 6d 61 6c 69 68 75 2e 67 72 29 20 0d 0a 70 6c 75 67 69 6e 20 68 6f 6d 65 3a 20 68 74 74 70 3a 2f 2f 6d 61 6e 6f 73 2e 6d 61 6c 69 68 75 2e 67 72 2f 6a 71 75 65 72 79 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 73 63 72 6f 6c 6c 65 72 20 0d 0a 2a 2f 0d 0a 0d 0a 2f 2a 0d 0a 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2d 32 30 31 33 20 4d 61 6e 6f 73 20 4d 61 6c 69 68 75 74 73 61 6b 69 73 20 0d 0a 0d 0a 54 68 69 73 20 70 72 6f 67 72 61 6d 20 69 73 20 66 72 65 65 20 73 6f Data Ascii: /== malihu jquery custom scrollbars plugin == version: 2.8.1 author: malihu (http://manos.malihu.gr) plugin home: http://manos.malihu.gr/jquery-custom-content-scroller //*Copyright 2010-2013 Manos Malihutsakis This program is free so
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 72 69 67 67 65 72 3a 22 69 6e 74 65 72 6e 61 6c 22 7d 29 3b 0d 0a 09 09 09 7d 65 6c 73 65 20 69 66 28 6d 43 53 42 5f 63 6f 6e 74 61 69 6e 65 72 57 3e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 42 6f 78 57 20 26 26 20 24 74 68 69 73 2e 64 61 74 61 28 22 68 6f 72 69 7a 6f 6e 74 61 6c 53 63 72 6f 6c 6c 22 29 29 7b 20 2f 2a 63 6f 6e 74 65 6e 74 20 6e 65 65 64 73 20 68 6f 72 69 7a 6f 6e 74 61 6c 20 73 63 72 6f 6c 6c 69 6e 67 2a 2f 0d 0a 09 09 09 09 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 62 6c 6f 63 6b 22 29 3b 0d 0a 09 09 09 09 76 61 72 20 6d 43 53 42 5f 64 72 61 67 67 65 72 43 6f 6e 74 61 69 6e 65 72 57 3d 6d 43 53 42 5f 64 72 61 67 67 65 72 43 6f 6e 74 61 69 6e 65 72 2e 77 69 64 74 68 28 29 3b 0d 0a 09 09 Data Ascii: rigger:"internal"});}else if(mCSB_containerW>mCustomScrollBoxW && $this.data("horizontalScroll")){ /content needs horizontal scrolling/mCSB_scrollTools.css("display","block");var mCSB_draggerContainerW=mCSB_draggerContainer.width();
2024-10-01 18:34:37 UTC	14302	IN	Data Raw: 69 6f 6e 73 2e 73 63 72 6f 6c 6c 49 6e 65 72 74 69 61 2c 0d 0a 09 09 09 09 73 63 72 6f 6c 6c 42 65 67 69 6e 6e 69 6e 67 2c 73 63 72 6f 6c 6c 42 65 67 69 6e 6e 69 6e 67 4f 66 66 73 65 74 2c 74 6f 74 61 6c 53 63 72 6f 6c 6c 2c 74 6f 74 61 6c 53 63 72 6f 6c 6c 4f 66 66 73 65 74 3b 0d 0a 09 09 09 69 66 28 21 6d 43 53 42 5f 63 6f 6e 74 61 69 6e 65 72 2e 68 61 73 43 6c 61 73 73 28 22 6d 43 53 5f 6e 6f 5f 73 63 72 6f 6c 6c 62 61 72 22 29 29 7b 0d 0a 09 09 09 09 24 74 68 69 73 2e 64 61 74 61 28 7b 22 6d 43 53 5f 74 72 69 67 67 65 72 22 3a 6f 70 74 69 6f 6e 73 2e 74 72 69 67 67 65 72 7d 29 3b 0d 0a 09 09 09 09 69 66 28 24 74 68 69 73 2e 64 61 74 61 28 22 6d 43 53 5f 49 6e 69 74 22 29 29 7b 6f 70 74 69 6f 6e 73 2e 63 61 6c 6c 62 61 63 6b 73 3d 66 61 6c 73 65 3b 7d Data Ascii: ions.scrollInertia,scrollBeginning,scrollBeginningOffset,totalScroll,totalScrollOffset;if(!mCSB_container.hasClass("mCS_no_scrollbar")){$this.data({"mCS_trigger":options.trigger});if($this.data("mCS_Init")){options.callbacks=false;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49978	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:37 UTC	970	OUT	GET /media/oo2oek0r/doha-map.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/offices/doha/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
2024-10-01 18:34:37 UTC	2110	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Wed, 19 Jan 2022 07:46:49 GMT Accept-Ranges: bytes ETag: "7d6b7cb78dd81:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:49 GMT Connection: close Content-Length: 208554
2024-10-01 18:34:37 UTC	14274	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 05 3c a0 03 00 04 00 00 00 01 00 00 03 84 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 03 84 05 3c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i<8Photoshop 3.08BIM8BIM%B~<}!1AQa"q2#BR$3br
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 84 d6 bf e4 23 37 d2 3f fd 16 b4 01 42 d9 77 dc 5b a7 f7 a6 89 79 ff 00 69 d4 50 07 a4 93 80 4f 60 33 f9 50 07 98 b1 cb 31 3c 92 49 24 f7 e6 80 12 80 0a 00 28 00 a0 02 80 0a 00 ec 7c 3d ff 00 1e 92 ff 00 d7 73 ff 00 a0 25 00 66 78 83 fe 3f 23 ff 00 ae 2b ff 00 a1 35 00 60 d0 06 ef 87 ff 00 e3 f5 ff 00 eb 83 ff 00 e8 49 40 1b ba d8 07 4e 9b 3d 9a 23 f8 89 17 14 01 c2 d0 01 40 05 00 14 01 2c 33 49 04 8b 2c 4c 51 d0 e4 11 fa 82 3b 83 d0 83 c1 14 01 dd e9 f7 f1 df 44 08 c2 cc 80 79 b1 e7 90 7f bc bd ca 1e c7 1c 67 07 26 80 34 28 00 a0 02 80 38 af 18 f8 3e df c4 b6 de 6c 5b 2d f5 6b 74 22 da e4 af cb 2a f5 fb 35 c9 07 2d 13 1f b8 e4 13 0b 12 ca 08 2e ac 01 f3 6d dd a5 cd 85 cc d6 77 90 bd bd cd bb 98 e5 8a 41 86 56 1f a3 2b 02 19 1d 72 ae 8c ae a4 ab 06 60 0a Data Ascii: #7?Bw[yiPO`3P1<I$(\|=s%fx?#+5`I@N=#@,3I,LQ;Dyg&4(8>l[-kt"*5-.mwAV+r`
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: d4 3a 3a b2 3a 30 ca ba 38 2a ca c3 b8 65 24 11 e8 68 03 f3 c3 e2 d7 83 4f 83 bc 5d 77 6f 04 45 34 cd 44 b5 fe 9a 71 84 f2 a5 63 e6 c2 bf 33 73 04 a4 a9 1d 00 23 19 cf ca 01 e6 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 1f ff d1 fe e4 3c 4b e1 df 0d f8 ce c6 e3 49 f1 7f 87 3c 3d e2 bd 22 e6 6f b4 4f a4 78 9b 43 d2 f5 fd 26 59 86 ed b2 49 a6 6a d6 b7 96 4e e8 1d 82 33 40 cc a1 88 52 01 3b 40 2f f8 1f c2 de 17 f0 9a 5a 68 9e 13 f0 cf 87 7c 2b a2 43 2c 93 45 a3 78 67 43 d2 bc 3f a4 c7 33 46 aa d2 c7 a6 e9 16 96 76 49 29 54 45 32 2d ba b9 54 45 24 04 5a 00 f5 49 a1 49 e2 92 19 33 b2 45 2a d8 38 38 f6 Data Ascii: :::08e$hO]woE4Dqc3s#P@P@P@P@P@P@P@P@P@P@<KI<="oOxC&YIjN3@R;@/Zh\|+C,ExgC?3FvI)TE2-TE$ZII3E88
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: a2 49 30 c3 82 57 3f df 00 0c 3e 30 3a 9c 8e 98 25 4f 53 9a 00 d0 a0 0e 47 57 d2 7c 9d d7 56 e3 f7 44 e6 58 c7 fc b3 24 e3 72 8e ea 49 e4 67 e5 cf 03 07 e5 00 e7 68 00 a0 0d 1b 0d 46 6b 17 f9 7e 78 98 fe f2 23 d0 fb a9 3f 75 bd 08 cf b8 3d 28 03 ba 82 68 ee 22 49 a2 6d c8 e3 20 f7 1d 88 23 8c 10 41 07 f4 c8 c1 a0 0a da 85 92 5f 40 63 38 59 17 2d 13 e3 3b 5b d3 fd d7 c6 1b f0 3d 40 a0 0e 06 58 a4 82 46 8a 55 28 e8 70 ca 7f 98 3d 08 3d 41 1c 11 cf 71 40 11 d0 01 40 05 00 68 e9 5c ea 16 c3 fe 9a 7f 25 2d fa e3 1d bf a3 00 75 7a c9 c6 9f 37 b9 41 ff 00 8f 8a 00 e0 e8 03 57 45 3b 75 08 4f 1c 87 1c ff 00 b4 b8 f6 e7 9e 3f ae 31 40 1d 26 b4 b9 b2 07 fb b7 36 ed ff 00 91 02 f1 ef f3 7b 71 f9 30 06 b0 e8 3e 82 80 3c ce 4f f5 92 7f be df fa 11 a0 06 50 02 8e a3 ea Data Ascii: I0W?>0:%OSGW\|VDX$rIghFk~x#?u=(h"Im #A_@c8Y-;[=@XFU(p==Aq@@h\%-uz7AWE;uO?1@&6{q0><OP
2024-10-01 18:34:37 UTC	62	IN	Data Raw: 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 1f ff d2 fe ea 28 00 a0 0f 40 d2 97 6e 9f 6b ef 1e ef c1 89 23 f4 3e df d5 80 2c b5 b5 bb 31 66 86 26 62 72 Data Ascii: P@P@P@P@(@nk#>,1f&br
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 49 45 24 9f 52 76 1c 93 f5 fc a8 02 65 55 55 0a a0 2a 81 80 14 60 01 e8 00 c6 3f 2f cb 34 01 13 5b 5b bb 16 78 62 66 3c 96 64 52 4f d4 ec 39 fc ff 00 2c d0 04 81 52 35 c2 85 45 03 b6 02 80 3b ff 00 08 ed ed fd 68 03 8b d6 af a3 bb 99 23 84 ee 8e 0d c3 7f 67 76 c6 4a ff 00 b2 02 e0 75 c9 c9 18 18 dc 01 8b 40 05 00 28 1b 88 53 d0 90 0e 3d f8 a0 0f 4e 5e 15 47 a0 1f cb f1 fe 7f 9d 00 79 bd d1 dd 73 39 ce 73 2c 87 23 be 58 fd 3f 97 e5 40 10 50 07 a1 69 9f f2 0f b3 ff 00 af 78 ff 00 f4 11 40 17 a8 03 3f 55 ff 00 90 7d d7 fd 73 ff 00 d9 d6 80 3c fe 80 0a 00 d7 d3 f5 79 6c 94 c4 cb e7 43 d5 54 b1 0d 19 ef b0 f2 36 9c e4 a9 18 cf 20 8e 68 03 4f fe 12 35 ff 00 9f 66 ff 00 bf 8b 40 07 fc 24 6b ff 00 3e cd ff 00 7f 16 80 0f f8 48 d7 fe 7d 9b fe fe 2d 00 1f f0 91 af Data Ascii: IE$RveUU*`?/4[[xbf<dRO9,R5E;h#gvJu@(S=N^Gys9s,#X?@Pix@?U}s<ylCT6 hO5f@$k>H}-
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: b6 68 02 a6 b9 6d 14 96 6f 3e c5 12 c4 53 6c 98 f9 b6 97 00 a9 23 92 3e 6e 01 e8 79 1d 5a 80 38 aa 00 50 32 40 f5 38 fc e8 03 d2 e1 1b 61 89 79 18 8d 06 0f 51 85 03 9f 7a 00 92 80 2a de 5d 2d 9c 06 76 1b 95 59 01 00 80 48 66 00 ed cf 52 01 ce 39 ce 3e 85 40 1c 0d bd f5 bf 1b 66 86 55 c1 e8 7f 03 ce 55 d4 ff 00 ba ca 79 ed 9a 00 e2 f5 2d 32 4b 17 0c 32 f6 ee 48 47 ee a7 ae c9 3d 0f 3f 2b 74 6d a7 85 38 0c 01 5f 4f ff 00 8f db 5f fa ec 9f ce 80 3b 7d 47 fe 3c 6e 7f eb 91 a0 0f 3c a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 00 a0 02 80 0a 00 28 03 af f0 ef fc 7b 4f ff 00 5d ff 00 f6 9a d0 06 c5 e7 fc 7a 5c ff 00 d7 09 7f f4 06 a0 0f 08 f1 af fc 82 e0 ff 00 af e8 ff 00 f4 45 c5 00 79 7d 00 14 01 bd e1 cf f9 08 91 91 96 b4 bb 0a 09 03 27 ca 27 03 d4 e0 13 81 ce 01 Data Ascii: hmo>Sl#>nyZ8P2@8ayQz*]-vYHfR9>@fUUy-2K2HG=?+tm8_O_;}G<n<((({O]z\Ey}''
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 07 07 b8 cf f9 c8 a0 0d bd 64 67 4e 9f db cb 3f f9 11 7d c7 f5 fa 50 07 07 40 0a 01 24 00 32 49 00 01 d4 93 c0 03 dc 92 31 eb 40 1e 81 a6 5b 3d a5 9c 50 c8 46 ff 00 99 d8 0e 8a 5d b7 6d ef 92 3b 9c f2 72 46 68 03 92 d6 7f e4 21 3f fc 03 ff 00 40 14 01 97 40 05 00 5f d3 6d 52 ee ee 38 64 6c 27 2e c0 1c 16 09 ce c0 7d 5b a1 c6 48 5c 91 82 01 a0 0e fa 38 d2 24 58 e3 50 88 a3 0a ab c0 03 fc fd 7d c9 ce 68 01 f4 01 1c b1 47 32 34 72 a0 74 61 82 a4 64 7d 7d 88 ec 47 22 80 38 eb bd 12 ea 29 88 b6 8d a7 89 b9 42 0a 86 51 fd d6 cf 52 3d 40 00 f5 e3 24 50 05 5f ec 9d 47 fe 7d 5f fe fb 8e 80 3b 1d 36 29 21 b2 82 39 54 a3 aa 9d ca 48 24 65 89 ed 91 d3 d3 f4 e9 40 1c b6 bd ff 00 21 06 ff 00 ae 51 7f 23 40 18 d4 00 50 01 40 05 00 14 00 50 01 40 1e 81 a5 7f c8 3e d7 fe Data Ascii: dgN?}P@$2I1@[=PF]m;rFh!?@@_mR8dl'.}[H\8$XP}hG24rtad}}G"8)BQR=@$P_G}_;6)!9TH$e@!Q#@P@P@>
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 05 00 14 00 50 01 40 05 00 14 00 50 01 40 05 00 14 00 50 01 40 12 45 2c 90 ba c9 13 14 75 39 0c 0e 3f c7 23 d4 1e 0f b7 5a 00 ef 34 db ef b7 41 e6 15 da e8 db 24 1d 8b 63 39 5f 62 0f 71 ed ce 28 03 42 80 0a 00 28 00 a0 02 80 0a 00 28 03 9c d6 35 51 18 7b 4b 76 fd e1 e2 59 01 fb 80 f5 41 fe d1 1d 48 e8 38 eb 8a 00 e4 a8 00 a0 02 80 0a 00 ec 7c 3e f9 b6 91 7f bb 27 1f 4c 7f fa ba 0e 33 d5 b3 f2 80 6f d0 07 01 ab 12 75 0b 9c f6 70 07 b0 da bf e7 fc 8a 00 ce a0 02 80 0a 00 8a 79 16 18 27 95 b8 58 a1 96 43 9f f6 23 66 ed cf 6e d4 01 f9 73 ae dd b5 fe b5 ab 5e 37 de b9 d4 6f 24 ea 4f 06 77 00 e4 f2 72 14 1e 71 8e 9c e0 9a 00 ca a0 02 80 0a 00 28 00 a0 02 80 0a 00 d6 d0 a2 d2 e7 d6 34 e8 35 a9 2e 22 d2 e6 bb 86 2b d9 6d 76 09 e3 81 dc 2b 32 17 f9 46 33 f3 36 18 Data Ascii: P@P@P@E,u9?#Z4A$c9_bq(B((5Q{KvYAH8\|>'L3oupy'XC#fns^7o$Owrq(45."+mv+2F36
2024-10-01 18:34:37 UTC	16384	IN	Data Raw: 97 1f 8a 74 b7 fd e3 59 47 1c 3a 16 bb a5 cb a7 a2 98 ca b5 b4 d7 42 13 24 2e ec 01 fd 8a 68 57 f6 da 8e 99 69 73 6b 71 15 dc 12 c3 1c b0 5c c0 e1 e2 b8 b7 99 04 b6 f7 31 32 f0 f0 dc 42 e9 34 4e 32 1d 1c 30 eb 85 00 fc 98 ff 00 82 bd fe c8 f7 7f b4 37 c0 0b 9f 14 f8 2f 4d fb 47 c5 1f 84 73 cb e3 6f 07 c9 6c 12 2b eb db 0b 74 47 f1 26 83 05 c1 0a ca f7 56 70 0b fb 28 63 64 32 6a 56 36 6b bd 11 e4 56 00 fc 2e f0 ff 00 c5 0f 89 df f0 55 1f 89 7f b2 17 ec ed a8 45 ad 47 e1 af 85 3e 1d b5 9b e2 e6 a8 c1 45 ad f2 e8 93 88 75 4f 15 ce a2 49 e3 79 e4 f0 e5 b6 9f a3 d9 36 a2 25 9a 7d 66 ea 66 2c a6 f6 47 a0 0f eb b3 44 d1 74 bf 0d e8 ba 47 87 74 3b 28 34 dd 17 41 d3 2c 34 6d 23 4e b6 5d 96 f6 1a 66 99 6b 15 95 8d 9c 09 fc 31 5b 5a c1 14 31 8e 4e d4 e4 93 93 40 1a Data Ascii: tYG:B$.hWiskq\12B4N207/MGsol+tG&Vp(cd2jV6kV.UEG>EuOIy6%}ff,GDtGt;(4A,4m#N]fk1[Z1N@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49981	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:38 UTC	984	OUT	GET /media/3vod5e3y/james-bremen-2_540x810.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/offices/doha/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
2024-10-01 18:34:38 UTC	2110	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Thu, 14 Dec 2023 21:45:29 GMT Accept-Ranges: bytes ETag: "540dddad62eda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:50 GMT Connection: close Content-Length: 54957
2024-10-01 18:34:38 UTC	14274	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 82 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 04 90 03 00 02 00 00 00 14 00 00 00 50 90 04 00 02 00 00 00 14 00 00 00 64 92 91 00 02 00 00 00 03 30 30 00 00 92 92 00 02 00 00 00 03 30 30 00 00 00 00 00 00 32 30 32 33 3a 31 30 3a 33 31 20 31 32 3a 30 36 3a 34 37 00 32 30 32 33 3a 31 30 3a 33 31 20 31 32 3a 30 36 3a 34 37 00 00 00 ff e1 01 9c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 27 ef bb bf 27 20 69 64 3d 27 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 27 3f 3e 0d 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e Data Ascii: JFIF,,ExifMM*iPd00002023:10:31 12:06:472023:10:31 12:06:47http://ns.adobe.com/xap/1.0/<?xpacket begin='' id='W5M0MpCehiHzreSzNTczkc9d'?><x:xmpmeta xmln
2024-10-01 18:34:38 UTC	16384	IN	Data Raw: 39 5e 95 e5 ac c6 36 c2 ae 7d f3 eb d6 9e b3 bf 95 f2 90 bd b1 9a e3 ab 81 a5 51 de d6 3a a9 e3 2a 41 5b 73 d2 e5 f1 6e 92 f1 36 cb 95 dc 7a 66 b2 5b c4 76 ae f9 f3 d0 0f 73 5c 50 68 a4 6c cb 12 37 38 c6 0a fe a2 98 f6 50 95 ca 3b 29 3d 32 73 59 2c be 11 ea 68 f1 d3 7d 0f 46 b5 d6 ec 8f 2d 75 10 ff 00 81 56 82 eb 5a 7b 28 ff 00 4a 8f f3 af 23 92 c6 45 00 a6 24 5f f6 4e 7f 4a af b0 d6 52 cb 22 dd ee 6a b3 19 2f b2 7b 4a 6a b6 47 a5 cc 67 f1 aa b7 77 f6 ac 0e d9 e3 ff 00 be ab c8 30 47 7a 6f cd ea 6a 56 57 1f e6 2b fb 4d ff 00 29 e9 92 dc c0 4f 12 a7 e7 50 89 62 cf 12 27 e7 5e 70 4b 7f 79 bf 3a 37 ca 3a 3b 7e 75 5f d9 df de 17 f6 8f f7 4f 49 69 23 c7 0e bf 9d 44 ce 84 fd e1 f9 d7 9d f9 93 7f cf 47 fc e9 c2 69 bf e7 ab ff 00 df 54 bf b3 9f f3 0f fb 45 7f 29 Data Ascii: 9^6}Q:*A[sn6zf[vs\Phl78P;)=2sY,h}F-uVZ{(J#E$_NJR"j/{JjGgw0GzojVW+M)OPb'^pKy:7:;~u_OIi#DGiTE)
2024-10-01 18:34:38 UTC	16384	IN	Data Raw: eb 9f ad 57 1f 6b 94 fc dc 0c e7 93 4e fb 39 c6 f7 97 0d 8c e7 3d 7f ce 28 02 48 d2 7e 01 21 81 e4 0c e7 15 05 c4 50 4d 20 26 1d 87 18 3c 63 f9 54 ca d0 c6 50 ef ce d0 79 27 8a a5 75 77 e6 48 70 06 07 2a 00 e0 9a 06 66 6a 4a 2d 98 2e d6 5f f6 81 eb 59 b2 5c 2e d6 56 76 c1 fe f0 ad 79 65 79 d5 7c c8 b2 84 f7 e6 a8 de 5b c2 3e ea 61 b8 ef 9c d4 b2 8a 36 12 28 66 53 82 33 c5 59 72 4e e3 d0 d6 7e e1 1c f8 5e 98 ab 0c 4b 01 8e bf 5a 80 34 34 96 5f b5 c7 c1 e3 e6 fc 31 5d 15 bf 31 e1 58 9e fc 7f 3a e5 74 7e 6f 17 20 90 01 e0 57 50 80 74 56 20 f4 39 e3 f0 ab 89 2c b1 e6 65 72 d8 66 53 f3 73 8e 33 4a 1f 62 8c 9e a4 64 93 83 51 20 39 c9 cf 4c 0c d0 5f 19 6c 0e 38 07 af ff 00 5e a8 44 b7 13 f9 b1 b2 bf 4d bc 13 db d2 a7 b6 0b 71 14 72 03 b4 95 dc 78 ef 9f f2 2b 3d Data Ascii: WkN9=(H~!PM &<cTPy'uwHp*fjJ-._Y\.Vvyey\|[>a6(fS3YrN~^KZ44_1]1X:t~o WPtV 9,erfSs3JbdQ 9L_l8^DMqrx+=
2024-10-01 18:34:38 UTC	7915	IN	Data Raw: c7 f9 ff 00 eb d5 dc a8 b7 c0 24 b8 e4 f1 fd 6b 3a 4c b4 bc 1e b9 23 1e d5 7b 76 e8 c1 27 eb 83 d6 98 14 af 54 4a a7 1c f6 c8 35 5e 10 d1 c7 b1 c1 1e d8 e9 57 25 71 86 8c 82 71 f9 e6 b3 e5 76 92 6c 13 9e 29 01 64 86 92 32 70 77 2f 3c 0a ca d4 ed b3 18 91 3e f2 7c ac 3f ad 68 c7 2e 25 20 e7 01 79 c9 e2 a1 b7 20 b4 80 8c 86 27 8f 5a 4c 66 08 22 a7 85 b6 b7 e3 4c bd 84 db dc 15 fe 13 c8 fa 53 62 ce 6a 06 77 fe 09 0a cb 71 23 63 72 a1 c5 71 86 46 6b e9 ca ff 00 13 91 fa d6 85 86 a5 26 9d 65 70 c9 c1 74 da 3e a6 b2 f4 b4 f3 67 5c 83 8c f3 4e 4e ca e1 15 76 74 f0 21 6c 20 19 63 84 18 af 7d f0 8e 87 1e 9d a0 5b 42 e9 99 08 de f9 1d cd 79 6f c3 7d 18 ea 7a e2 4a e3 f7 16 d8 91 8f a9 ec 2b db 64 bc 82 d8 84 95 c2 b6 33 82 6b 8f 09 4e f7 9b 3a f1 75 79 6d 04 73 0c Data Ascii: $k:L#{v'TJ5^W%qqvl)d2pw/<>\|?h.% y 'ZLf"LSbjwq#crqFk&ept>g\NNvt!l c}[Byo}zJ+d3kN:uyms

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49982	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:39 UTC	963	OUT	GET /media/ypod3mun/doha-officedetail-desktop-x1.jpg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/offices/doha/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
2024-10-01 18:34:39 UTC	2109	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Wed, 19 Jan 2022 07:44:49 GMT Accept-Ranges: bytes ETag: "b67513708dd81:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:50 GMT Connection: close Content-Length: 56122
2024-10-01 18:34:39 UTC	14275	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-10-01 18:34:39 UTC	16384	IN	Data Raw: 7b 90 ba 90 fa b7 7a 71 e9 ce 93 f4 b3 3a 46 b2 48 df 5b ea 5a be a9 fa 27 ac 8d 13 a4 6b 3d 2f e8 bd c9 37 12 88 4c 6b 56 cd c6 e2 46 e4 7a ee 27 48 91 b2 9d ca d6 09 24 93 dc 54 92 ca 1c 9b 8d c2 d6 74 48 f6 ea 7e fd 0b 46 40 91 06 d2 35 5d 50 47 a3 12 47 a5 1e 84 92 4f 5c 92 49 b8 93 dc 91 08 da 32 04 c9 37 12 6e d2 75 5a 36 36 37 04 8b d0 92 7d 48 1a 16 8c 5a 46 b3 d6 c5 a7 bf 4f b0 d9 b8 f6 fa 6c 7d ca 8f be aa b3 a5 bd d1 64 22 7a 6a 87 dc 42 e8 7d 2f a6 08 e8 43 23 a5 e9 3d 70 fa 60 7a c9 24 93 ac 8d e9 b8 6e 09 37 12 49 b8 9d 5b 92 7a 53 82 46 d1 ee 4f 44 93 d5 07 b9 1d 09 eb 1a 4f 43 62 b1 3d 33 a3 27 aa 06 a3 4d c4 ce b2 7b 89 11 1a 6e 37 1b 8d c4 92 27 23 13 24 6e 74 92 7e 97 1f 64 98 c5 a2 1b 2e fb d4 7d c9 20 68 92 60 6c 4f a9 96 f7 89 20 82 Data Ascii: {zq:FH[Z'k=/7LkVFz'H$TtH~F@5]PGGO\I27nuZ667}HZFOl}d"zjB}/C#=p`z$n7I[zSFODOCb=3'M{n7'#$nt~d.} h`lO
2024-10-01 18:34:39 UTC	16384	IN	Data Raw: 28 e3 a8 c6 ec 95 2a 5f db 93 c6 e4 7c 7c 64 eb 5a c5 5d b8 17 c9 4a f0 1c e5 e3 3c 4b 8f 77 5c bc ac d7 b1 9a ed d3 e3 de 53 0c d5 5d 57 85 93 93 34 c0 e6 9c 95 f7 f9 45 ff 00 5b b0 fd f8 99 f2 d3 27 90 b5 ad 9b 1e 6b cb f9 63 8f 6b 5b 16 7b 64 1f 22 e7 1f 97 9a d8 d5 ef 3c d9 f9 ab 1b 39 68 a3 fb a5 32 d7 ab 76 83 95 3f 16 1b d9 0d cd eb 5a 5e 95 e3 61 a5 69 ca cd c4 74 f2 dc cb 1e 17 97 9b 3e 1f 94 79 59 fb 0e 47 f8 8f 25 f7 3c 99 15 6f c4 e6 d1 cd d1 c9 5f d3 c2 9f 8b 98 fe cc 70 ee eb 53 97 f6 df 1c a3 27 b5 bf 95 61 d2 ae 29 e5 7f d4 8a ce d8 93 1f f1 71 19 61 16 b1 4b 3a ba 3a b5 58 58 38 c9 4e 24 bf 22 bb 36 e7 ff 00 5f 87 95 8b c6 db fe aa b0 9c 92 66 ef 8f 0e 1b df 17 23 e2 c5 5c b9 b0 d3 16 26 b2 72 69 c3 c8 f9 58 aa ad 7e 32 58 95 9c 19 3f 92 Data Ascii: (*_\|\|dZ]J<Kw\S]W4E['kck[{d"<9h2v?Z^ait>yYG%<o_pS'a)qaK::XX8N$"6_f#\&riX~2X?
2024-10-01 18:34:39 UTC	9079	IN	Data Raw: 4a 30 a7 54 f0 e4 16 e4 0f 34 39 a0 4a 3d 47 1d dc 15 d1 53 d2 f8 36 e5 fc b8 c6 9b dd f8 7d 50 68 b7 48 00 3e 0d 27 52 a6 3a c6 23 3c 15 d3 a4 0e 80 35 3d 4d 30 43 a0 47 a6 22 85 fb 14 1c 10 6a a6 da bc f9 72 56 f1 f2 8c 7e 09 3f dd 3e 08 69 9c 60 7d 22 d2 6a 0a 62 a0 3f a8 88 e9 a9 00 34 ab e6 1b 86 4a 32 13 00 61 ac b5 54 e7 eb 88 ea b6 5d c6 1d 38 f6 e3 d8 a7 f9 bf 66 07 f7 e1 9a 81 32 d4 4c 9b 4e e7 04 7c d6 1c 73 58 64 f9 a6 23 c5 4a 22 3d 45 f2 c9 5b 8e 31 a3 73 6a af 6f 23 f7 88 ef 89 58 1d 97 2a 0f 4c 3b 2b 9f 35 72 22 3a 49 31 68 b8 ad 7f 50 ae b8 66 fb 23 2e 4a d3 00 5d 99 f3 c7 82 8e 43 45 38 d5 12 d4 7c 55 cf c5 f4 47 f1 15 45 4f 82 bb c6 ce da ac 2a a4 f0 7a 8c ce e5 fc b3 f3 55 b4 7e 68 7e 59 15 15 ae f5 2f fb b2 f0 0b d3 81 8c 7d 22 f3 04 Data Ascii: J0T49J=GS6}PhH>'R:#<5=M0CG"jrV~?>i`}"jb?4J2aT]8f2LN\|sXd#J"=E[1sjo#XL;+5r":I1hPf#.J]CE8\|UGEOzU~h~Y/}"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49986	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:39 UTC	963	OUT	GET /dist/img/down-arrow.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/dist/css/app.css?v=638633793483684870 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
2024-10-01 18:34:39 UTC	2112	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 07 Sep 2020 17:44:40 GMT Accept-Ranges: bytes ETag: "654fd8f3e85d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:51 GMT Connection: close Content-Length: 1125
2024-10-01 18:34:39 UTC	1125	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 70 78 22 20 68 65 69 67 68 74 3d 22 31 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 20 31 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 35 37 2e 31 20 28 31 30 31 30 31 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="17px" height="10px" viewBox="0 0 17 10" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 57.1 (101010) - https://sketch.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49985	72.32.67.24	443	5552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 18:34:39 UTC	938	OUT	GET /dist/img/dowanload.svg HTTP/1.1 Host: www.quinnemanuel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.quinnemanuel.com/offices/doha/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
2024-10-01 18:34:39 UTC	2113	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Expires: Fri, 23 Mar 2029 00:00:00 GMT Last-Modified: Mon, 07 Sep 2020 17:44:40 GMT Accept-Ranges: bytes ETag: "3f6afc8f3e85d61:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin Content-Security-Policy: default-src 'self' 'unsafe-inline' https://www.google-analytics.com; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdn.mouseflow.com https://news.quinnemanuel.com https://pi.pardot.com https://snap.licdn.com https://static.srcspot.com/libs/avril.js https://www.google.com/recaptcha/api.js https://www.redditstatic.com/ads/pixel.js https://www.gstatic.com https://www.googleadservices.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.22.2/moment.min.js https://cdnjs.cloudflare.com/ajax/libs/moment-timezone/0.5.34/moment-timezone-with-data-10-year-range.js https://addevent.com/libs/atc/1.6.1/atc.min.js https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js https://www.addevent.com https://adservice.google.com https://acsbapp.com; media-src https://quinnemanuel.com; connect-src 'self' https://our.umbraco.com https://n2.mouseflow.com https://stats.g.doubleclick.ne [TRUNCATED] Referrer-Policy: no-referrer-when-downgrade Permissions-Policy: accelerometer=(); camera=(); geolocation=(); gyroscope=(); magnetometer=(); microphone=(); speaker=(); usb=(); vibrate=(); sync-xhr=(self https://quinnemanuel.com) Date: Tue, 01 Oct 2024 18:35:51 GMT Connection: close Content-Length: 1207
2024-10-01 18:34:39 UTC	1207	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 70 78 22 20 68 65 69 67 68 74 3d 22 31 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 20 31 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 35 37 2e 31 20 28 31 30 31 30 31 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="11px" height="12px" viewBox="0 0 11 12" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 57.1 (101010) - https://sketch.com -->

Target ID:	0
Start time:	14:33:20
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:33:24
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1976,i,12190677906875791993,16865103595547294049,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:33:27
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://quinnemanuel.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	14:33:55
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5620 --field-trial-handle=1976,i,12190677906875791993,16865103595547294049,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	14:33:55
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5712 --field-trial-handle=1976,i,12190677906875791993,16865103595547294049,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.quinnemanuel.com/	HTTP Parser: No favicon
Source: https://www.quinnemanuel.com/	HTTP Parser: No favicon
Source: https://www.quinnemanuel.com/	HTTP Parser: No favicon
Source: https://www.quinnemanuel.com/	HTTP Parser: No favicon
Source: https://www.quinnemanuel.com/	HTTP Parser: No favicon
Source: https://www.quinnemanuel.com/	HTTP Parser: No favicon
Source: https://www.quinnemanuel.com/	HTTP Parser: No favicon
Source: https://www.quinnemanuel.com/	HTTP Parser: No favicon

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/css/style.css?v=638633792821681415 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/css/app.css?v=638633792821681415 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/style-dropdown-rich-text.css HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/js/app.js?v=638633792821681415 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/phyidkre/qe-logo.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/0.gif HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/0.gif HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/js-cookie@2/src/js.cookie.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/fonts/Lato-Regular.woff2 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.quinnemanuel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/fonts/Lato-Black.woff2 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.quinnemanuel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/fonts/Lato-Light.woff2 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.quinnemanuel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/avril.js HTTP/1.1Host: static.srcspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/fonts/Lato-Italic.woff2 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.quinnemanuel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/subnav-bg.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/vsln2m1e/london.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/NBEWfKH702s/mqdefault.jpg HTTP/1.1Host: img.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/JCcqzCo7X-M/mqdefault.jpg HTTP/1.1Host: img.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/pD218Mqhqms?&autoplay=0&rel=0 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/eSnzhoiLwx8?&autoplay=0&rel=0 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/NBEWfKH702s?&autoplay=0&rel=0 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/JCcqzCo7X-M?&autoplay=0&rel=0 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/phyidkre/qe-logo.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/js/app.js?v=638633792821681415 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/d9418494/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /dist/img/icn-search.png HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/quote1.json HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/quote2.json HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/fajftxg3/syndey.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/2eqgnp4n/newyork.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/id5e4qm4/losangeles.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /media/bccfwzuh/data-01.png HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/d9418494/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/d9418494/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/d9418494/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /dist/img/graphic-map.png?v=8 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/YouTube.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/facebook-icon.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/twitter-icon.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/insta-icon.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/subnav-bg.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/vsln2m1e/london.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/icn-search.png HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/quote1.json HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/quote2.json HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/fajftxg3/syndey.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/avril.js HTTP/1.1Host: static.srcspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apps/app/dist/js/app.js HTTP/1.1Host: acsbapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/linkedin-icon.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/footerlogo.png HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/2eqgnp4n/newyork.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/search-icon.png HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/homepage-play.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/image-johnquinn-combined-hover.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/world_image.png HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/id5e4qm4/losangeles.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/play-btn.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616
Source: global traffic	HTTP traffic detected: GET /dist/img/left-arrow.png HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/dist/css/app.css?v=638633792821681415Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616
Source: global traffic	HTTP traffic detected: GET /config/quinnemanuel.com/config.json?page=%2F HTTP/1.1Host: cdn.acsbapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.quinnemanuel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/graphic-map.png?v=8 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /images/YouTube.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /media/bccfwzuh/data-01.png HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /images/facebook-icon.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /images/twitter-icon.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /images/insta-icon.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/search-icon.png HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /images/linkedin-icon.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /images/footerlogo.png HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /dist/img/image-johnquinn-combined-hover.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /dist/img/homepage-play.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /dist/img/left-arrow.png HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /config/quinnemanuel.com/config.json?page=%2F HTTP/1.1Host: cdn.acsbapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/d9418494/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /apps/app/dist/js/app.js HTTP/1.1Host: acsbapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/t-IqUp8Jbddkqbic8L7iPCHeaww4UxHeW5fnd9iEy1U.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/play-btn.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /dist/img/world_image.png HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /vi_webp/NBEWfKH702s/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/Kwl4UTqRlZdwo60dxzGVsyg_CEkasAzkebPPx38d0Do.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/eSnzhoiLwx8/default.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/JCcqzCo7X-M/default.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/pD218Mqhqms/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/t-IqUp8Jbddkqbic8L7iPCHeaww4UxHeW5fnd9iEy1U.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?ZNzJTA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204?bzGeHw HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/pD218Mqhqms?&autoplay=0&rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204?BBOfqA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/eSnzhoiLwx8?&autoplay=0&rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204?seAJaA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/JCcqzCo7X-M?&autoplay=0&rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=FhLLzeuQ2wo; VISITOR_INFO1_LIVE=tqOxIKe9BCM; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgEQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /vi_webp/NBEWfKH702s/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/img/favicon.ico HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /pd.js HTTP/1.1Host: pi.pardot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=114357&account_id=866552&title=Quinn%20Emanuel%20Trial%20Lawyers%20-%20Quinn%20Emanuel%20Urquhart%20%26%20Sullivan%2C%20LLP&url=https%3A%2F%2Fwww.quinnemanuel.com%2F&referrer= HTTP/1.1Host: pi.pardot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/eSnzhoiLwx8/default.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/Kwl4UTqRlZdwo60dxzGVsyg_CEkasAzkebPPx38d0Do.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=eFfo6MFZeKzMjvh75uRBO59bN-utcN8_Y6mHqxiVtWEXy7mQfYil-Pbb_z3X3oLOgc_-DCXffxO-aYZowjbLJJu8qjCgMZeg-OLJcnLnfcgOVY-7-DCMjBih_yi0CaUb5L7SuHBMMwG8N39mCetcJ46JEW8iDVGbGDcyTAO3lIl-S3FX28_DXfZSGgs
Source: global traffic	HTTP traffic detected: GET /analytics?conly=true&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Quinn%20Emanuel%20Trial%20Lawyers%20-%20Quinn%20Emanuel%20Urquhart%20&%20Sullivan,%20LLP&url=https://www.quinnemanuel.com/&referrer= HTTP/1.1Host: news.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /vi/JCcqzCo7X-M/default.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/pD218Mqhqms/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd.js HTTP/1.1Host: pi.pardot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; lpv865552=aHR0cHM6Ly93d3cucXVpbm5lbWFudWVsLmNvbS8%3D
Source: global traffic	HTTP traffic detected: GET /dist/img/favicon.ico HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
Source: global traffic	HTTP traffic detected: GET /analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=114357&account_id=866552&title=Quinn%20Emanuel%20Trial%20Lawyers%20-%20Quinn%20Emanuel%20Urquhart%20%26%20Sullivan%2C%20LLP&url=https%3A%2F%2Fwww.quinnemanuel.com%2F&referrer= HTTP/1.1Host: pi.pardot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; lpv865552=aHR0cHM6Ly93d3cucXVpbm5lbWFudWVsLmNvbS8%3D
Source: global traffic	HTTP traffic detected: GET /analytics?conly=true&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Quinn%20Emanuel%20Trial%20Lawyers%20-%20Quinn%20Emanuel%20Urquhart%20&%20Sullivan,%20LLP&url=https://www.quinnemanuel.com/&referrer= HTTP/1.1Host: news.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
Source: global traffic	HTTP traffic detected: GET /offices/doha/ HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
Source: global traffic	HTTP traffic detected: GET /dist/css/style.css?v=638633793483684870 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.quinnemanuel.com/offices/doha/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
Source: global traffic	HTTP traffic detected: GET /dist/css/app.css?v=638633793483684870 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.quinnemanuel.com/offices/doha/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
Source: global traffic	HTTP traffic detected: GET /dist/js/app.js?v=638633793483684870 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/offices/doha/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
Source: global traffic	HTTP traffic detected: GET /scripts/jquery.mCustomScrollbar.js?v=638633793483684870 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/offices/doha/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
Source: global traffic	HTTP traffic detected: GET /media/oo2oek0r/doha-map.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/offices/doha/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
Source: global traffic	HTTP traffic detected: GET /media/3vod5e3y/james-bremen-2_540x810.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/offices/doha/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; _gat_gtag_UA_17720203_1=1; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
Source: global traffic	HTTP traffic detected: GET /media/ypod3mun/doha-officedetail-desktop-x1.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/offices/doha/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
Source: global traffic	HTTP traffic detected: GET /dist/img/down-arrow.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/dist/css/app.css?v=638633793483684870Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
Source: global traffic	HTTP traffic detected: GET /dist/img/dowanload.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/offices/doha/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _ga_MXPGK97YYN=GS1.1.1727807617.1.0.1727807617.60.0.0; _ga=GA1.2.655236864.1727807618; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33
Source: global traffic	HTTP traffic detected: GET /config/quinnemanuel.com/config.json?page=%2Foffices%2Fdoha%2F HTTP/1.1Host: cdn.acsbapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.quinnemanuel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.quinnemanuel.com/offices/doha/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics?ver=3&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Doha%20%7C%20Quinn%20Emanuel%20Urquhart%20%26%20Sullivan%2C%20LLP&url=https%3A%2F%2Fwww.quinnemanuel.com%2Foffices%2Fdoha%2F&referrer= HTTP/1.1Host: pi.pardot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/offices/doha/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; lpv865552=aHR0cHM6Ly93d3cucXVpbm5lbWFudWVsLmNvbS8%3D
Source: global traffic	HTTP traffic detected: GET /scripts/jquery.mCustomScrollbar.js?v=638633793483684870 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /dist/js/app.js?v=638633793483684870 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /analytics?conly=true&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Doha%20\|%20Quinn%20Emanuel%20Urquhart%20&%20Sullivan,%20LLP&url=https://www.quinnemanuel.com/offices/doha/&referrer= HTTP/1.1Host: news.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/offices/doha/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /config/quinnemanuel.com/config.json?page=%2Foffices%2Fdoha%2F HTTP/1.1Host: cdn.acsbapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/oo2oek0r/doha-map.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /media/3vod5e3y/james-bremen-2_540x810.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /media/ypod3mun/doha-officedetail-desktop-x1.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /dist/img/dowanload.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /dist/img/down-arrow.svg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /analytics?ver=3&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Doha%20%7C%20Quinn%20Emanuel%20Urquhart%20%26%20Sullivan%2C%20LLP&url=https%3A%2F%2Fwww.quinnemanuel.com%2Foffices%2Fdoha%2F&referrer= HTTP/1.1Host: pi.pardot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; lpv865552=aHR0cHM6Ly93d3cucXVpbm5lbWFudWVsLmNvbS9vZmZpY2VzL2RvaGEv
Source: global traffic	HTTP traffic detected: GET /analytics?conly=true&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Doha%20\|%20Quinn%20Emanuel%20Urquhart%20&%20Sullivan,%20LLP&url=https://www.quinnemanuel.com/offices/doha/&referrer= HTTP/1.1Host: news.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /offices/dallas/ HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /dist/css/style.css?v=638633793696690455 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.quinnemanuel.com/offices/dallas/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /dist/css/app.css?v=638633793696690455 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.quinnemanuel.com/offices/dallas/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /dist/js/app.js?v=638633793696690455 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/offices/dallas/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /scripts/jquery.mCustomScrollbar.js?v=638633793696690455 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/offices/dallas/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /media/p4ykb44q/office-detail-map-1.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/offices/dallas/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /media/ungb5yj0/ellie_015.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/offices/dallas/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /media/qzokeaqy/dallas-desktop.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/offices/dallas/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /media/p2eh50z4/will-thompson-0862-hi-res.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.quinnemanuel.com/offices/dallas/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807679.60.0.0; _ga=GA1.2.655236864.1727807618; _gat_gtag_UA_17720203_1=1
Source: global traffic	HTTP traffic detected: GET /config/quinnemanuel.com/config.json?page=%2Foffices%2Fdallas%2F HTTP/1.1Host: cdn.acsbapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.quinnemanuel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.quinnemanuel.com/offices/dallas/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/jquery.mCustomScrollbar.js?v=638633793696690455 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _gat_gtag_UA_17720203_1=1; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807701.38.0.0; _ga=GA1.2.655236864.1727807618
Source: global traffic	HTTP traffic detected: GET /dist/js/app.js?v=638633793696690455 HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _gat_gtag_UA_17720203_1=1; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807701.38.0.0; _ga=GA1.2.655236864.1727807618
Source: global traffic	HTTP traffic detected: GET /media/p4ykb44q/office-detail-map-1.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _gat_gtag_UA_17720203_1=1; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807701.38.0.0; _ga=GA1.2.655236864.1727807618
Source: global traffic	HTTP traffic detected: GET /config/quinnemanuel.com/config.json?page=%2Foffices%2Fdallas%2F HTTP/1.1Host: cdn.acsbapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/ungb5yj0/ellie_015.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _gat_gtag_UA_17720203_1=1; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807701.38.0.0; _ga=GA1.2.655236864.1727807618
Source: global traffic	HTTP traffic detected: GET /media/qzokeaqy/dallas-desktop.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _gat_gtag_UA_17720203_1=1; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807701.38.0.0; _ga=GA1.2.655236864.1727807618
Source: global traffic	HTTP traffic detected: GET /media/p2eh50z4/will-thompson-0862-hi-res.jpg HTTP/1.1Host: www.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _gat_gtag_UA_17720203_1=1; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807701.38.0.0; _ga=GA1.2.655236864.1727807618
Source: global traffic	HTTP traffic detected: GET /analytics?ver=3&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Dallas%20%7C%20Quinn%20Emanuel%20Urquhart%20%26%20Sullivan%2C%20LLP&url=https%3A%2F%2Fwww.quinnemanuel.com%2Foffices%2Fdallas%2F&referrer= HTTP/1.1Host: pi.pardot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/offices/dallas/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; lpv865552=aHR0cHM6Ly93d3cucXVpbm5lbWFudWVsLmNvbS9vZmZpY2VzL2RvaGEv
Source: global traffic	HTTP traffic detected: GET /analytics?conly=true&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Dallas%20\|%20Quinn%20Emanuel%20Urquhart%20&%20Sullivan,%20LLP&url=https://www.quinnemanuel.com/offices/dallas/&referrer= HTTP/1.1Host: news.quinnemanuel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.quinnemanuel.com/offices/dallas/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _gat_gtag_UA_17720203_1=1; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807701.38.0.0; _ga=GA1.2.655236864.1727807618
Source: global traffic	HTTP traffic detected: GET /analytics?ver=3&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Dallas%20%7C%20Quinn%20Emanuel%20Urquhart%20%26%20Sullivan%2C%20LLP&url=https%3A%2F%2Fwww.quinnemanuel.com%2Foffices%2Fdallas%2F&referrer= HTTP/1.1Host: pi.pardot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; lpv865552=aHR0cHM6Ly93d3cucXVpbm5lbWFudWVsLmNvbS9vZmZpY2VzL2RhbGxhcy8%3D
Source: global traffic	HTTP traffic detected: GET /analytics?conly=true&visitor_id=1743662215&visitor_id_sign=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33&pi_opt_in=&campaign_id=114357&account_id=866552&title=Dallas%20\|%20Quinn%20Emanuel%20Urquhart%20&%20Sullivan,%20LLP&url=https://www.quinnemanuel.com/offices/dallas/&referrer= HTTP/1.1Host: news.quinnemanuel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.29743531.1727807616; _gid=GA1.2.234058135.1727807618; visitor_id865552=1743662215; visitor_id865552-hash=4ca7630ca0099c3f2a1897d404db6ad428b74d5cd3139e4d66ff5d48b360f179a83ca2d6fbfe49b70bb95fe6a08870412267ff33; _gat_gtag_UA_17720203_1=1; _ga_MXPGK97YYN=GS1.1.1727807617.1.1.1727807701.38.0.0; _ga=GA1.2.655236864.1727807618
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: quinnemanuel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: quinnemanuel.com
Source: global traffic	DNS traffic detected: DNS query: www.quinnemanuel.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: static.srcspot.com
Source: global traffic	DNS traffic detected: DNS query: img.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: cdn.mouseflow.com
Source: global traffic	DNS traffic detected: DNS query: acsbapp.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.acsbapp.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: pi.pardot.com
Source: global traffic	DNS traffic detected: DNS query: news.quinnemanuel.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_278.2.dr	String found in binary or memory: <iframe class='embed-responsive-item' src='https://www.youtube.com/embed/JCcqzCo7X-M?&autoplay=0&rel=0' allowfullscreen></iframe> equals www.youtube.com (Youtube)
Source: chromecache_278.2.dr	String found in binary or memory: <iframe class='embed-responsive-item' src='https://www.youtube.com/embed/NBEWfKH702s?&autoplay=0&rel=0' allowfullscreen></iframe> equals www.youtube.com (Youtube)
Source: chromecache_278.2.dr	String found in binary or memory: <iframe class='embed-responsive-item' src='https://www.youtube.com/embed/eSnzhoiLwx8?&autoplay=0&rel=0' allowfullscreen></iframe> equals www.youtube.com (Youtube)
Source: chromecache_278.2.dr	String found in binary or memory: <a id="popup10001_open" id="aLinkHomeCOVIdVideo" href="javascript:;" data-toggle="modal" data-target="#popup10001" class="spot-box covid-video-box popup10001_open" role="button" data-src="https://www.youtube.com/embed/pD218Mqhqms?&autoplay=0&rel=0"> equals www.youtube.com (Youtube)
Source: chromecache_278.2.dr	String found in binary or memory: <a role="button" data-toggle="modal" data-target="#popup28597_open" href="javascript:;" data-src="https://www.youtube.com/embed/JCcqzCo7X-M"> equals www.youtube.com (Youtube)
Source: chromecache_278.2.dr	String found in binary or memory: <a role="button" data-toggle="modal" data-target="#popup28621_open" href="javascript:;" data-src="https://www.youtube.com/embed/NBEWfKH702s"> equals www.youtube.com (Youtube)
Source: chromecache_278.2.dr	String found in binary or memory: <a role="button" data-toggle="modal" data-target="#popup33708_open" href="javascript:;" data-src="https://www.youtube.com/embed/eSnzhoiLwx8"> equals www.youtube.com (Youtube)
Source: chromecache_278.2.dr	String found in binary or memory: <iframe class="embed-responsive-item" src="https://www.youtube.com/embed/pD218Mqhqms?&autoplay=0&rel=0" allowscriptaccess="always" allow="autoplay"></iframe> equals www.youtube.com (Youtube)
Source: chromecache_278.2.dr	String found in binary or memory: $(this).find('.embed-responsive-item').attr('src', "https://www.youtube.com/embed/pD218Mqhqms"); equals www.youtube.com (Youtube)
Source: chromecache_278.2.dr	String found in binary or memory: $(this).find('.embed-responsive-item').attr('src', "https://www.youtube.com/embed/pD218Mqhqms?autoplay=1&modestbranding=0&showinfo=0"); equals www.youtube.com (Youtube)
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: (g.tk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.tk(c,"www.youtube.com"),d=c.toString()):(c=ewa(d),lE(c)&&(d=c));c=new g.ZL(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: 0?"http":"https";this.Ca=kE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|kE(this.mf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=ks(d,h,DJa):h&&(d="embedded");this.Ja=d;Mqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(EJa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.K=g.Vb(EJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: <div class="social-icons"><a rel="noopener" href="https://www.youtube.com/channel/UCuAVJTZ1TkX9gPmf5ciJSjA" target="_blank"><img src="/images/YouTube.svg" alt="YouTube" /></a> <a rel="noopener" href="https://www.facebook.com/QETrialLawyers/" target="_blank"><img src="/images/facebook-icon.svg" alt="Facebook" /></a> <a rel="noopener" href="https://twitter.com/quinnemanuel" target="_blank"><img src="/images/twitter-icon.svg" alt="Twitter" /></a> <a rel="noopener" href="https://www.instagram.com/quinnemanuel/" target="_blank"><img src="/images/insta-icon.svg" alt="Instagram" /></a> <a rel="noopener" href="https://www.linkedin.com/company/quinn-emanuel/" target="_blank"><img src="/images/linkedin-icon.svg" alt="Linkedin" /></a></div> equals www.facebook.com (Facebook)
Source: chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: <div class="social-icons"><a rel="noopener" href="https://www.youtube.com/channel/UCuAVJTZ1TkX9gPmf5ciJSjA" target="_blank"><img src="/images/YouTube.svg" alt="YouTube" /></a> <a rel="noopener" href="https://www.facebook.com/QETrialLawyers/" target="_blank"><img src="/images/facebook-icon.svg" alt="Facebook" /></a> <a rel="noopener" href="https://twitter.com/quinnemanuel" target="_blank"><img src="/images/twitter-icon.svg" alt="Twitter" /></a> <a rel="noopener" href="https://www.instagram.com/quinnemanuel/" target="_blank"><img src="/images/insta-icon.svg" alt="Instagram" /></a> <a rel="noopener" href="https://www.linkedin.com/company/quinn-emanuel/" target="_blank"><img src="/images/linkedin-icon.svg" alt="Linkedin" /></a></div> equals www.linkedin.com (Linkedin)
Source: chromecache_278.2.dr, chromecache_167.2.dr, chromecache_173.2.dr	String found in binary or memory: <div class="social-icons"><a rel="noopener" href="https://www.youtube.com/channel/UCuAVJTZ1TkX9gPmf5ciJSjA" target="_blank"><img src="/images/YouTube.svg" alt="YouTube" /></a> <a rel="noopener" href="https://www.facebook.com/QETrialLawyers/" target="_blank"><img src="/images/facebook-icon.svg" alt="Facebook" /></a> <a rel="noopener" href="https://twitter.com/quinnemanuel" target="_blank"><img src="/images/twitter-icon.svg" alt="Twitter" /></a> <a rel="noopener" href="https://www.instagram.com/quinnemanuel/" target="_blank"><img src="/images/insta-icon.svg" alt="Instagram" /></a> <a rel="noopener" href="https://www.linkedin.com/company/quinn-emanuel/" target="_blank"><img src="/images/linkedin-icon.svg" alt="Linkedin" /></a></div> equals www.twitter.com (Twitter)
Source: chromecache_173.2.dr	String found in binary or memory: <div class="social-icons"><a rel="noopener" href="https://www.youtube.com/channel/UCuAVJTZ1TkX9gPmf5ciJSjA" target="_blank"><img src="/images/YouTube.svg" alt="YouTube" /></a> <a rel="noopener" href="https://www.facebook.com/QETrialLawyers/" target="_blank"><img src="/images/facebook-icon.svg" alt="Facebook" /></a> <a rel="noopener" href="https://twitter.com/quinnemanuel" target="_blank"><img src="/images/twitter-icon.svg" alt="Twitter" /></a> <a rel="noopener" href="https://www.instagram.com/quinnemanuel/" target="_blank"><img src="/images/insta-icon.svg" alt="Instagram" /></a> <a rel="noopener" href="https://www.linkedin.com/company/quinn-emanuel/" target="_blank"><img src="/images/linkedin-icon.svg" alt="Linkedin" /></a></div> equals www.youtube.com (Youtube)
Source: chromecache_193.2.dr	String found in binary or memory: IIa=function(a,b){if(!a.j["0"]){var c=new XF("0","fakesb",{video:new TF(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new qN(new g.ZL("http://www.youtube.com/videoplayback"),c,"fake"):new HN(new g.ZL("http://www.youtube.com/videoplayback"),c,new bN(0,0),new bN(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_193.2.dr	String found in binary or memory: Ko.prototype.Ia=function(){return this.C};var gna=(new Date).getTime();var tla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),ula=/\bocr\b/;var wla=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var Qab=0,Rab=0,Sab=0;var To;g.Mo=null;g.Oo=!1;g.Uo=1;To=Symbol("SIGNAL");g.Vo={version:0,s_:0,Pm:!1,eg:void 0,Ry:void 0,Cn:void 0,ML:0,hj:void 0,Pu:void 0,XE:!1,pP:!1,P1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_193.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Wi(a,{hl:d})),this.Dd(sY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Dd(g.qY(a.errorMessage)):this.Dd(sY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Wi(c, equals www.youtube.com (Youtube)
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,FF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Gd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Kt)(),jT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Gd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_193.2.dr	String found in binary or memory: a.ismb);this.bq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=uP(this.Ca)\|\|"www.youtube.com")):r="video.google.com";this.Sn=r;vP(this,a,!0);this.La=new QO;g.P(this,this.La);q=b?b.innertubeApiKey:ms("",a.innertube_api_key);p=b?b.innertubeApiVersion:ms("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:ms("",a.innertube_context_client_version);q=g.br("INNERTUBE_API_KEY")\|\|q;p=g.br("INNERTUBE_API_VERSION")\|\|p;l=g.br("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=JO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.zP(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.FR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.CE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: g.MP=function(a){var b=g.zP(a);OJa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_193.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.zP(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.qP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),cu&&(a=Xma())&&(b.ebc=a));return g.Wi(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: g.zP=function(a){a=uP(a.Ca);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_299.2.dr, chromecache_281.2.dr, chromecache_165.2.dr, chromecache_172.2.dr, chromecache_266.2.dr, chromecache_282.2.dr, chromecache_191.2.dr, chromecache_157.2.dr	String found in binary or memory: return b}IC.F="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: this.Y.Aa&&(a.authuser=this.Y.Aa);this.Y.pageId&&(a.pageid=this.Y.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.Bb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(LO(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.oa=!1);b="";g.nO(this.B)?mO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_220.2.dr, chromecache_193.2.dr	String found in binary or memory: var E2={};var Ndb={Fs:[{Es:/Unable to load player module/,weight:20},{Es:/Failed to fetch/,weight:500},{Es:/XHR API fetch failed/,weight:10},{Es:/JSON parsing failed after XHR fetch/,weight:10},{Es:/Retrying OnePlatform request/,weight:10},{Es:/CSN Missing or undefined during playback association/,weight:100},{Es:/Non-recoverable error. Do not retry./,weight:0},{Es:/Internal Error. Retry with an exponential backoff./,weight:0},{Es:/API disabled by application./,weight:0}],Lr:[{callback:K7a,weight:500}]};var X7a=/[&\?]action_proxy=1/,W7a=/[&\?]token=([\w-])/,Y7a=/[&\?]video_id=([\w-])/,Z7a=/[&\?]index=([\d-])/,$7a=/[&\?]m_pos_ms=([\d-])/,b8a=/[&\?]vvt=([\w-]*)/,O7a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),a8a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),R7a={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_165.2.dr, chromecache_282.2.dr	String found in binary or memory: var XB=function(a,b,c,d,e){var f=Oz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Oz("fsl","nv.ids",[]):Oz("fsl","ids",[]);if(!g.length)return!0;var k=Tz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!By(k,Dy(b, equals www.facebook.com (Facebook)

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://quinnemanuel.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Windows Analysis Report
http://quinnemanuel.com